Privacy policy
AbleMinds Foundation ("AbleMinds", "we") runs therapy centres in Delhi, India. This policy explains what personal data we collect through the AbleMinds Parents app and our clinic system, why we collect it, and your rights under India's Digital Personal Data Protection Act, 2023.
Who is responsible
AbleMinds Foundation, Delhi, India, is the data fiduciary for your data. Contact us at support@ablemindsfoundation.org.
What we collect
About you (parent or guardian):
- Name, relationship to the child, age, occupation, email address, mobile number and postal address, given to our reception team when your child joins
- Your password, stored only in a scrambled form (a hash) that nobody, including us, can read
- A scrambled identifier for each phone you've signed in on, so we only ask for a code on new phones
- Records of sign-ins and security events, such as wrong passwords
- A notification token for your phone, if you allow notifications
About your child:
- Name, date of birth, gender and school
- Medical information you share with us: diagnosis, other conditions, who referred your child, the doctor and clinic they last saw and when, and whether there is a disability in the family (which one, and the family member's relationship to the child)
- Therapy programme, session schedule and attendance
- Monthly therapy plans: each month's goals for your child's therapies and the therapists' progress notes on how the month went
- Therapists' session notes, assessments, activities, homework and progress reports
Payments: packages, receipts and payment records. The app does not take payments, and we never collect card or bank details through it.
What we don't do
- We don't sell or rent personal data.
- We don't show ads, and we don't use advertising or tracking tools in the app or on this website.
- We don't use your data to profile you.
Why we use it
- To provide therapy and manage your child's sessions
- To share session notes, progress reports and receipts with you
- To keep your account secure, including sending sign-in codes
- To send you notifications about sessions and new reports. Notifications never include clinical, contact or payment details.
- To meet our legal duties, including clinical-record and tax rules
Children's data
The children we care for are minors. We collect a child's data only with the consent of their parent or legal guardian, given when the child joins. Only the child's linked parents or guardians, our reception team, management and the child's own therapists can see their records.
Who we share it with
We share data only with services that help us run the app, under contracts that limit how they can use it:
- Amazon Web Services, which hosts our systems and sends our emails and text messages, in India
- Google Firebase Cloud Messaging, which delivers notifications to your phone
- Indian telecom operators, which deliver text messages
We may also share data where the law requires it, for example with a court or a government authority.
Where it's stored
Your data is stored in India.
How we protect it
- Data is encrypted in transit and at rest.
- Staff see only what their role needs, and sensitive actions are recorded in an audit log.
- Sign-in uses passwords plus one-time codes on new phones.
- Backups are encrypted and kept separately from our main systems.
How long we keep it
- Your child's therapy records: 7 years after your child's last session
- Receipts and payment records: as long as GST law requires (about 6 years after the related annual return)
- Security logs: at least 180 days
- Your app account: until you ask us to delete it, or until your child stops attending
When these periods end, we permanently delete the data.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of the personal data we hold about you and your child
- ask us to correct, complete or update it
- withdraw consent and ask us to delete it, except records we must keep by law (see Delete your account)
- nominate someone to use these rights for you if you die or become unable to
- raise a grievance with us
To use any of these rights, email support@ablemindsfoundation.org. We'll reply within 30 days.
Grievances
If you're unhappy with how we've handled your data, email our Grievance Officer at support@ablemindsfoundation.org with the subject Privacy grievance. If we don't resolve it, you can complain to the Data Protection Board of India.
Changes to this policy
If we change this policy, we'll update the date above and, for significant changes, tell you in the app.