Privacy Policy

CalmKiBaat is operated by Ankit Pandey, an individual. This policy explains how we ("we", "us") collect and use your personal data on CalmKiBaat. It is written to meet the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, and the Information Technology Act, 2000 with its Reasonable Security Practices and Sensitive Personal Data or Information Rules, 2011. CalmKiBaat is meant only for adults (18+) in India. Last updated: 8 October 2026.

1. Who is responsible for your data

CalmKiBaat is operated by Ankit Pandey, an individual. He is the Data Fiduciary for CalmKiBaat. Contact: support@calmkibaat.com. Grievance Officer: Ankit Pandey (grievance@calmkibaat.com).

Contact for personal data questions

Ankit Pandey — grievance@calmkibaat.com

2. What we collect

• Account data: email address, password (stored only as a secure hash), a private alias, preferred language and an optional age range.

• Sensitive personal data (health and sexual-wellness information): assessment answers, daily check-ins (mood, stress, energy, confidence, sleep and notes), program progress, AI Coach conversations, and community questions and replies.

• Technical data: secure session cookies, IP address (for security and abuse prevention) and basic usage events (for example "lesson completed"). Usage events never contain your community text or check-in notes.

We do NOT ask for your real name, phone number, Aadhaar, location, photos or payment details. The service is completely free.

3. Why we use it

• To provide the service you asked for: your wellness profile, recommended program, progress tracking, AI Coach replies and the anonymous community.

• To keep the community safe: automated and human moderation to remove personal details, harmful content and misinformation.

• To keep accounts secure and prevent abuse, and to comply with Indian law.

We use your sensitive personal data only on the basis of your free, specific and clear consent, given through separate tick-boxes before you sign up or take the assessment. Security and legal compliance may also rely on the "legitimate uses" allowed by Section 7 of the DPDP Act. We never sell your data and never share it for advertising.

4. Your consent and how to withdraw it

You can withdraw consent at any time, as easily as you gave it: go to Profile → Data controls → Delete account, or email grievance@calmkibaat.com. Withdrawing consent means we can no longer provide the personalised parts of the service, and we will erase your data as described below. Withdrawal does not affect processing that happened before it.

5. Who processes data on our behalf

We use a small number of trusted service providers (Data Processors) under contract, only to run CalmKiBaat:

• AI provider (Anthropic Claude, via the Emergent platform): reads community posts, AI Coach messages and summaries to moderate content and write educational replies.

• Email delivery provider: sends verification, password-reset, grievance and review emails.

• Hosting and analytics provider (Emergent platform): hosts the website and database, and loads a basic site-usage analytics script.

Some of these providers may process data on servers outside India. Section 16 of the DPDP Act allows such transfers except to countries restricted by the Government of India, and we require our providers to protect your data at least to the standard in this policy.

6. What is public

In the community you appear only as "Anonymous #number", with an age range only if you choose to show it. Your email, alias and account ID are never shown publicly. Phone numbers, emails, links and social handles are automatically removed from posts.

7. How long we keep data

• Account, program, check-in, coach and community data: until you delete your account. Deletion removes it from our active systems immediately.

• Assessments taken without an account: automatically deleted after 90 days.

• Usage events: automatically deleted after 12 months.

• Security logs and grievance records: kept for up to 1 year and 3 years respectively, where Indian law requires it.

We may keep limited data longer only if a law, court or government order requires it.

8. Your rights

Under the DPDP Act you can: get a summary of your data and of who it was shared with; correct, complete or update it; erase it; get your grievances resolved; and nominate another person to exercise these rights if you die or are unable to. Download or delete your data any time from Profile → Data controls, or email grievance@calmkibaat.com for anything else. We will respond within the time limits set by law.

9. Security and data breaches

We use reasonable security practices in line with the IT Rules, 2011 and the DPDP Rules, 2025: encryption in transit (HTTPS), hashed passwords, secure http-only cookies, role-based admin access, rate limiting and access logging. If a personal data breach happens, we will inform affected users and the Data Protection Board of India without delay, and report to CERT-In within 6 hours where required.

10. Children

CalmKiBaat is only for adults aged 18 and over. We do not knowingly process data of anyone under 18. If we learn that a child has created an account or taken the assessment, we will delete that data.

11. Cookies

We use essential cookies to keep you signed in securely. These cannot be switched off without logging out. Your language choice and assessment result are stored only in your own browser. Our hosting platform also loads a basic site-usage analytics script.

12. Grievances and complaints

Grievance Officer: Ankit Pandey. Email: grievance@calmkibaat.com. You can also use the form on our Grievance page. We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied, you may complain to the Data Protection Board of India.

13. Changes to this policy

If we make important changes we will update the date above and ask for your consent again where the law requires it.