Privacy Policy
Privacy Policy – Clients
Last updated: 20 June 2025
At Emotist, we are committed to respecting the privacy and confidentiality of the information that you entrust us with. This Privacy Policy outlines the policies and procedures regarding the collection, use, and disclosure of Personal Information from users. Please review this Privacy Policy carefully.
As an intermediary platform, Emotist facilitates connections between users and Mental Health Practitioners. While we take measures to ensure privacy, users are advised that their interactions with practitioners through the platform be governed by additional confidentiality policies set by those practitioners.
It is recommended that you do not use the website, mobile application(s), or related services if any of the terms of this Privacy Policy are not in accordance with the applicable laws of your country.
Definitions
Company
“Emotist,” “Company,” “Firm,” “we,” “our,” “us,” “Service Provider,” or similar terminology refer to Emotist as a technology platform facilitating Services.
User
“Client,” “user,” “you,” “your,” or other similar terminology refer to you, as a recipient of the Services provided via the Emotist platform.
Platform
“Platform” refers to the mobile application, website, or web link that users employ to access the Services provided by Emotist.
Mental Health Practitioner
“Mental Health Practitioner,” “Practitioner,” “Professional,” “Mental Health Professional,” “therapist,” or similar terminology refer to practitioners who use the platform to offer their Services.
Nature of Service
Emotist is an intermediary platform that facilitates access to mental wellness solutions, including but not limited to:
● Virtual or in-person therapy/consultation sessions with licensed psychologists, counselors, therapists, and/or psychiatrists.
● Online assessments to evaluate mood disorders, anxiety, stress levels, and other mental health conditions.
● Workshops, webinars, and self-help tools for personal development, stress management, and emotional resilience.
● Secure communication features such as encrypted chat, video calls, and private messaging with professionals.
Emotist does not provide medical or psychological treatment itself. The responsibility for compliance with professional standards and confidentiality lies with the individual practitioners using the platform.
Legal Basis for Processing Data
We collect and process Personal Information based on user consent, contractual necessity, and legal obligations under the Information Technology Act, 2000 Users may withdraw consent at any time by contacting hello@emotist.com.
Types of Data Collected and When It Is Collected
We collect the following data at different stages of your interaction with the platform:
● During Account Creation: Personal information such as name, email, phone number, gender, and date of birth.
● When Logging In and Using the Platform: Account details including username, password, and activity logs.
● When Engaging with Practitioners or Completing Assessments: Health and wellness data such as self-assessments, consultation history, and wellness preferences (securely stored with encryption).
● Automatically While Using the Platform: Technical data such as IP address, device ID, browser type, and app usage logs (stored for six months for security and fraud prevention).
● At the Time of Payment Processing: Billing and transaction data such as payment details and transaction history (full payment card details are never stored).
● If You Choose to Record a Session: Session recordings are stored only with explicit consent.
● While Interacting with Platform Features: Behavioral data including user engagement and accessed features.
● If Location Access is Enabled: Location data such as IP-based geolocation or GPS tracking for service recommendations.
● When Communicating with Support or Providing Feedback: Communication data such as emails, messages, and inquiries.
● When Using Third-Party Login Options: Authentication data from providers like Google or Facebook.
● For Security and Fraud Prevention: Device and network information such as Wi-Fi network details and carrier information.
Use of Google User Data
Emotist may access limited Google user data to simplify your experience when you choose to use features such as Google Sign-In, calendar sync, or location-based services.
1. Google Sign-In
- If you log in with your Google account, we collect your name, email address, and profile picture. This is used only to:
- Authenticate your identity securely,
- Set up and manage your Emotist account,
- Personalize your experience within the app.
2. Google Calendar Sync
If you opt in, Emotist accesses your Google Calendar to:
- Add upcoming therapy appointments directly to your calendar,
- Help you track your session schedule,
- Send timely reminders and updates.
- We do not access or modify other calendar entries, and we do not share calendar data with any third parties.
3. Google Maps & Location Services
If enabled, Emotist uses Google Maps APIs to:
- Help you find therapists or clinics near your location,
- Provide accurate session location information (for in-person sessions).
- Location data is used only with your consent and can be disabled in your device settings at any time.
Emotist may access limited Google user data to simplify your experience when you choose to use features such as Google Sign-In, calendar sync or location-based services.
Transparency and Revocation: All Google user data accessed via Emotist is handled in accordance with Google API Services User Data Policy, including the Limited Use requirements. You can revoke access to Emotist at any time via your Google Account permissions page.
User Rights & Data Access
Users have the right to access, modify, or request the deletion of their personal data, except where retention is required by law. They may also object to specific data processing activities and request data portability when technically feasible.
To exercise any of your rights under this policy, including access, correction, or deletion of your data, please email us at hello@emotist.com with the subject line: “Data Request.”
