ManRaksha — India's first AI-powered cognitive wellness companion. Talk to Ipsa in any Indian language, book verified counselors, and access free guided meditations.

ManRaksha is a mental-wellness platform operated by ManRaksha (a brand of Innovative Brains Academy), a sole-proprietorship registered in India. Registered address: Bengaluru, Karnataka, India. Data Protection Officer & Grievance Officer email: hello@updates.manraksha.com. This policy applies to the ManRaksha Android app (com.manraksha.app), the iOS app (com.manraksha.app), and the website at manraksha.com. By using ManRaksha you consent to the practices described here.

We collect only the minimum information needed to deliver our service. Specifically: • Identifiers — name, email address, and (if you sign in with Google) your Google profile picture and Google account ID. • Phone number — collected only when you initiate a masked voice/video call with a counselor. • Health & wellness input — text messages you send to Ipsa (our AI companion), journal entries, mood scores you log, self-assessment answers, and any booking-related notes you write. • Voice audio — short recordings captured only when you tap the microphone in the AI chat or Voice Mode. Recordings are streamed to OpenAI Whisper for transcription and are NOT stored after transcription completes. • Payment metadata — the amount, currency, order ID and payment status. We never see or store your full card, UPI, or bank credentials — those are collected directly by Razorpay under their own PCI-compliant infrastructure. • Referral data — your referral code and the code of any friend who invited you. • Device & usage — app version, operating system, crash logs, aggregate feature-usage counters (e.g. "meditations played"). We do not collect precise location, contacts, photos, files, IMEI, MAC address, or advertising IDs.

• Deliver the core service — matching you with counselors, running the AI companion Ipsa, playing meditations, showing your journal and mood history. • Process payments — via Razorpay (India). We share only the amount, order ID and your email with Razorpay so they can process the payment and email you a receipt. • Bridge masked calls — via Exotel (India). Your phone and the counselor's phone are shared with Exotel only for the duration of the call; both parties see a virtual ManRaksha caller ID and neither sees the other's real number. • Send transactional email — via Resend. Confirmations, receipts, session reminders, password resets. You cannot opt-out of transactional email while you have active bookings, but we send no marketing without explicit opt-in. • AI response generation — text messages you send Ipsa are forwarded to Anthropic Claude and (for voice) OpenAI Whisper + Text-to-Speech via the Emergent LLM proxy. These providers act as data processors, not controllers, and are contractually forbidden from using your conversations to train their models. • Improve service quality — via anonymised, aggregated analytics that never identify you personally. • Comply with law — tax, audit, and legal requests from Indian authorities.

• We do NOT sell or rent your personal data to any third party — ever. • We do NOT use your data or Ipsa conversations to train AI models. • We do NOT show third-party advertising and do not integrate any advertising SDK. • We do NOT collect precise or approximate geolocation. • We do NOT access your device photo library, contacts, camera, or files unless you explicitly upload something. • We do NOT record telephone or voice-call audio in masked calls.

We rely on the following data processors, each bound by their own privacy commitments: • Razorpay (India) — payment processing. https://razorpay.com/privacy/ • Exotel (India) — masked voice-call bridging. https://exotel.com/privacy-policy/ • Resend (Delaware, USA) — transactional email delivery. https://resend.com/legal/privacy-policy • Twilio (USA) — SMS / WhatsApp delivery (rolling out; India DLT-compliant). https://www.twilio.com/legal/privacy • Anthropic Claude — AI companion text responses (via Emergent LLM proxy). https://www.anthropic.com/legal/privacy • OpenAI (Whisper & Text-to-Speech) — transcription + voice synthesis (via Emergent LLM proxy). https://openai.com/policies/privacy-policy • ElevenLabs (USA) — native-accent Indian voice synthesis. https://elevenlabs.io/privacy • Google Cloud / Auth — Google Sign-In and email delivery. https://policies.google.com/privacy • MongoDB Atlas — encrypted database storage in Mumbai region.

