Privacy Policy

Effective Date: [To be inserted on publication]
Operated by: Roshan Lal V Sharma, A-302, Giovanni, Lodha Luxuria Priva, Majiwada, Thane West, Maharashtra 400601

This is a detailed working draft, not a substitute for review by a licensed lawyer. It is written specifically around how Mentodec actually operates — escrow-style payments, coach verification, category-specific ratings — but only a qualified lawyer, familiar with current Indian law (including the Consumer Protection Act, IT Rules, and DPDP Act) and your specific business structure, can confirm this is enforceable and complete. Do not treat this as legal certainty.

This Privacy Policy explains how Mentodec ("we", "us", "our", operated by Roshan Lal V Sharma) collects, uses, stores, shares, and protects information when you use the Mentodec website and mobile application (together, the "Platform"), whether as a Learner, a Coach, or a visitor. By using the Platform, you agree to the practices described here.

1. Information We Collect

1.1 Information you provide directly

Account information: name, email address, phone number, password (stored in hashed/encrypted form, never in plain text).
Learner profile information: bio, areas of interest.
Coach profile information: bio, experience, fees, teaching mode, category tags (up to 4), and identity/credential verification documents submitted for approval.
Content you create: showcase videos (Coaches), public Q&A questions and answers, in-app messages between Learners and Coaches, session ratings and reviews.
Payout information (Coaches only): bank account and IFSC code, or UPI ID, collected to enable session payouts.
Communications: any message you send to our support address.

1.2 Information collected automatically

Device and app data: device identifiers and push notification tokens, collected via Firebase Cloud Messaging, used solely to deliver booking confirmations, reminders, and Q&A notifications.
Crash and diagnostic data: technical error reports collected via Sentry when the app encounters a bug, used solely to identify and fix issues. This may include device model, OS version, and the app state at the time of the error — it does not include your password or payment card details.
Usage data: booking history, search activity, and general interaction with the Platform.

1.3 Information from third parties

Payment confirmation data from Razorpay (our payment processor) confirming a transaction succeeded — we do not receive or store your full card, UPI, or bank login details.
Payout confirmation data from RazorpayX when a Coach payout is processed.

1.4 What we do not collect

We do not collect precise or approximate location data.
We do not collect health or fitness metrics, even from users of fitness-category Coaches — the Platform facilitates booking only, not health tracking.
We do not store full payment card numbers, UPI PINs, or net-banking credentials; these are handled entirely by our RBI-authorised payment partners.

2. How We Use Your Information

To create and manage your account, and to match Learners with Coaches.
To process bookings, payments (via Razorpay), and Coach payouts (via RazorpayX).
To review and verify Coach identity and credentials before a profile is published.
To display category-specific ratings accurately, based on completed, paid sessions.
To send booking confirmations, session reminders, membership renewal notices, and Q&A notifications.
To investigate disputes, suspected fraud, or violations of our Terms & Conditions.
To identify and fix technical issues (via crash diagnostic data).
To comply with applicable law, including tax and financial recordkeeping obligations.

3. How We Share Your Information

We do not sell your personal information. We share it only in the following circumstances:

With the other party to a booking: a Learner's name and session details are shared with the Coach they book, and vice versa, only as necessary to conduct the session.
With our payment partners, Razorpay and RazorpayX, to process payments and payouts.
With Firebase (Google) to deliver push notifications, and Sentry to receive crash diagnostic reports — both process data solely as our service providers, under their own security commitments.
Publicly, where you choose to make content public: showcase videos and public Q&A answers (Coaches) and public Q&A questions (Learners) are visible to all Platform users by design.
With law enforcement or regulators, where required by applicable law, court order, or to protect the safety of our users.
In connection with a business transfer (merger, acquisition, or sale of assets), subject to the acquiring party being bound by materially equivalent privacy commitments.

4. Data Storage and Security

We use industry-standard technical and organisational measures to protect your information, including encryption of data in transit, hashed password storage, and restricted internal access to identity verification documents and payout details. Coach payout details and verification documents are excluded from device backups and cloud transfer copies. No system is 100% secure, and we cannot guarantee absolute security of information transmitted over the internet.

5. Data Retention

We retain your information for as long as your account remains active, or as needed to provide the Platform, resolve disputes, comply with our legal and tax obligations, and enforce our agreements. If you request account deletion, we will delete or anonymise your personal information within a reasonable period, except where retention is required by law (for example, transaction records for tax purposes).

6. Your Rights

Under India's Digital Personal Data Protection Act, 2023, and subject to its provisions, you have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request erasure of your personal information, subject to our legal retention obligations.
Withdraw consent for processing, where processing is based on consent — noting that withdrawing consent for certain data (e.g. payment information) may mean we can no longer provide the Platform's core functionality to you.
Nominate another individual to exercise your rights on your behalf in the event of death or incapacity, as provided under the Act.
Lodge a grievance with our Grievance Officer (Section 9), and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, contact us using the details in Section 10.

7. Minors

The Platform is intended for users aged 18 and above. We do not knowingly permit account creation by anyone under 18; our signup process requires a date of birth and blocks registration for users who do not meet this age requirement. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete it and close the associated account.

8. Cookies and Tracking (Website)

Our website may use essential cookies required for basic site functionality (such as remembering your session). We do not currently use third-party advertising or cross-site tracking cookies.

9. Grievance Officer

In accordance with applicable Indian law, including the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023, grievances regarding this Privacy Policy may be addressed to:

Grievance Officer: Roshan Lal V Sharma
Email: mentodec@gmail.com
Phone: +91 7400650200
Address: A-302, Giovanni, Lodha Luxuria Priva, Majiwada, Thane West, Maharashtra 400601

We will acknowledge and address grievances within the timeframes prescribed by applicable law.

10. Contact Us

For any questions about this Privacy Policy or to exercise your data rights, contact us at mentodec@gmail.com or +91 7400650200.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised Effective Date, and, for material changes, provide additional notice within the app.