Privacy Policy

The data controller is Kandhugule Consultancy Services Private Limited, Hyderabad, India. Contact: Info@kandhugule-kcs.com · www.kandhugule-kcs.com

• Shadow path (anonymous): a handle you invent and a hashed passphrase. No name, email, phone number or address.
• Marked path (named account): the name and email you give us, kept separate from your peer-support activity.
• Things you write: notes, letters and reflections you choose to save.
• Forms you send us: contact, listener and clinician registrations — including the details you type in — so we can reply.
• Basic technical data: minimal logs needed to keep the service running and secure.

• We do not record, store or transcribe session audio.
• We do not sell or rent your data, and we do not run advertising trackers.
• We do not reveal a seeker's identity to a listener, or a listener's to a seeker.
• Supervisors never listen to live calls; they see metadata only.

Depending on where you live, our legal bases are: performing the service you asked for (contract), your consent (for optional analytics, research invitations or emails), our legitimate interest in keeping the service safe and working, and legal obligations. You can withdraw consent at any time.

Account records last until you delete your account. Form submissions are kept for up to 24 months so we can follow up. Security logs are kept for a short period, typically under 90 days. Session audio is never kept, because it is never recorded.

We use a small number of infrastructure providers for hosting, database, email delivery and payment processing. They act on our instructions under contract and may store data in the EU, UK, India or the United States. Where data leaves your region, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

Wherever you are, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or withdraw consent. Depending on your region these rights come from the EU GDPR, UK GDPR, India's DPDP Act, HIPAA-adjacent state rules, CCPA/CPRA, Australia's APPs, or the UAE and Saudi PDPL. Write to Info@kandhugule-kcs.com and we will respond within 30 days.

On the shadow path we may be unable to act on a request, simply because we hold nothing that links the account to you. Deleting a shadow account means starting fresh.

We use only what is needed to keep you signed in and remember your preferences. There are no advertising or cross-site tracking cookies.

SuShRth is for adults. We do not knowingly collect data about anyone under 18, and we delete it if we learn we have.

If you are unhappy with how we handled your data you can complain to your local supervisory authority — for example the ICO in the UK, your EU data protection authority, or the Data Protection Board of India. We will update this page as the service changes and revise the date above.

See also our Terms of Use.