Data Retention Policy

The principle

Personal data is erased once the purpose it was given for is no longer being served — because you withdrew consent, because the purpose was fulfilled, or because you have not used HealerJi for the period below. This mirrors the erasure framework of the DPDP Act, 2023 and the DPDP Rules, 2025.

How long we keep things

Account details (name, email, phone, language preference): for as long as your account is active, and for 12 months after your last use, after which the account and its data are erased or de-identified. We notify you before erasure so you can keep the account if you wish.

Session notes you share with a healer: retained for the session and for 12 months afterwards so that continuing work with the same healer has context; erased earlier on request.

Healy conversations: retained for 12 months to maintain continuity, and erased earlier on request. They are never used to target advertising, because we do not run advertising.

Payment records: retained for eight financial years as required by Indian tax and companies legislation. This is a legal obligation and survives an erasure request; we retain the transaction record, never your card details, which we never hold in the first place.

Security and access logs: retained for one year, as the DPDP Rules require for traceability and breach investigation.

Community posts: retained while your account is active; deleted on request, though quoted excerpts in others' replies may persist where removing them would distort another person's contribution.

Asking us to erase

Write to support@healerji.com with “Erasure” in the subject line, or use the in-app privacy controls. We confirm what will be erased, what must be retained by law and why, and complete the erasure within the statutory timeline.

Grievance Officer, Sattveda Wellness Technology Private Limited, M-5, Essel House, 10 Asaf Ali Road, New Delhi – 110002. Email: support@healerji.com with “Grievance” in the subject line. We acknowledge within 48 hours and resolve within the timelines the law prescribes; the DPDP framework allows a Data Fiduciary a maximum of 90 days to answer a data-principal request, and we aim to be considerably faster.