Privacy Policy

1. Introduction

Menorah Health (“we,” “our,” or “us”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mental health support platform, including our mobile application and website.

We are committed to complying with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable data protection laws in India.

2. Lawful Basis and Consent

By using our services, you provide explicit consent for us to collect and process your personal information as described in this Privacy Policy. You may withdraw your consent at any time by contacting us or deleting your account.

3. Information We Collect

3.1 Personal Information

We may collect the following personal information:

• Name and contact information (email, phone number)
• Age and demographic information
• Account credentials and profile information
• Communication preferences

3.2 Usage Information

We automatically collect certain information when you use our services:

• Device information (device type, operating system, browser)
• Usage patterns and app interactions
• IP address and location data (general location only)
• Log files and analytics data

3.3 Sensitive Information

4. How We Use Your Information

We use your personal information for the following purposes:

• Provide and maintain our mental health support services
• Connect you with appropriate peer supporters and resources
• Personalize your experience and content
• Send important updates and notifications
• Improve our services and develop new features
• Ensure platform security and prevent abuse
• Comply with legal obligations

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for 30 days after deletion
• Chat Logs: Retained for 90 days for quality assurance and safety purposes
• Analytics Data: Retained for 2 years in anonymized form
• Legal Records: Retained as required by applicable laws

6. Children's Data Protection

7. Your Rights Under DPDP Act

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

7.1 Right to Access

You have the right to access and obtain a copy of your personal information that we hold.

7.2 Right to Correction

You can request correction of inaccurate or incomplete personal information.

7.3 Right to Erasure

You have the right to request deletion of your personal information, subject to certain legal exceptions.

7.4 Right to Nomination

You can nominate another individual to exercise your rights in the event of your death or incapacity.

7.5 Right to Withdraw Consent

You can withdraw your consent for data processing at any time.

7.6 Right to Grievance Redressal

You have the right to file a complaint with our Grievance Officer or the Data Protection Board.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

• End-to-end encryption for sensitive communications
• Secure data centers with physical and digital security
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy
• Incident response procedures

9. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our platform
• Legal Requirements: When required by law or to protect our rights and safety
• Emergency Situations: In emergency situations to protect your health and safety
• With Your Consent: When you explicitly consent to sharing

10. Cross-Border Data Transfers

Your personal information is primarily stored and processed in India. If we need to transfer your data outside India, we ensure adequate protection measures are in place as required by the DPDP Act.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and improve our services. You can control cookie settings through your browser preferences.

12. Grievance Officer

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our platform and updating the “Last updated” date.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: Menorahenquiries@gmail.com
• Address: India