Privacy Policy
Last updated: 8 November 2026
Dr. Shah (“we”) runs this website and app. This policy explains what personal data we collect, why, and your rights under India’s Digital Personal Data Protection Act, 2023.
What we collect
- Account: your name, email address and, if you use Google login, your Google profile name and photo.
- Bookings: name, mobile number, email, the concern you describe, and session times.
- Learning: programs you join, lessons completed, quiz answers and journal entries you choose to write.
- Session notes written by your consultant (encrypted; visible only to that consultant and our admin).
- Health form before a consultation: your concerns, sleep, stress, energy, routine, conditions, medicines and (optionally) height and weight — only with your consent, stored encrypted.
- Program check-ins (if you join the premium program): weekly sleep, stress, energy, optional weight and notes.
- Free guide requests: name, email, optional phone, and where you came from (ad or link campaign tags).
- Shop orders: delivery name, phone and address, items bought and order status.
- Payments (when enabled): handled by Razorpay. We never see or store your card or UPI details.
- Basic technical data needed to keep you logged in securely (session cookie, IP address, browser type).
Why we use it
- To create your account and let you log in.
- To arrange your sessions and send confirmations and reminders.
- To show your learning progress and issue certificates.
- To prepare for your consultation and track your program progress.
- To deliver shop orders and issue invoices.
- To follow up on a free guide or consultation request you made, and to understand which of our ads and posts bring people to us.
- To keep the service safe and meet legal obligations.
We do not sell your data. Your health information is never used for advertising.
Cookies and advertising
We use essential cookies to keep you logged in and to remember which campaign link brought you here. Only if you choose “Accept all” in the cookie banner, we also load the Meta (Facebook/Instagram) Pixel to measure our ads — it records page visits and actions like requesting the guide, booking or paying, never your health answers. Choose “Essential only” and it is never loaded.
Who can see it
Your consultant sees your booking details and concern. Our admin team can see bookings and account details to run the service. We use trusted service providers to host the app and database, send emails (Resend) and process payments (Razorpay), only for these purposes. Health forms and program check-ins are visible only to Dr. Shah and our admin. Courier partners receive your delivery address for shop orders.
Sensitive information
Health and counselling information is sensitive. Health forms, session notes and journal entries are encrypted in our database. Please don’t share more than you are comfortable with in the booking form.
How long we keep it
We keep your data while your account is active. When you delete your account, we remove your profile and journal, health forms and program data, and keep only booking and order records we must retain for accounting or legal reasons, with your name and contact details removed.
Your rights
- See and correct your details in My account.
- Delete your account yourself from My account.
- Withdraw consent or raise a grievance by writing to us at support@example.com.
Not an emergency service
Dr. Shah does not provide emergency or medical treatment. If you are in crisis, call Tele-MANAS 14416 or emergency services 112.
Grievance officer
Under India’s Digital Personal Data Protection Act, 2023 you can contact our grievance officer about your data. Write to support@example.com with the subject “Data request”. We reply within 7 days and resolve within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
Security
Passwords are stored only as secure one-way hashes. Health notes are encrypted. Payments are handled by Razorpay; we never see your card or UPI PIN.
Changes
We will post any changes on this page and update the date above.