Privacy Policy

ParentPulse(“we”, “us”) provides a daily check-in service that helps families know their elderly loved ones are okay. Privacy is central to what we do: our subscribers trust us with their family’s information, and the people we check in on trust us to treat them with dignity. This policy explains what we collect, why, and the choices you have. It is designed to comply with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. Who this policy covers

• Account holders (“you”) — the family member who creates an account, configures check-ins, and pays for the subscription.
• Care recipients (“your parent”) — the person who receives check-in calls or messages. You must have their consent before adding them; we additionally confirm their consent on the first call and record that confirmation.

2. Information we collect

From account holders

• Name, email address, and password (stored as a secure hash)
• Your phone number (optional) — used only to call you when a parent triggers an SOS
• Device push-notification tokens, so we can alert you about missed check-ins
• Subscription and payment status (payments are processed by Razorpay; we never see or store your full card or bank details)

About care recipients (provided by you)

• Name, phone number, city, preferred language, chosen check-in method and time
• Medication names and reminder times, if you enable medicine reminders
• Emergency contact names and phone numbers you choose to add

Shared by your family

• Photos and captions you choose to post in the family-private “Moments” feed. These are visible only to members of your family dashboard, are stored privately, and are never used for anything else.

Generated by the service

• Check-in results (confirmed, pending, missed) and their timestamps
• SOS events: when one was triggered, confirmed, acknowledged and by whom
• Call and message delivery logs — kept so we can answer “why didn’t the call go through today?”
• Alert and escalation history

3. What we do NOT collect

• We do not record the content of check-in calls beyond the keypress response and the one-time consent confirmation.
• We do not track anyone’s location.
• We do not collect health records; medication reminders store only the names and times you enter.
• We do not sell personal data to anyone, ever.

4. How we use information

• To place daily check-in calls/messages and show you the results
• To send alerts when a check-in is missed
• To provide medicine reminders and weekly summaries
• To bill your subscription and provide support
• To debug delivery failures and keep the service reliable

We do not use your family’s data for advertising.

5. Who we share data with

Only the service providers needed to run ParentPulse, and only the minimum required:

• Telephony provider (e.g., Exotel) — the care recipient’s phone number, to place calls; regulated under Indian TRAI rules
• WhatsApp Business API provider / Meta — phone numbers of participants who choose WhatsApp check-ins
• Razorpay — your payment details, for subscription billing
• Supabase — our database and authentication hosting
• Expo — delivery of push notifications to your device
• Google Analytics — anonymous, aggregated website usage statistics, and only if you accept analytics cookies on our site

We may disclose information if required by Indian law or a valid legal process.

6. Cookies & website analytics

Our website uses a single analytics cookie (Google Analytics 4) to understand how visitors use the site — which pages are read, roughly where visitors come from — in aggregate. We do not use advertising cookies and we do not sell any data. Analytics only load after you acceptvia the cookie banner; if you decline, no analytics cookie is set. You can change your choice anytime by clearing your browser’s site data for this domain.

6. Consent of the care recipient

Automated calls in India require the recipient’s consent. During onboarding you confirm you have your parent’s permission, and on the first call we ask them directly, in their language, whether they agree to receive daily check-in calls. If they decline, check-ins stop. They can withdraw consent at any time by telling us on any call or by contacting us.

7. Data retention

• Account and care-recipient details: kept while your account is active
• Check-in history: kept while the account is active, to power streaks and summaries
• Call/delivery logs: kept up to 12 months for reliability and dispute resolution
• After account deletion: personal data is erased within 30 days, except records we must keep under law (e.g., payment/tax records)

8. Your rights

Under the DPDP Act you may:

• Access a summary of the personal data we hold about you and your family
• Correct inaccurate data (mostly editable directly in the app)
• Withdraw consent and delete your data — see Delete your data
• Nominate someone to exercise these rights on your behalf
• Raise a grievance (below), and escalate to the Data Protection Board of India if unresolved

9. Security

Data is encrypted in transit (TLS) and at rest. Access is restricted by row-level security so each family can only see its own data. Payment information is handled entirely by Razorpay, a PCI-DSS-compliant processor.

10. Children

ParentPulse is intended for users aged 18 and above. We do not knowingly collect data from children.

11. Grievance officer & contact

For privacy questions or complaints, contact our grievance officer at support@getparentpulse.com (India). We aim to acknowledge complaints within 72 hours and resolve them within 30 days.

12. Changes

If we make material changes to this policy, we will notify you by email or in-app notice before they take effect.