Beacon Minds Solutions Private Limited (“Company”, “We”, “Our”)
Applies to: Eunoia (End User App) · Eunoia Pro (Professional App) · Eunoia Pro Trainer App · all related websites and services

1. Introduction

• We are committed to protecting your personal data and ensuring transparency in how we collect, use, and process information.
• This Privacy Policy is governed by and aligned with the Digital Personal Data Protection Act, 2023 (India) (“DPDP Act”).
• Where Eunoia Pro connects to Google services (including Google Calendar) on behalf of a Professional User, this Policy is also aligned with Google's API Services User Data Policy, including its Limited Use requirements, as described in Section 17 below.
• By accessing or using our Services, you consent to this Privacy Policy.

2. Scope of This Policy

This Privacy Policy applies to:

• Individual users using AI-based wellness tools
• Professionals (therapists, counselors, coaches, accredited psychology students, psychology facultyetc.) using Eunoia Pro
• Clients of professionals (where applicable)
• Institutional users (universities, corporate partners) and their authorized members

3. Categories of Data We Collect

3.1 Personal Data

• Name, email, phone number, billing details
• Professional credentials (for Eunoia Pro users)
• Demographic, educational, or professional information

3.2 Personal Data – Sensitive & Behavioral Data (User-Generated)

Includes data voluntarily provided through:

• AI Chat interactions
• AI Mental Wellness Assessments
• Journals and reflections
• Planner and task tracking
• Therapy session notes and documentation

3.3 Professional Client Data (Eunoia Pro)

Collected and controlled by Professionals, including:

• Client personal and clinical information
• Session recordings (audio/video)
• Transcripts, notes, reports, and documents

3.4 Audio, Video & AI Interactions Data

• Voice inputs and dictation
• Uploaded recordings
• AI-generated outputs (transcriptions, summaries, insights)

3.5 Technical & Usage Data

• IP address, device, browser
• Usage patterns, session logs
• Cookies and analytics

3.6 Google Account & Google Calendar Data (Eunoia Pro – Create Booking Feature)

If you are a registered Professional User of Eunoia Pro and choose to connect your Google Account to use the Create Booking feature, we access the following categories of Google user data through Google's OAuth 2.0 consent process and the Google Calendar API:

• Basic profile information: your name, email address, and profile picture (via the openid, userinfo.email, and userinfo.profile scopes), used to identify and authenticate your account.
• Google Calendar data: the ability to view and edit events on your connected Google Calendar(s) (via the calendar.events scope), including event titles, date/time, attendee details you choose to include, and meeting links, solely to create, update, reschedule, or cancel therapy session bookings that you initiate within Eunoia Pro.
• Limited Use Requirements: The use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements

We do not access, view, or process any other data on your Google Account, and we do not access calendars, events, or files that are unrelated to bookings created through Eunoia Pro.

4. Lawful Basis & Explicit Consent (DPDP Compliance)

4.1 Explicit User Consent

By using the Services, you provide free, informed, specific, and unambiguous consent to process your data. This includes data provided via typing inputs, voice dictation, and uploads (documents, audio, video).

4.2 AI-Specific Consent

• Your inputs may be processed by AI systems
• AI may generate outputs based on your data
• Such processing is necessary to deliver the Service

4.3 Google Account Consent

Where you connect your Google Account, Google's consent screen separately and explicitly discloses each scope of access requested (basic profile and calendar events). Your consent is obtained directly by Google on our behalf before any access is granted, and you may decline any or all scopes at that stage.

4.4 Professional Responsibility (Eunoia Pro)

Professionals agree and warrant that:

• They have obtained explicit consent from their clients
• Consent covers: recording, AI processing, storage, and analysis
• They will not enter client-identifiable clinical or diagnostic information into Google Calendar event fields (titles, descriptions, or attendee names); Calendar entries should be limited to scheduling information (e.g., session date, time, and a non-identifying reference)

The Company relies on such representations and is not responsible for failure by professionals to obtain valid consent or to limit the calendar data they enter.

5. Purpose of Data Processing

We process data to:

• Provide and operate the Services
• Enable AI-powered features (chat, transcription, insights)
• Enable Professionals to schedule, reschedule, and manage therapy session meetings via the Create Booking feature, using Google Calendar data strictly for that purpose
• Improve product performance and personalization
• Manage accounts, subscriptions, and payments, including paid Eunoia Pro plans
• Ensure safety, prevent misuse, and enforce policies
• Comply with legal and regulatory obligations

6. Data Fiduciary & Roles (DPDP Alignment)

• Company: Acts as a Data Fiduciary for platform operations
• Professionals (Eunoia Pro): Act as independent Data Fiduciaries for their client data
• Users: Act as Data Principals

The Company does not control how professionals use client data beyond providing infrastructure.

