Privacy Policy

This policy describes CARE's actual current data practices, as implemented in the website and booking system. It has not been reviewed by a lawyer — please have qualified counsel confirm it before treating it as final, particularly the sections on health-related data and minors.

Last updated: 26 August 2026

1. Who this policy covers

This policy applies to CARE, an initiative of Wish Apples Ventures Private Limited ("CARE," "we," "us"), and to anyone who uses care.imiinfinitycare.com — whether you're looking for support, applying to become a CARE consultant, or booking a session. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), CARE acts as the Data Fiduciary for the personal data described below, and you (or the person a booking is made for) are the Data Principal.

2. What we collect

We collect only what's needed to run the service you're using. In practice, that's:

• Identity & contact details — name, mobile number, and email address, collected when you sign up as a client or apply as a consultant.
• What you tell us you need — the description of your situation you type or record by voice when starting a CARE journey. This may include sensitive information about mental health, family circumstances, or a child's wellbeing. We only ask for this because it's how we match you to the right kind of support — nothing here is used for any other purpose.
• Safety-check responses — whether you indicate immediate risk or thoughts of self-harm during intake. This is used solely to route you to the right response and is never used to judge or restrict anything else you've shared.
• Consultant verification documents — for professionals applying to join CARE: PAN card, Aadhaar card, educational certificates, and a reference contact. This is government ID and sensitive personal data; we collect it only to verify a consultant's identity and qualifications before they can be booked, and it is never shown to clients.
• Booking & session data — who you were matched with, when, the service chosen, and how long a session ran (used to calculate any per-minute charges beyond the free period).
• Payment data — CARE does not store your card or bank details. Payments are processed directly by PayU, our payment gateway partner; we retain only the transaction outcome (paid, failed, refunded) and amount.
• Basic usage data — standard web server logs (IP address, browser type, pages visited) for security and troubleshooting.

We do not currently record audio or video of consultation calls. If that ever changes, this policy will be updated first, and separate consent will be requested before any recording begins.

3. Why we collect it, and our legal basis

We process your data to: create and manage your account; match you with an appropriate professional; process bookings and payments; verify consultant credentials before they can accept bookings; respond to safety concerns raised during intake; and meet legal or regulatory obligations. Our legal basis is your consent (given when you accept these terms and the declaration shown at signup) and, for consultants, the legitimate need to verify who is providing services through the platform.

4. Consent for minors and dependants

If you're booking on behalf of a child or another dependant, you confirm that you are their parent, legal guardian, or otherwise authorised to make that request, and that you consent on their behalf to the data handling described here. CARE does not knowingly allow a minor to create their own account directly.

5. Who we share data with

• The professional you're matched with — sees what you've shared about your situation, so they can prepare for and conduct your session.
• PayU — receives what's needed to process a payment (name, contact details, amount). PayU's own privacy policy governs how they handle this.
• Our hosting and infrastructure providers — store data on our behalf under contractual confidentiality obligations; they do not use it for their own purposes.
• Legal or safety authorities — only where required by law, or where there is a genuine, immediate risk to someone's safety (see our Safeguarding Policy).

We do not sell personal data to anyone, for any reason.

6. How long we keep it

We retain account and booking data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and dispute-resolution needs. Consultant KYC documents are retained for as long as the consultant is active on the platform, plus any period required by applicable record-keeping law.

7. Security

We use industry-standard measures — encrypted connections (HTTPS), access controls limiting who can see sensitive data, and secure storage — to protect what you share with us. No system is completely immune to risk, and we continually work to improve these protections.

8. Your rights

Under the DPDP Act, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (subject to legal retention requirements); withdraw consent at any time; and lodge a grievance if you believe your data has been mishandled. To exercise any of these rights, contact our grievance officer using the details below.

9. Cookies

The site currently uses only the minimum technical storage needed to keep you signed in (a session token stored in your browser). We do not currently use tracking or advertising cookies. If that changes, this section will be updated and a consent mechanism added first.

10. Grievance officer

Questions, requests, or complaints about how your data is handled can be sent to CARE's grievance officer at Wish Apples Ventures Private Limited, Mumbai, India. [Insert the actual designated grievance officer's name and email address here before publishing.]

11. Changes to this policy

If we materially change how we collect or use your data, we'll update this page and revise the date at the top. Continued use of CARE after a change means you accept the updated policy.

12. Governing law

This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and is subject to the jurisdiction of the courts in Mumbai, Maharashtra.