1. Our Privacy Guarantee
We operate on a simple principle: We do not sell, rent, license, or share your personal health information (PHI) with any advertising networks, data brokers, insurance providers, or employers.
Our business is powered by user subscriptions, not by selling user analytics. This aligns our incentives directly with protecting your privacy.
2. Data Collection and Usage
We collect only the data necessary to provide accurate forecasting, cycle syncing, and Sakhi AI wellness conversations:
- Account Data: Name, email address, password hashes, and registration preferences. Used to verify access and process waitlist spots.
- Hormonal & Cycle Metrics: Menstrual start/end dates, flow intensity, basal body temperature (BBT), LH/OPK test results, cervical mucus type, and symptom logs (acne, cramping, mood, headaches). Used to train cycle algorithms.
- Sakhi AI Conversations: Queries submitted to our advisor. Chats are de-identified before processing and stored using separate cryptographic keys.
3. Encryption and Security Architecture
We employ enterprise-grade cryptographic methods to defend against data breaches:
- In-Transit: All connections use TLS 1.3 protocol.
- At-Rest: User databases are encrypted using AES-256 field-level encryption.
- Key Management: Encryption keys are locked inside secure Hardware Security Modules (HSM) with zero persistent exposure in software.
- Zero-Knowledge: Individual cycle profiles cannot be mapped or read by our engineering teams. Data analysis for systemic improvements uses only aggregated, anonymized trends.
4. Compliance Frameworks
Our practices are architected around the strictest global regulatory rules:
- HIPAA (USA): Health data boundaries with audit tracking logs.
- DPDP Act 2023 (India): Clear consent, right of deletion, and local residency of databases inside India.
- GDPR (Europe): Absolute right of portability and right to be forgotten.
5. Data Deletion and Portability
You own your data. You may download a clean backup of your tracking history at any time or request complete account erasure. We commit to executing deletion requests across all active databases and cold storage backups within 14 business days.
6. Policy Updates
We will notify waitlist and app users of any structural changes to this policy via email. Your continued consent is required to process data under updated terms.
7. Contact Privacy Team
For inquiries, data audit requests, or to withdraw processing consent, contact us at care@mysakhicare.in.