Most of your personal data is stored within India (MongoDB Atlas Mumbai region). Some processing — specifically AI text generation, voice transcription/synthesis and email delivery — happens on servers located in the United States. All transfers occur under standard contractual clauses and encrypted TLS 1.3 connections. Personal data is never transferred to countries with insufficient data-protection laws.

• Booking, payment and invoice records — retained for 7 years to comply with Indian tax and audit law (Section 44AA of the Income-tax Act, GST Act rules). • Ipsa chat messages — retained for as long as your account is active, then deleted within 30 days of account deletion. • Journal entries and mood logs — retained for as long as your account is active, then deleted within 30 days of account deletion. • Voice recordings — deleted immediately after transcription (usually within seconds). • Anonymised aggregate analytics — retained indefinitely. • Auth session tokens — expire after 30 days of inactivity.

• All connections use TLS 1.3 in transit. • Data at rest is encrypted using AES-256 in MongoDB Atlas. • Passwords are hashed with bcrypt (cost factor 12); we never see your plaintext password. • Payment card data never touches our servers — collected directly by Razorpay. • JWT authentication with rotation on password change. • Regular security review of all sub-processors.

Ipsa is an AI wellness companion, NOT a licensed mental-health professional. Do not use Ipsa for medical or crisis situations — if you are in immediate danger, call iCall (India: +91 9152987821), Vandrevala Foundation (1860-2662-345), or the 988 Suicide & Crisis Lifeline (US). Conversations with Ipsa are used to generate responses within the app and to produce your private post-session AI summary. They are never used to train external AI models. If a counsellor session results in a paid booking, only the appointment metadata is shared with the counsellor — never your Ipsa transcripts.

Regardless of your citizenship, if you use ManRaksha you have the following rights: • Right to access — request a copy of everything we hold about you. • Right to correct or update — fix any inaccurate information. • Right to erase (delete) — permanently delete your account and all associated data (except records we are legally required to retain for tax/audit). • Right to withdraw consent — you can revoke consent for any processing at any time. This will limit or end our service to you. • Right to grievance redressal — write to our Grievance Officer at hello@updates.manraksha.com. We respond within 30 days. • Right to nominate — you may nominate someone to exercise your rights in the event of your death or incapacity. • Right to data portability — receive your data in a machine-readable format. To exercise any of these rights, email hello@updates.manraksha.com with the subject "DPDP Request".

You can delete your account at any time by: 1. In-app: Profile → Delete account (permanent, one-tap). 2. Email: send "Delete my account" to hello@updates.manraksha.com from your registered email. Deletion is permanent and removes: your profile, chat history, journal, mood logs, booking history, referral tree, and payment metadata (subject to the 7-year tax-audit retention above). We complete deletion within 14 days. Web deletion link: https://manraksha.com/account-delete

ManRaksha is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you are between 13 and 18, you may use ManRaksha only with your parent or legal guardian's consent, and only for age-appropriate wellness content (student pathway, meditation, brain-science training). If you believe we have collected data from a child under 13, contact us immediately at hello@updates.manraksha.com and we will delete it.

ManRaksha requests the following device permissions, each with a clear purpose: • Microphone (RECORD_AUDIO / NSMicrophoneUsageDescription) — required only when you tap the microphone button in AI chat or Voice Mode. You can revoke this permission at any time in your device settings; the app still works for text-only. • Internet — required to communicate with our servers. • Notifications — optional. Only used for session reminders. You can toggle this in-app or in your device settings. We do NOT request camera, contacts, location, storage, or any other permission.

The manraksha.com marketing site uses only two categories of cookies: • Strictly necessary — auth session cookies. Cannot be disabled. • Analytics — anonymised page-view counters. Can be disabled via your browser settings. We do not use marketing, advertising, or cross-site tracking cookies.

We may update this policy as our service evolves or as required by law. Material changes will be communicated via in-app notification and email to your registered address at least 14 days before they take effect. The "Updated" date at the top of this page always reflects the latest revision.

ManRaksha (a brand of Innovative Brains Academy) Bengaluru, Karnataka, India Email: hello@updates.manraksha.com Response time: within 30 days for DPDP requests, 15 days for grievances.