Privacy Policy

Introduction

Welcome to SatKarya ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mental health support platform.

Your privacy is paramount. Given the sensitive nature of mental health discussions, we have implemented industry-leading security measures to protect your data.

Information We Collect

Account Information

• Email address (for account creation and notifications)
• Username (anonymized, you choose your own)
• Avatar selection
• Personality preferences (optional, for better AI support)

Content You Create

• Posts & Comments: Stored securely on our servers
• Private Diary: End-to-end encrypted on YOUR device — we cannot read it
• Chat with Manas: End-to-end encrypted on YOUR device — we cannot read it
• Mood Check-ins: Used to track your wellness journey

Automatically Collected Information

• Device fingerprint (for security and preventing abuse)
• IP address (for security purposes, not stored long-term)
• Usage patterns (anonymous analytics)

How We Use Your Information

• To provide and maintain our services
• To personalize your experience with Manas AI companion
• To moderate content for community safety
• To detect and prevent crisis situations
• To send important notifications (you can opt out)
• To improve our platform and AI responses

Data Encryption & Security

We take your security seriously:

• Diary & Chat Encryption: Uses TweetNaCl (NaCl) encryption. Your encryption key never leaves your device.
• Transport Security: All data is transmitted over HTTPS/TLS 1.3
• Database Security: Hosted on Supabase with row-level security policies
• Access Controls: Strict internal access policies for our team

AI & Content Moderation

To ensure community safety, we use AI-powered moderation:

• Content is analyzed for harmful patterns, hate speech, and crisis indicators
• AI systems (Google Perspective API, Vertex AI) help flag concerning content
• Human moderators review flagged content
• We detect and respond to crisis language to offer immediate support

Manas AI responses are generated by third-party AI services (OpenRouter, Groq, Google Gemini, NVIDIA). Your messages to Manas are processed by these services to generate responses, but are not stored by them for training purposes.

Data Sharing

We do NOT sell your personal data. We may share information with:

• Service Providers: Supabase (hosting), Vercel (deployment), Upstash (caching), Resend (email)
• AI Providers: For generating Manas responses and moderation
• Law Enforcement: Only when legally required or to prevent imminent harm

Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request account and data deletion
• Portability: Export your posts and diary entries
• Opt-out: Disable email notifications

To exercise these rights, contact us at privacy@satkarya.in

Data Retention

• Account Data: Retained until you delete your account
• Posts & Comments: Retained until deleted by you or moderation
• Private Diary: Stored locally encrypted; deleted if you clear browser data
• Crisis Events: Auto-deleted after 90 days
• Device Fingerprints: Retained for security purposes

Compliance

SatKarya complies with applicable Indian data protection laws including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act). We process personal data only for legitimate purposes as described in this policy.

Children's Privacy & Global Safeguards

Given the sensitive nature of peer support, SatKarya maintains strict compliance standards under global child protection regulations, including the United States Children's Online Privacy Protection Act (COPPA), the European Union General Data Protection Regulation (GDPR), and the Indian Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Jurisdiction-Specific Age Restrictions

• India (DPDP Act, 2023): Under Indian law, individuals under the age of 18 are classified as children. We strictly require verifiable parental or guardian consent for any user under 18 registering on our platform.
• European Economic Area & United Kingdom (GDPR): Processing of personal data of a child is lawful only if the child is at least 16 years old (or down to 13 years old depending on local member state legislation). Verifiable parental consent is required below these thresholds.
• United States & Rest of World (COPPA): We do not knowingly target or collect personal information from children under the age of 13 without verifiable parental consent.

2. Age Verification & Exclusion of Liability

To enforce these guidelines, we implement an explicit age-certification checkbox during signup. By creating an account, you represent and warrant that you are either of legal age in your country (18+ in India, 13/16+ globally) or have obtained explicit, verifiable consent from your parent or legal guardian.

Falsification of Age Disclaimer: If a minor bypasses our safeguards, falsifies their age, or registers on SatKarya without required parental or guardian consent, SatKarya and its operators are completely excluded from any liability for any data collection, activities, or interactions that occur prior to discovery.

3. Data Purge & Parental Control Rights

We do not knowingly maintain records of children who register without authorized consent. Upon receipt of valid notice or if we discover that a minor is using the platform in violation of these eligibility terms, we will immediately:

• Terminate the associated account and revoke all platform access.
• Permanently delete and purge all personal information, posts, and session metadata from our active servers and databases.

Parents or legal guardians who wish to review, modify, or request the immediate deletion of their child's personal information may contact our Data Protection Officer directly at privacy@satkarya.in.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. Your continued use of SatKarya after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: privacy@satkarya.in
• Support: Submit a support ticket