The Short Version
- You own your data. Messages, mood entries, journal ? it's all yours. We store it encrypted so only you (and your therapist) can read it.
- We don't sell data. Not to advertisers, not to insurers, not to anyone. Ever.
- Delete anytime. One click removes everything. No backups kept.
- End-to-end encrypted. Therapy chats are encrypted. We cannot read them.
- Minimal collection. We only collect what's needed to provide the service.
What We Collect
Account Information
Email address (for login and notifications), display name (optional), password hash (bcrypt, we never see your actual password).
Therapy Content
Messages with your therapist, session notes your therapist writes, any files you share. All end-to-end encrypted.
Self-Help Data
Mood check-in responses, journal entries, meditation history, community posts. Encrypted at rest.
Usage Analytics
Anonymous, aggregated usage patterns (feature adoption, crash reports). No personal identifiers. You can opt out in settings.
Technical Data
IP address (for security/fraud prevention), device type, browser version, timestamps. Retained 30 days max.
How We Use Your Data
- Provide the service (matching, messaging, scheduling, mood tracking)
- Safety: crisis detection, mandatory reporting where legally required under Indian law
- Improve the product (anonymous, aggregated analytics only)
- Legal compliance (court orders, regulatory requirements under IT Act, DPDP Act)
- Communicate with you (session reminders, security alerts, optional marketing)
Encryption & Security
- In transit: TLS 1.3 everywhere
- At rest: AES-256 for all stored data
- End-to-end: Therapy messages use libsodium sealed boxes ? we literally cannot decrypt them
- Keys: Derived from your password via Argon2id. We never see your keys.
- Hosting: AWS Mumbai region (India) ? data stays in India
Your Rights (DPDP Act 2023 / IT Act 2000 / GDPR)
- Access: Request a copy of all data we hold about you
- Rectification: Correct inaccurate data
- Erasure: Delete your account and all data ? one click in settings
- Portability: Export everything (JSON, PDF) anytime
- Restriction: Limit how we process your data
- Objection: Opt out of analytics, marketing
- Withdraw consent: For any processing based on consent
Contact our Data Protection Officer: dpo@illuminateai.com
Data Retention
- Active account data: retained while account exists
- Deleted account data: purged within 24 hours (no backups)
- Security logs (IP, login): 30 days
- Crisis safety records: retained per legal mandate (IT Act, POCSO, etc.)
Third Parties (Sub-processors in India)
We use minimal subprocessors: cloud hosting (AWS Mumbai), email delivery (SendGrid India), SMS/OTP (Twilio India for 2FA only). All under Data Processing Agreements. No data shared for advertising. No cross-border transfers without adequate safeguards.
Changes to This Policy
We'll notify you 30 days before any material change via email and in-app banner. Your continued use constitutes acceptance.
Contact
Questions about privacy? Email privacy@illuminateai.com or our DPO at dpo@illuminateai.com.