Privacy Policy
Last updated: December 20, 2024
1. Introduction
Knight Medicare ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mental health platform.
Given the sensitive nature of mental health services, we apply the highest standards of data protection to ensure your information remains confidential and secure.
2. Information We Collect
2.1 Personal Information
- Name, email address, phone number
- Date of birth, gender
- Profile photo (optional)
- Address information
2.2 Health Information
- Mental health history and assessments
- Session notes and therapeutic progress
- Mood tracking data
- Assigned tasks and completion status
2.3 Usage Information
- Session history and scheduling data
- Payment and transaction history
- Device information and IP addresses
- Platform usage analytics
3. How We Use Your Information
We use your information to:
- Provide and improve our mental health services
- Connect you with appropriate psychologists
- Process payments and maintain your wallet
- Send session reminders and important notifications
- Ensure platform security and prevent fraud
- Comply with legal requirements
- Conduct anonymized research to improve mental health care
4. Data Sharing
4.1 With Psychologists
Your health information is shared with the psychologists you choose to work with, solely for the purpose of providing mental health services.
4.2 With Third Parties
We may share limited information with:
- Payment processors (Razorpay) - for secure transactions
- Video call providers (LiveKit) - for session delivery
- Cloud services (Supabase, Vercel) - for platform hosting
We do NOT sell your personal or health information to third parties.
4.3 Legal Requirements
We may disclose information when required by law, such as in response to court orders or to prevent imminent harm (as required by mental health professional ethics).
5. Data Security
We implement robust security measures including:
- End-to-end encryption for video sessions
- Encrypted data storage and transmission (TLS/SSL)
- Row-level security in our database
- Regular security audits and updates
- Strict access controls for staff
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Health records are retained as per applicable medical record retention laws (typically 7-10 years).
You may request deletion of your account and associated data by contacting us. Note that some information may be retained for legal compliance.
7. Your Rights
You have the right to:
- Access - Request a copy of your personal data
- Correction - Update inaccurate information
- Deletion - Request deletion of your data (with limitations)
- Portability - Receive your data in a portable format
- Opt-out - Unsubscribe from marketing communications
To exercise these rights, please contact us at privacy@knightmedicare.com
8. Cookies and Tracking
We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand how you use our platform. You can control cookie preferences in your browser settings.
9. Children's Privacy
Our platform is not intended for users under 18 without parental consent. If we learn that we have collected personal information from a child under 18 without proper consent, we will delete that information.
10. International Users
Our platform is operated from India. If you access our services from outside India, please be aware that your information may be transferred to and processed in India, where data protection laws may differ from your country.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. The "Last updated" date at the top indicates when the policy was last revised.
12. Contact Us
For questions about this Privacy Policy or our data practices, contact our Data Protection Officer at:
- Email: privacy@knightmedicare.com
Postal address will be published once our company registration is complete.