We never sell your data
Not to advertisers, not to anyone. Your journal and sessions are never used for ads.
Encrypted end to end
Your data is encrypted in transit and at rest, on secure infrastructure.
You stay in control
Access, correct, or erase your data, and withdraw consent, at any time.
The full policy
Everything, in plain language.
No dark patterns, no buried clauses. Here's exactly what we collect, why, and the rights you have over it.
What we collect
Account details (name, email, phone), assessment responses, mood and journal entries, session records, and payment information processed by our payment partner. We collect only what we need to match you with the right professional and provide care.
How we use your data
To match you with an RCI-verified clinical psychologist or NMC-registered psychiatrist, to power your Calm AI insights and mood tracking, to prepare pre-session briefs for your clinician, and to operate and improve the service. We do not sell your data, and we do not use your private journal or session content for advertising.
Your consent
We process your personal and health data on the basis of your consent, which you give at sign-up, before your pre-assessment, and before each session. You can withdraw consent at any time, withdrawal does not affect processing already carried out lawfully.
Storage & security
Your data is encrypted in transit and at rest, and stored on secure infrastructure. Access is restricted to your care team and authorised staff on a need-to-know basis. We retain data only as long as necessary for your care and our legal obligations.
Sharing & disclosure
We share data with your assigned clinician to provide care, and with service providers (payments, video, hosting) bound by confidentiality. We may disclose data where required by law or where there is a serious risk of harm to you or others, consistent with our Safety & Ethics policy.
Your rights
Under the DPDP Act you have the right to access, correct, and erase your data, to withdraw consent, to nominate someone to exercise your rights, and to raise a grievance. To exercise any of these, contact our Data Protection Officer at getcalmly@gmail.com.
Cookies
We use essential cookies to keep you signed in and to remember your preferences, and limited analytics to understand how the service is used. You can manage your choice via the cookie banner or your browser settings.
Children
Where care is provided to a minor, we require verifiable consent from a parent or legal guardian, in line with the DPDP Act. We do not knowingly process a child's data without it.
Changes to this policy
We may update this policy as the service and the law evolve. Material changes will be communicated to you, and the latest version will always be available here.
Data questions?
Talk to our Data Protection Officer.
Access, correct, or erase your data anytime, we're one email away.
getcalmly@gmail.comSee also our Safety & Ethics and Terms.