Privacy Policy & Child Data Protection
Last Updated: September 2026 • Governing Law: Digital Personal Data Protection (DPDP) Act 2023, India
Our Core Privacy Commitment to Indian Parents
Neurosaathi is built exclusively for special needs families. We recognize that your child's developmental milestones, clinical evaluations, CARS-2 scores, and sensory triggers represent deeply confidential health information. We do not sell, rent, or monetize your child's data. We do not run third-party behavioral advertising or tracking cookies.
1. Verifiable Parental Consent (DPDP Section 9)
In compliance with Section 9 of the Digital Personal Data Protection Act 2023, Neurosaathi mandates verifiable parental or lawful guardian consent before processing any personal data of children under the age of 18. By accessing our Child Development Passport or AI Sidekick, the registered parent or guardian confirms they possess lawful legal custody.
2. Data We Collect & How It Is Used
- Developmental Profile Data: Child name, age band, condition categories, sensory sensitivities, known triggers, and calming strategies stored in your Child Passport to personalize daily routines and school letters.
- Clinical Assessment Vault Records: Diagnostic report metadata (e.g. CARS-2, ADOS-2, OT evaluations) entered or uploaded by you. Files are stored within encrypted client containers and synced strictly to your private authenticated Firestore profile.
- AI Companion Interactions: Natural language questions sent to Ask Saathi. Data is processed transiently to generate clinical care suggestions and is never retained for foundational public model training.
- Account & Contact Identifiers: Email address, parent name, or mobile number for account authentication and OTP verification.
3. Security, Encryption & Cloud Infrastructure
All data in transit is encrypted using modern TLS 1.3 encryption. Cloud databases are hosted within Google Cloud Platform (GCP) and Firebase Mumbai region (`asia-south1`) to adhere to Indian data sovereignty requirements. Access control rules ensure that only authenticated parents can read or modify their child's developmental passport.
4. Your Rights: Access, Correction & Erasure
Under the DPDP Act 2023, you have the absolute right to:
- Request a full export of all child observations and clinical records on file.
- Modify or delete any diagnostic assessment, progress report, or sensory sensitivity profile at any time.
- Request permanent account deletion and data scrubbing by contacting our Grievance Officer.
5. Grievance Redressal Officer (DPDP Act Compliance)
If you have any questions, concerns, or grievances regarding the processing of your child's personal data, please contact our designated Data Protection Officer:
Grievance Officer: Neurosaathi Data Protection Cell
Email: privacy@neurosaathi.com
Location: Bengaluru, Karnataka, India
Response Timeline: Within 48 business hours as per statutory Indian guidelines.