Privacy Policy — India Edition
Last updated: June 2026 · Applies to mymindmywealth.in
1. Data Fiduciary
My Mind My Wealth (India) is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). Our registered contact for data matters: privacy@mymindmywealth.in
2. Personal Data We Collect
- Account data: name, email address, phone number (for OTP sign-in)
- Usage data: assessment responses, learning progress, challenge activity — to personalise your experience
- Payment data: processed by Razorpay; we do not store card details
- Communications: WhatsApp messages (India edition only), with your explicit consent
3. Purpose and Legal Basis
We process your personal data to provide and improve the My Mind My Wealth transformation platform. The legal basis under the DPDP Act is consent (which you give during registration) and legitimate use(contractual necessity for delivering services you've purchased).
4. Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access your personal data
- Correct inaccurate data
- Erase your data (right to be forgotten)
- Nominate someone to exercise your rights in case of death or incapacity
- Withdraw consent at any time (without affecting prior processing)
- Raise a grievance with us or the Data Protection Board of India
To exercise any right: privacy@mymindmywealth.in. We respond within 72 hours.
5. Data Storage and Retention
Your data is stored on Firebase (Google Cloud, Mumbai region where available). We retain account data for 3 years after your last activity, or until you request deletion.
6. Data Sharing
We do not sell your data. We share data only with:
- Firebase / Google Cloud (infrastructure)
- Razorpay (payment processing — only what is necessary for the transaction)
- WhatsApp Business / Meta (messaging — India edition only, with consent)
7. Grievance Officer
In accordance with the DPDP Act and the IT Act 2000, we have appointed a Grievance Officer for India:
Name: Teljo Thomas
Email: privacy@mymindmywealth.in
Response time: within 30 days
8. Cookies
We use a single httpOnly session cookie for authentication. No advertising or cross-site tracking cookies are used.