Privacy Policy
Last updated: 5 September 2026. This is a working draft prepared to match how the product actually handles data today — it has not been reviewed by a lawyer. Before relying on it, have it reviewed by counsel familiar with India's Digital Personal Data Protection Act, 2023 and, if you serve customers elsewhere, the EU/UK GDPR and other applicable local laws — and replace every bracketed placeholder below with your actual details.
Who this policy covers
This policy applies to everyone who uses the My Ageing Parents website and products (the "Service"), operated by [Company Legal Name], a company registered in India with its registered office at [Registered Address, India] ("we", "us"). It applies wherever you are in the world, since the Service is available to adult children of ageing parents globally, not only in India.
Information we collect
Account: your email address (for sign-in, receipts and delivering The Weekly). If you sign in with Google we receive your name and email from Google.
Assessment: the answers you give about your parents' home, health, independence and preparedness, and the optional context you enter (for example a first name and city). We use these only to generate your Ageing Report and score.
Parent Care Calendar: the reminders and notes you create. If you connect Google Calendar we store OAuth tokens (encrypted at rest) so we can create and update the events you choose to sync — we request the `calendar.events` scope only and never read your other calendars.
Payments: processed by Razorpay. We store the order, amount and a payment reference. We never see or store your card, UPI or bank details.
Communications: if you subscribe to The Weekly we store your email address and a record of which issues were sent and opened, so we can deliver it and measure whether it's useful.
Product usage: a small number of events (for example "viewed pricing", "completed assessment") to understand how the Service is used. These do not include the content of your assessment answers.
Device and log data: standard technical data such as IP address, browser type and pages visited, collected automatically for security and diagnostics.
What we don't do
We do not sell personal data. We do not compile information about you or your parents from other sources. We do not use your assessment content to train models. We do not use third-party advertising trackers.
How we use your information
To provide the Service you've asked for (generating your report and plan, syncing your calendar, delivering The Weekly, processing payments), to keep the Service secure and working correctly, to respond when you contact us, and — only where you've agreed to receive it — to tell you about relevant features or offers. You can opt out of anything non-essential at any time.
Legal bases for processing (for users in the EEA, UK and similar jurisdictions)
Where the GDPR or a similar law applies to you, we rely on: performance of a contract (to deliver the product you purchased), your consent (for example, connecting Google Calendar, or receiving The Weekly), and our legitimate interests (keeping the Service secure and improving it), balanced against your rights.
Sharing with third parties
We share data only with the service providers who help us run the product, under contracts that limit what they can do with it: Razorpay (payments), Google (sign-in and Calendar sync, only if you connect it), our hosting and database providers, and our email delivery provider for The Weekly. We do not sell or rent your data to anyone, and we do not share it with data brokers or advertisers.
International data transfers
Our servers and service providers may be located outside India, including in jurisdictions with different data protection standards. Where we transfer personal data internationally, we take reasonable steps to ensure it stays protected — for EEA/UK users this means relying on an adequacy decision or standard contractual clauses where required.
Data retention
We keep your data for as long as your account is active, or as long as needed to provide the Service, comply with our legal obligations (for example tax and accounting records), resolve disputes and enforce our agreements. When you delete your account, we delete the data described below, except where we're required to retain it by law.
Your rights
From the Account page you can view, correct, delete your assessment data, delete everything about your parents (calendar events and context), disconnect and revoke Google Calendar access, and permanently delete your account — which removes all related data. Depending on where you live, you may also have the right to request a copy of your data, restrict or object to certain processing, and lodge a complaint with your local data protection authority (in India, the Data Protection Board; in the EEA/UK, your national supervisory authority; in California, the California Privacy Protection Agency).
Grievance officer
In accordance with India's Information Technology Act, 2000 and the rules made under it, our Grievance Officer for privacy and content concerns is: [Grievance Officer Name], [email address], [postal address]. We aim to acknowledge grievances within 24 hours and resolve them within the timelines the law requires.
Children's privacy
The Service is intended for use by adults (18 and over) planning for their ageing parents. It is not directed at, and we do not knowingly collect personal data from, children under 18. If you believe a child has provided us data, contact us and we will delete it.
Cookies and similar technologies
We use only what's needed to run the Service: a session cookie to keep you signed in, and local storage on your device to remember preferences like your light/dark theme. We do not use third-party advertising or cross-site tracking cookies.
Security
We use reasonable technical and organisational measures — encryption in transit, encrypted storage of sensitive tokens, and access controls — to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes to this policy
We may update this policy as the Service changes. If a change is material, we'll let you know by email or with a notice on the Service before it takes effect.
Contact us
Questions about this policy or your data can be sent to [privacy email address]. Our registered address is [Registered Address, India].