7. Data Sharing & Disclosure

We do not sell personal data. We may share data:

• With trusted service providers (hosting, analytics, AI infrastructure)
• With legal authorities when required
• To protect rights, safety, or prevent fraud

All third parties are bound by confidentiality and data protection obligations.

Google User Data – Restricted Use Disclosure

Eunoia Pro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not use Google user data (including Calendar data) for: advertising or targeted/personalized advertising, selling to data brokers or information resellers, determining creditworthiness or lending, building databases unrelated to the Create Booking feature, or training generalized AI/ML models.

8. Cross-Border Data Transfers

Data may be processed or stored outside India where required for Service delivery, including on cloud infrastructure used to host the Create Booking feature. We ensure such transfers comply with DPDP Act requirements and applicable safeguards.

9. Data Retention

We retain data only as long as necessary for:

• Service delivery
• Legal and compliance requirements
• Dispute resolution

Google Calendar and Google Account data accessed via the Create Booking feature is retained only for as long as needed to create and manage the relevant booking, and is deleted or access is revoked promptly upon (a) disconnection of your Google Account, (b) account deletion, or (c) withdrawal of consent, whichever occurs first.

Upon deletion request: data is permanently deleted or anonymized. Certain data may be retained if legally required.

10. Your Rights (DPDP Act)

As a Data Principal, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Withdraw consent at any time, including revoking Google Calendar access
• Nominate another individual to exercise rights (as per DPDP Act)

To exercise rights: info[at]eunoia-app.com

11. Withdrawal of Consent

You may withdraw consent at any time. However, this may limit or stop access to certain features, and continued use after withdrawal may not be possible.

To disconnect your Google Account and revoke Eunoia Pro's access to your Google Calendar, you may:

• Use the “Disconnect Google Calendar” option within Eunoia Pro account settings; or
• Visit Google Account permissions at myaccount.google.com/permissions and remove Eunoia Pro's access directly

Disconnecting will disable the Create Booking feature but will not affect your access to other Eunoia Pro features.

12. Data Security

We implement encryption and secure storage, access controls and authentication safeguards, and monitoring and incident response measures. However, no system is completely secure.

13. AI & Automated Processing Disclaimer

• AI outputs are automated and may not always be accurate
• AI insights are assistive in nature only
• Users and professionals must exercise independent judgment

The Company is not liable for decisions made based on AI outputs. Google user data is not used to train AI or machine learning models, whether generalized or personalized.

14. Children's Privacy

Services are strictly for individuals 18 years and above. We do not knowingly collect data from minors.

15. Account & Data Deletion

Users may delete their account through the app, or by contacting info[at]eunoia-app.com. Upon deletion, data is permanently removed, any connected Google Account access is revoked, and access to services is terminated.

16. Cookies & Tracking Technologies

We use cookies for analytics, performance, and user experience optimization. You may manage cookies via browser settings.

17. Google API Services User Data Policy Compliance

Eunoia Pro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, and without limiting Sections 3.6 and 7 above:

• We only request the minimum scopes necessary to operate the Create Booking feature.
• We use Google user data only to provide or improve user-facing features of Eunoia Pro that you have directly requested; we do not use it for any other purpose.
• We do not transfer Google user data to third parties except: (i) with your explicit consent, (ii) for security purposes (e.g., detecting fraud or abuse), (iii) to comply with applicable law, or (iv) as part of a merger, acquisition, or sale of assets, subject to continued adherence to this Policy.
• Human access to Google user data is limited to circumstances required for security purposes, to comply with applicable law, with your consent, or where data has been aggregated and anonymized.
• Google user data received via the Calendar API is not used for serving advertisements.

If you have questions about our Google API data practices, contact info[at]eunoia-app.com.

18. Limitation of Liability (Privacy Context)

• The Company acts as a technology platform provider
• Professionals are responsible for their client data compliance
• Users are responsible for the data they choose to share, including data entered into synced Google Calendar events

The Company shall not be liable for unauthorized user disclosures, professional misuse of client data, or errors in AI processing.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted with an updated effective date. Where changes materially affect how we use Google user data, we will notify affected users through the app or by email prior to the change taking effect.

20. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of India. All disputes are subject to the courts of Bangalore, India.

21. Contact & Grievance Officer (DPDP Requirement)

• Beacon Minds Solutions Private Limited, Bangalore, India.
• Email: info[at]eunoia-app.com