Privacy Policy
At Normera Mindlife Private Limited, the company behind breakOCD, we are committed to respecting the privacy and confidentiality of the information you entrust to us. Your information is transmitted securely, stored in a protected environment, and anonymised wherever it is used for analysis or improvement of our services. This Policy sets out how we collect, use, store, disclose, and protect your Personal Information. References to "we", "us", or "the Company" mean Normera Mindlife Private Limited. References to "you" or "your" mean any individual who accesses or uses the platform. Please read this Policy carefully. By using the breakOCD platform, including the website and mobile application, you confirm that you have read, understood, and agreed to the terms of this Policy. If you do not agree, please do not use the platform.
breakOCD is a digital mental health support and psychoeducation platform for people living with Obsessive-Compulsive Disorder. It does not provide medical diagnosis, clinical treatment, or crisis intervention. If you are in immediate danger, please contact emergency services or go to the nearest hospital.
1. Nature of Service
breakOCD is a digital mental health support platform focused on Obsessive-Compulsive Disorder. All services are delivered online. The platform offers, including but not restricted to:
An AI-powered conversational companion providing OCD-specific psychoeducation, evidence-based support techniques, and guided exercises.
Online consultations with qualified Clinical Panel Professionals conducted via audio or video call.
OCD-specific self-assessment tools and psychological questionnaires.
Psychoeducational content including articles and audio resources.
Self-help tools including journaling, meditations, mood tracking, and routine building.
The Company reserves the right to add, modify, or remove features and services at any time without prior notification.
2. Consent
By using the platform, creating an account, or submitting Personal Information, you provide your free, specific, informed, unconditional, and unambiguous consent to the collection, storage, processing, disclosure, and transfer of your Personal Information in accordance with this Policy and applicable Indian data protection law, including the Digital Personal Data Protection Act 2023 (DPDP Act).
If you are below 18 years of age, your parent or legal guardian provides informed consent on your behalf for you to receive mental health support services, and to the collection, storage, processing, disclosure, and transfer of your Personal Information in accordance with this Policy.
You acknowledge that you provide Personal Information voluntarily. You may withdraw consent at any time by contacting us in writing at: hello@breakocd.com
If you are accessing the platform through a third-party service, you must notify that third party of your withdrawal, who will then inform us to take appropriate action.
Withdrawal of consent may limit your ability to use certain features and may result in account deactivation. If you choose not to provide Personal Information or withdraw consent, we may be unable to fulfil the purposes for which it was sought.
3. What Personal Information We Collect
To enable you to use our services, we may collect the following categories of Personal Information, including but not limited to:
3.1 Account and Identity Information
Full name, email address, phone number, and date of birth.
Gender (optional).
Account credentials.
3.2 Mental Health and Assessment Information
Responses to OCD self-assessment questionnaires and psychological tools.
Information shared through interactions with the AI companion.
Any information voluntarily shared through in-app features or tools.
3.3 Consultation and Appointment Information
Appointment booking, scheduling, attendance, and cancellation records.
Practitioner details associated with booked consultations.
3.4 Technical and Usage Data
Device type, operating system, and application version.
IP address and approximate geographic location.
In-app activity, usage patterns, and interaction data.
Crash reports and error logs.
3.5 Communications
Emails or messages sent to our support team.
Feedback, ratings, or survey responses.
3.6 Website Visitors and Waitlist
The breakOCD website collects the following information from visitors who have not yet created a platform account:
Name and email address submitted via the waitlist signup form, for the sole purpose of notifying you when the breakOCD app launches.
Standard technical data collected automatically by the website platform.
The website is hosted on Squarespace, a third-party website platform based in the United States. Waitlist form submissions are processed and stored by Squarespace on infrastructure located outside India, and a copy is forwarded to the Company by email. By submitting the waitlist form, you consent to this processing.
Waitlist data will be used only to send you a launch notification. It will not be used for marketing, profiling, or shared with any third party beyond Squarespace as the hosting provider. You may request removal from the waitlist at any time by contacting us at the email provided in this Policy.
4. How We Use Your Information
We use the information we collect for the following purposes, including but not limited to:
To create and manage your account and provide access to the platform.
To personalise your experience and the platform's features.
To notify waitlist members when the breakOCD app launches, and for no other purpose.
To facilitate the booking, scheduling, and management of consultations.
To process payments and maintain billing records.
To send service-related communications including appointment reminders.
To conduct anonymised, aggregated analysis to improve the platform. No individually identifiable data is used in any published research without your separate consent.
To detect fraud, prevent misuse, and maintain the security and integrity of the platform.
To comply with applicable Indian law, regulatory obligations, and court orders.
To better understand user needs and improve our services.
Your information is used by Clinical Panel Professionals and platform systems to support the delivery of services to you. On occasion, the Company or Clinical Panel Professionals may use third-party tools to support service delivery. In such cases, only the minimum necessary information is shared.
5. Updating Your Personal Information
If your Personal Information changes, or if you need to correct or update it, you may contact us at the details provided in this Policy and we will take all reasonable steps to incorporate the changes within a reasonable period of time. Where Personal Information is held by a third-party platform through which you access our services, you will need to contact that third party to update it.
You may also update certain Personal Information directly through your account profile on the platform.
Certain information, such as assessment responses, cannot be amended or deleted once submitted. To request deletion of your account or data, please contact us at the details provided in this Policy. We will accommodate such requests to the extent we are not under a legal obligation to retain the data. We are required to retain certain information for compliance with applicable professional standards and law, including payment records and clinical session records. There may also be residual information in our systems that cannot be fully removed.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain your session, remember your preferences, and understand how the platform is used. We use both session cookies, which are deleted when you close your browser or application, and persistent cookies, which are stored between sessions.