Data Retention Policy
Billing and transaction records are retained for seven years as required by tax regulations. Consultation records are kept for five years to maintain quality assurance. Technical data is stored for one year for security and fraud prevention. Inactive accounts are either deleted or anonymized after two years of inactivity. Users may request account deletion by emailing hello@emotist.com, and requests will be processed within 30 days, except where legal obligations require data retention.
Third-Party Data Sharing
We share data only with trusted third-party service providers, such as cloud hosting platforms (e.g., AWS, Google Cloud), payment processors (e.g., Razorpay, Stripe), and analytics providers for platform optimization. These providers are granted access only to the data necessary to perform their services and must adhere to strict data protection agreements, including compliance with applicable data privacy laws. Data is never shared for marketing purposes, and international transfers are conducted with appropriate safeguards in place. Emotist does not embed or display third-party content such as external videos, ads, or social media feeds within the platform. Any outbound links (if provided) are clearly marked and governed by their respective privacy policies.
Data Security Measures
We implement encryption to secure data during storage and transmission, enforce strict access controls to prevent unauthorized access, and conduct regular security audits to identify and address vulnerabilities. Additionally, we recommend two-factor authentication (2FA) for enhanced account security. Users are responsible for safeguarding their login credentials and should report any unauthorized access or suspicious activity immediately.
Data Sharing with Authorities
User data may be disclosed if required by law, a valid court order, or regulatory authorities. Where legally permissible, we will assess such requests to ensure they comply with applicable laws and protect user privacy. Users will be notified of such disclosures unless prohibited by law or if notifying them would compromise an ongoing investigation.
Cookies & Tracking Technologies
We use cookies and tracking technologies to enhance user experience, analyze platform performance, and improve security. These may include essential cookies for platform functionality, analytical cookies for performance monitoring, and security cookies to prevent fraud. Users can manage their cookie preferences through browser settings or via our cookie settings page, where they can enable or disable non-essential cookies.
User Responsibilities
Users are responsible for maintaining the security of their login credentials, ensuring that the personal information they provide is accurate and up to date, and promptly reporting any unauthorized access or suspicious activity to Emotist.
Breach Notification Policy
In the event of a data breach, we will take immediate action to contain the issue and mitigate risks. Affected users will be notified within 72 hours, in accordance with applicable legal requirements. Relevant authorities will also be informed, and necessary remedial measures will be implemented to prevent future breaches.
Minors’ Data Protection
Our services are not intended for individuals under 18 years old. If we become aware that a minor has registered without appropriate guardian consent, we will take immediate steps to delete their data and terminate access to the platform.
Dispute Resolution and Governing Law
Any dispute, controversy, or claim arising out of or in connection with this Privacy Policy, including its interpretation, breach, termination, or validity, shall be settled by arbitration in accordance with the Arbitration and Conciliation Act, 1996, in Kochi, Kerala, before a sole arbitrator mutually appointed by the parties. The arbitrator’s decision shall be final and binding.
However, either party retains the right to seek interim relief or injunctive relief from the courts of Kochi, Kerala, to prevent immediate harm while arbitration is ongoing. Any disputes not subject to arbitration shall fall under the exclusive jurisdiction of the courts in Kochi, Kerala.
Grievance Redressal
To address the grievances of the users, Emotist has set up a Grievance Redressal Forum. In case you are dissatisfied with any aspect of our Services, you may contact our Grievance Redressal Officer. Please contact our Grievance Redressal Officer using the details below:
Name: Jewel Kurian
Designation: Consultant Psychologist and Research
Email address: hello@emotist.com.
Postal address: 4/461, Second Floor, Valamkottil Towers, Judgemukku, Thrikkakara PO, Ernakulam, Thrikkakara, Ernakulam, Kerala, India, 682021
We assure you a time bound solution not exceeding 30 days from the date of your complaint.
Policy Updates & Contact Information
Emotist reserves the right to update this Privacy Policy as needed. Users will be notified of any significant changes and will be required to review and accept the updated policy before continuing to use the app.
Registered Address: 4/461, Second Floor, Valamkottil Towers, Judgemukku, Thrikkakara PO, Ernakulam, Thrikkakara, Ernakulam, Kerala, India, 682021.
E-mail: hello@emotist.com
Privacy Policy – Practitioners
Last updated: 9 April 2025
At Emotist, we are committed to protecting the privacy of mental health practitioners who use our platform. This Privacy Policy explains how we collect, use, disclose, and protect the personal information of practitioners registered on Emotist. By using our platform, you consent to the data practices outlined in this policy, in compliance with the Information Technology Act, 2000, and applicable data protection laws in India.
1. Definitions
● Company: “Emotist,” “we,” “our,” “us,” or similar terms refer to Emotist as a technology platform facilitating Services.
● Practitioner: “Mental Health Practitioner,” “Professional,” “Therapist,” “Counselor,” or similar terms refer to individuals offering mental health services through Emotist.
