Last Updated: August 27, 2025

Cerecalm Private Limited (“Cerecalm,” “we,” “our,” or “us”) operates the website https://cerecalm.com/ and its associated mobile applications on iOS and Android (collectively referred to as the “Service”), providing mental health and wellbeing services.

This Privacy Policy outlines how we collect, use, disclose, retain, and secure personal information in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and other applicable laws.

By using our Service, you consent to the collection and use of information as described in this policy.

The terms in this Privacy Policy align with our Terms and Conditions, accessible at https://cerecalm.com/terms, unless otherwise defined here.

1. Information We Collect

To provide therapy, psychiatric consultations, and a personalized experience, we may collect the following personal information:

• Identity and Contact Details: Full name, phone number, email address, age, gender, postal address, and parent/guardian details (for minors).
• Login Information: Phone number, OTP for authentication, and account credentials.
• Health & Therapy Information: Data shared during therapy sessions, psychiatric consultations, or assessments to tailor your care plan.
• Device & Log Data: IP address, device model, operating system (iOS/Android), browser type/version, app crash logs, session duration, pages visited, and other statistics.
• Cookies & Analytics Data: Used to enhance website/app performance and user experience. You may accept or decline cookies, though declining may limit access to certain features.
• Emergency Contact Details: Voluntarily provided and used only in critical situations (e.g., imminent safety risks).

2. Use of Information

We use your personal data for the following purposes:

• Account Management: To create and manage accounts, verify logins (via phone number and OTP), and ensure secure access.
• Service Delivery: To facilitate therapy sessions, psychiatric consultations, appointment reminders, and follow-ups.
• Service Improvement: To analyze usage patterns and enhance our website and mobile apps.
• Compliance: To meet legal, regulatory, and ethical obligations in the mental health sector.
• Research (Anonymized Data): De-identified clinical data may be used for research, analysis, and academic purposes to improve outcomes and services, in compliance with privacy laws and ethical guidelines.

3. Legal Basis (DPDP Compliance)

We process your data under the DPDP Act, 2023 based on:

• Consent: Obtained explicitly during sign-up or therapy booking.
• Voluntary Disclosure: Information you share during therapy sessions.
• Performance of Service: Data processing necessary to provide therapy or consultations.
• Legal Obligations: Disclosure as required by law or court order.

You may withdraw consent at any time by contacting support@cerecalm.com, subject to legal or contractual obligations.

4. Cookies

Our website and apps use cookies to collect data and improve functionality. Cookies are small files stored on your device, acting as anonymous identifiers. You can accept, decline, or be notified when cookies are sent. Declining cookies may limit access to certain Service features.

5. Service Providers

We may engage third-party companies or individuals to:

• Facilitate or provide the Service on our behalf.
• Perform Service-related tasks (e.g., cloud storage, analytics).
• Assist in analyzing Service usage.

These third parties have access to your personal information only to perform assigned tasks and are bound by strict confidentiality agreements, prohibiting use or disclosure for other purposes.

6. Sharing of Information

We share personal information only with:

• Authorized Service Providers: Clinicians, therapy platforms, or cloud providers under confidentiality agreements.
• Regulatory Authorities: When mandated by law.
• Emergency Situations: To protect an individual’s safety (e.g., suicidal risk or harm to others).

We do not sell, rent, or disclose data for advertising purposes.

7. Security Measures

We prioritize your trust and use commercially acceptable measures to protect your data, including:

• Encryption in transit (SSL/TLS) and at rest.
• OTP-based authentication for mobile app access.
• Role-restricted access (only your therapist or treating doctor views therapy-related notes).
• While we follow industry best practices, no internet or electronic storage method is 100% secure, and absolute security cannot be guaranteed.

8. Children’s Privacy & Parental Consent

Our Services are available to individuals under 18 only with verifiable parental/guardian consent, in compliance with the DPDP Act.

• Consent Process:
  • Online Consent Form: Parents/guardians provide their name, contact details, and identity verification.
  • Direct Contact: We may verify consent via phone or email.
• Verification: We take reasonable steps to confirm the person providing consent is the child’s parent or legal guardian, including requesting additional documentation if needed.
• Parental Responsibility: Parents/guardians are responsible for their child’s online privacy and safety.

If you believe your child has provided personal information without consent, contact us at support@cerecalm.com for appropriate action.

9. Data Retention & Storage

We retain personal data only as long as necessary to fulfill the purposes outlined, in compliance with the DPDP Act and other laws:

• Account Data (e.g., contact details, login credentials): Retained during active account use. Data is anonymized/deleted after 24 months of inactivity or upon account deletion, unless legally required.
• Clinical/Therapy Records: Retained for 7 years per healthcare standards, then anonymized or securely destroyed unless longer retention is legally mandated.
• Financial Data (if applicable): Kept for 8 years per Indian tax laws.
• Mobile App Data: Stored securely in encrypted form, with logs purged every 12 months.
• Deletion Requests: Upon consent withdrawal or data deletion requests, we will anonymize/delete data within 30 working days, subject to legal obligations.

All retained data is stored securely with appropriate technical and organizational safeguards.

10. User Rights Under DPDP Act

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your data.
• Right to Correction: Update inaccurate or incomplete data.
• Right to Deletion (Right to be Forgotten): Request data deletion, subject to legal retention requirements.
• Right to Withdraw Consent: Stop further data use.
• Right to Data Portability: Request data transfer to another provider (where feasible).

Submit requests to support@cerecalm.com. We will respond within 30 days, as per DPDP Act timelines.

11. Mobile App Specific Provisions

For our iOS and Android apps:

• Authentication: Login requires phone number and OTP.
• Permissions (optional): Notifications for reminders, microphone/camera for video therapy, and storage for uploading reports.
• No Background Tracking: We do not track location or personal media without explicit consent.

12. Links to Other Sites

Our Service may contain links to third-party websites. These sites are not operated by us, and we have no control over their content, privacy policies, or practices. We strongly recommend reviewing their privacy policies, as we assume no responsibility for third-party sites.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on our website and apps, effective immediately. Material changes will be communicated to users. We encourage regular review of this page for updates.

14. Contact Us

For questions, concerns, or requests regarding your personal data, DPDP compliance, or this Privacy Policy, contact us at:
📧 Email: support@cerecalm.com
🏢 Address: 5C8, Dabc Mithilam, Sriram Nagar Main Road, Nolambur, Chennai – 600095.

By using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Cerecalm’s Commitment
At Cerecalm, we walk with you on your mental health journey, offering holistic, evidence-based care through our team of psychiatrists, clinical psychologists, and psychologists.

Our care plans, crafted to suit your unique needs, are based on British NICE guidelines, adapted for the Indian mental health ecosystem.

We prioritize empathy, professionalism, and compliance with privacy laws to ensure your trust and safety.

It’s OK to be not OK. Let’s talk it out.