We may work with third parties that place or read cookies on your browser or device to improve your experience. By using those third-party services through our platform, you consent to their privacy policies and terms of use. The Company shall not be liable for any issues arising from your use of such third-party services.
You may configure your browser or device settings to refuse cookies or to be notified before accepting them. Disabling certain cookies may affect the functionality of the platform.
7. Log Data
When you access the platform or website, our servers and those of our hosting providers automatically collect certain technical data transmitted by your device or browser. This may include your IP address, device and browser type, operating system version, pages visited, time spent on pages, access times, and similar usage statistics. We use this data to analyse trends, administer the platform, and improve the user experience.
8. Confidentiality and Its Limits
8.1 Our Commitment
All information you share on the platform is treated as confidential. We will not disclose your Personal Information to any party outside those described in this Policy, except as required by law or as otherwise set out herein. The Company requires all Clinical Panel Professionals and Psychiatrists to maintain confidentiality of information shared during consultations.
8.2 Mandatory Exceptions
There are specific circumstances under which confidentiality obligations may be overridden, including but not limited to:
Where there is a credible risk of harm to you or another person. In such cases, a Clinical Panel Professional, Psychiatrist, or the Company may be obligated to notify appropriate persons including emergency contacts or law enforcement to ensure safety.
Where a Clinical Panel Professional or Psychiatrist becomes aware of criminal activity, including present or past abuse of a minor, senior citizen, or person with a disability. In such cases, disclosure to law enforcement may be required by law.
Where disclosure is required by a court order, applicable Indian law, or a regulatory authority.
All reasonable attempts will be made to inform you before any such disclosure is made, to the extent this is practicable and safe.
The User agrees to indemnify the Company for any breach of confidentiality arising from the User's own acts or omissions. Where the User accesses the platform through a third-party platform, the User indemnifies the Company against any data breaches arising from acts or omissions of that third party.
9. Third-Party Disclosure
The Company does not sell or trade your Personal Information to third parties. However, this does not apply to the processing and storage of data by hosting partners and other parties who assist us in operating the platform, conducting our business, or delivering services to you. These include providers of cloud infrastructure, AI processing, payment processing, video and audio technology, website hosting, and analytics, among others.
All such third-party service providers are contractually required to handle your data only in accordance with our instructions and applicable privacy law. They are not permitted to use your data for their own independent purposes.
We may also disclose your information where required by law, court order, or regulatory authority, or where necessary to protect the safety, rights, or property of the Company, its users, or others.
Where data is used for analysis, research, or service improvement purposes, it is anonymised or de-identified before use, such that it cannot be linked back to any individual. We do not use identifiable Personal Information for any such purpose without your separate, explicit consent.
10. Data Security
We employ reasonable administrative, technical, and physical security measures to protect your Personal Information from unauthorised access, use, disclosure, alteration, or destruction. Sensitive Personal Data transmitted through the platform is encrypted in transit in accordance with applicable security requirements under Indian law.
Notwithstanding these measures, no method of electronic transmission or storage is completely secure. The Company shall not be held liable for any loss, misuse, or unauthorised access to Personal Information beyond what is within our reasonable control. You are responsible for maintaining the security and confidentiality of your account credentials. We will never ask for your password by email or phone.
We strongly discourage you from sharing Personal Information in publicly accessible areas of the platform. It is your responsibility to ensure the security of your email account and device, as these may be used to communicate with you in connection with your use of the platform.
11. Data Retention
We retain your Personal Information for as long as your account is active and for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law.
Certain categories of data may be retained for longer where legally required, including payment and billing records, clinical session records, and data relevant to pending legal disputes or regulatory investigations. Upon account deletion, we will take reasonable steps to securely delete or anonymise your Personal Information within the applicable retention period, except for data we are legally required to retain.
12. Third-Party Links
The platform may contain links to third-party websites or services that are not operated or controlled by the Company. The Company is not responsible for the privacy practices, content, or accuracy of any third-party site. Your use of any linked third-party site is entirely at your own risk.
13. International Data Transfers
The Platform is an Indian platform and is controlled and operated by us from India. By accepting the terms of this Privacy Policy you agree that any personal information that you have agreed to provide us through use of the Platform may be stored and processed, transferred between and accessed from India and other countries that may not guarantee the same level of protection of personal information as the one in which you reside. However, we will handle your personal information in accordance with this Privacy Policy at all times.
14. Grievance Redressal
In accordance with the Digital Personal Data Protection Act 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, any grievances regarding this Policy or the handling of your Personal Information may be directed to our Grievance Officer:
Email: hello@breakocd.com
Address: Normera Mindlife Private Limited, A8, 1st Floor, Plot 46A, Merryland CHS, Dr. RGT Marg, Worli, Mumbai 400018, Maharashtra, India
These contact details will also be published prominently on the breakOCD website and within the mobile application. We will acknowledge your grievance and aim to resolve it within a reasonable period of time. If you remain dissatisfied, you may escalate your complaint to the Data Protection Board of India.
15. Changes to This Policy
The Company reserves the right to update this Privacy Policy at any time. Where changes are material, we will endeavour to notify you by email or via an in-app notice before the change takes effect. Your continued use of the platform following any such change constitutes your acceptance of the revised Policy.
16. Jurisdiction and Governing Law
This Privacy Policy is governed by the laws of India. All disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Mumbai, India.
If you access the platform from outside India, you do so on your own initiative and are solely responsible for compliance with applicable local laws. The Company accepts no liability for non-compliance with laws in jurisdictions other than India.