Privacy policy

1.Who we are

HelloBapu (“we”, “us”) runs scheduled Telugu check-in calls for elderly people, set up by their family caregivers. For the personal data described here we act as the data fiduciary under India's Digital Personal Data Protection Act, 2023. This draft is being reviewed against that Act.

2.What we collect

Depending on how you use HelloBapu, we handle:

• Your account: your name, email, optional phone number and password (stored only as a secure hash).
• About the person you care for: their name, how to address them, phone number, time zone, calling hours and their consent record.
• Medicines and schedules you enter: medicine names, instructions and reminder times.
• Call results: times, call status, the answers recorded as simple outcomes (for example “taken” or “not verified”) and a short well-being status.
• Billing: what you bought (plan, number of people, months), amounts, payment status, the payment method type (for example UPI or card) and Razorpay's payment reference. We never receive your card number, UPI PIN or bank login.
• The “I'm interested” form: your name and phone, anything else you choose to share (email, cities, relationship, number of parents, preferred language, message) and the website that referred you.
• Technical data: IP address and browser details, used for security and to prevent abuse.

3.What we never keep

Some things we deliberately do not store:

• Call audio recordings.
• Call transcripts — they are discarded before anything is saved.
• Free-text well-being answers — only a simple status such as “feeling OK” is kept.
• Advertising or tracking profiles. We don't sell data and don't run ad trackers.

4.Consent of the person being called

We call a person only after their consent has been recorded, and every call starts by saying it is an AI assistant. They can withdraw consent at any time — by saying so on a call, or by telling you or us — and the calls stop.

5.How we use it

We use personal data only to run the service:

• To place the scheduled calls and the retries you allow.
• To show you the results and send the alerts and emails you've chosen.
• To take payments, keep your paid period up to date and remind you before it ends.
• To answer your questions and give support.
• To contact you about the pilot if you filled in the “I'm interested” form.
• To keep the service safe, reliable and within fair-use limits.

6.Who we share it with

We share personal data only as needed to run the service:

• Our voice and telephony providers, to place each call. They receive the phone number, how to address the person, the call time and the medicine names for that call.
• Razorpay, our payment processor, to take payments. Razorpay collects your card, UPI or bank details directly — we never see or store them — and receives your name, email and the amount to pay.
• Our email provider, to send notifications and verification emails.
• Our cloud hosting provider, which stores the data securely.
• Family members you add to a profile, who can see that profile's information.
• Authorities, only when the law requires it.

7.How long we keep it

We keep data only as long as it is useful to you or required by law:

• Call history is visible for your plan's period: 30 days (Basic), 90 days (Family) or 365 days (Premium).
• When a profile is deleted, its care data is erased 30 days later (the grace period covers accidental deletion).
• When you delete your account, your personal details are anonymised immediately.
• Consent records and audit logs are kept as evidence of lawful processing, even after deletion.
• Details from the “I'm interested” form are kept while we follow up about the pilot, and deleted on request.
• Payment records are kept for as long as Indian tax and accounting law requires, even after you delete your account.
• Backups expire within 14 days and application logs within 30 days.

8.Your rights and choices

You can:

• Download a copy of your data from your account page.
• Correct your details, the person's details and medicine schedules at any time.
• Delete a profile or your whole account.
• Withdraw consent for calls — the person can also do this on a call.
• Raise a concern or grievance with us. The person being called can use these rights through you or by contacting us.

9.How we protect it

Data is encrypted in transit, passwords are stored only as secure hashes, access is limited to the people who need it, and every important action is recorded in an audit log. Phone numbers, names, medicines and answers are never written to our application logs.

10.Age

Accounts are for adults (18+). The service is designed for family caregivers of elderly people.

11.Changes to this policy

If we change how we handle personal data, we will update this page and tell you before the change takes effect.

12.Contact and grievances

Write to us at support@hellobapu.com. A grievance officer will be named here before launch.