● Platform: Refers to the Emotist mobile application, website, or web-based services that practitioners use to offer their services.
2. Types of Data Collected and When It Is Collected
We collect the following data at different stages of your interaction with Emotist:
During Account Registration and Verification:
● Full name, email, phone number, date of birth, and professional title
● Government-issued identification (as required by Indian regulations)
● License or registration number, qualifications, and certifications
● Specialization, years of experience, and professional bio
● Bank account or UPI details for payouts
When Using the Platform:
● Activity logs, including session schedules and engagement metrics
● Client interactions such as appointment records and feedback
● Secure messages with clients (end-to-end encrypted)
● Device and browser information, IP address, and usage data
During Payment Processing:
● Billing and transaction data (Emotist does not store full payment card details)
● Tax-related information (if applicable)
When Communicating with Support:
● Any information shared via email, chat, or customer support inquiries
3. Purpose of Data Collection
Emotist collects and processes practitioner data for the following purposes:
● To verify identity, credentials, and eligibility to provide services on the platform
● To facilitate client-practitioner interactions and appointment management
● To process payments and ensure compliance with Indian financial regulations
● To improve platform features and user experience through analytics
● To ensure compliance with applicable laws and ethical standards
● To protect against fraud, unauthorized access, and security threats
4. Data Sharing and Disclosure
Emotist does not sell practitioner data. However, we may share certain information with:
● Clients: Limited practitioner profile details, including qualifications, expertise, and availability, to help users make informed decisions.
● Third-Party Service Providers: For services such as cloud hosting (e.g., AWS India, Google Cloud India), payment processing (e.g., Razorpay, PayU), and data analytics. These providers adhere to strict data protection agreements.
● Legal and Regulatory Authorities: If required by Indian law, court orders, or government regulations. Where possible, we will notify practitioners before such disclosures.
● Security and Fraud Prevention Services: To detect and prevent fraudulent activities on the platform.
5. Use of Google User Data
Emotist offers optional integrations with Google services to support your workflow, including calendar syncing and location-based features.
1. Google Sign-In
If you use Google Sign-In, we collect your name, email address, and profile picture. This data is used solely for:
Secure account login,
Practitioner account management within the app,
Providing a streamlined setup experience.
2. Google Calendar Integration
If authorized, Emotist accesses your Google Calendar to:
Automatically schedule client sessions into your calendar,
Display your availability to clients (where applicable),
Help you manage appointments and send reminders.
We only access events created via Emotist. Other calendar data is not accessed, stored, or shared.
3. Google Maps & Location Services
When enabled, Emotist uses Google Maps APIs to:
Allow you to list clinic or session locations,
Support clients in locating your in-person services accurately.
We use this location data strictly to support in-app functionality and do not share it with third parties.
Transparency and Revocation: All Google user data accessed via Emotist is handled in accordance with Google API Services User Data Policy, including the Limited Use requirements. You can revoke access to Emotist at any time via your Google Account permissions page
6. Data Security Measures
We implement industry-standard security protocols, including:
● End-to-end encryption for client-practitioner communications
● Secure cloud storage with access controls
● Multi-factor authentication (MFA) for practitioner accounts
● Regular security audits to identify and mitigate risks
Practitioners are responsible for safeguarding their account credentials and reporting any unauthorized access immediately.
6. Practitioner Responsibilities
● Maintain the confidentiality of client information as per legal and ethical standards
● Use the platform only for legitimate professional purposes
● Ensure accuracy and regular updates of their professional details
● Report any privacy or security concerns to Emotist immediately
7. Data Retention Policy
● Practitioner account details and transaction records are retained for seven years as required by Indian tax and financial regulations.
● Session logs and appointment history are retained for five years for quality assurance and legal compliance.
● Technical logs (e.g., IP address, device data) are stored for one year for security monitoring.
● Inactive practitioner accounts may be anonymized or deleted after two years of inactivity.
● Practitioners may request data deletion by emailing hello@emotist.com. Requests will be processed within 30 days, subject to legal obligations.
8. Breach Notification Policy
In the event of a data breach, Emotist will:
● Take immediate action to contain and mitigate the breach
● Notify affected practitioners within 72 hours, as required by Indian data protection laws
● Inform regulatory authorities and take corrective measures
9. Policy Updates
Emotist reserves the right to update this Privacy Policy as necessary. Practitioners will be notified of significant changes and required to review and accept the updated policy before continuing to use the platform.
10. Dispute Resolution and Governing Law
Any disputes related to this Privacy Policy shall be resolved through arbitration in Kochi, Kerala, under the Arbitration and Conciliation Act, 1996. Either party may seek interim relief from the courts of Kochi, Kerala, if required.
For any inquiries, please contact:
Email: hello@emotist.com
Registered Address: 4/461, Second Floor, Valamkottil Towers, Judgemukku, Thrikkakara PO, Ernakulam, Thrikkakara, Ernakulam, Kerala, India, 682021