Privacy notice · Version 2026-10-15

Your privacy

Draft for legal review before launch.

The short version

You don't need to give a name, email or phone number to use SATHI.
Everything you tell SATHI, and everything that describes you, is encrypted before it's stored.
We never sell your data, never use it for advertising, and there are no trackers in the app.
You can see and delete everything at any time in About me. Deletion is immediate and permanent.
SATHI is an AI. Nobody watches conversations in real time, so SATHI can't send help.

AES-256-GCM, with a fresh random value for every item.

On the way. Every connection to SATHI uses HTTPS (TLS), so what you send can't be read in transit.
Keys kept apart. The encryption key is kept separately from the database, and only the running app uses it. A copy of the database on its own can't be read.
Encrypted twice. Our database host also encrypts all stored data on disk.
Walled off. The database itself keeps every account separate, so one account can never read another's data, even if our code had a mistake.
Nothing in logs. Our system logs never contain what you write.
Nothing left on your device. SATHI doesn't save drafts or conversations on your phone or computer. Only the public list of crisis lines is kept, so Help Now works offline.
Not encrypted: record numbers, dates and times, your consent choices, and safety counters. A safety counter is a level from 1 to 3 and a type, never any words from your conversation. We need these to run SATHI's safety features and to meet legal reporting duties about crisis referrals.

Year of birth: to confirm you're 18 or older.
Your consents: to record what you agreed to and when.
What you choose to share (name, gender, life stage, how to talk to you): so SATHI can talk with you the way you want.
Your conversations: so you can come back to them and SATHI can greet you in context.
Your region, detected from your internet connection as a country (and state) code: to check that SATHI is open where you are (India, during the beta), show the right crisis lines and follow local rules. We don't store your IP address or precise location.
Safety counters and simple usage counts (for example, that a conversation started): to keep SATHI safe and improve it. These never include your words.

Our AI provider reads your messages only to write SATHI's replies and run the safety check, under terms that exclude training on them. Messages are decrypted in memory for this and sent over an encrypted connection. Some processing may happen outside your country.
Our hosting and database providers store the encrypted data. Their servers may be outside India; we will name the regions here before launch.
Voice typing: SATHI never stores audio. In some browsers, the browser's own speech service (for Chrome, Google) turns your voice into text.
Nobody on the SATHI team reads conversations unless you opt in to de-identified research review.

Sell your data or share it with advertisers, data brokers, employers, schools, universities or insurers.
Use what you share to target ads, inside or outside SATHI.
Show your conversations to anyone else.

Until you delete it. Deleting a conversation, your profile or everything takes effect immediately.
Accounts inactive for 12 months are deleted automatically (proposed).

See, correct or delete what SATHI knows about you in About me, at any time.
Withdraw your consent at any time by deleting everything.
Under India's Digital Personal Data Protection Act, 2023 you have further rights, such as to know who we share data with, to nominate someone to act for you, and to raise a grievance. Contact us to use them.

SATHI is for people 18 and over. If we learn someone is younger, SATHI shows them support lines and deletes what they shared.

If a security incident affects your information, we'll tell you and the authorities as the law requires.

We'll tell you in the app before any change to this notice takes effect. Questions or requests: [privacy contact to be added before launch].