Privacy Policy
What we know about you. What we do with it. What we promise.
What we collect.
When you create an account, we collect the identifier you choose — a phone number or email address — along with the name you provide. We do not require a full name, a photograph, or any identifying document.
When you converse with Mitra, the content of those conversations is stored so that Mitra can maintain continuity across sessions. We also collect basic usage data: when you used the service, how many messages were exchanged, and which subscription tier you are on.
We do not collect location data, device identifiers, browsing history, or any information beyond what is listed above.
How we use it.
Your account information is used solely to authenticate you and provide the service. Your conversations are used to generate Mitra's responses and to maintain the thread of your reflection across sessions.
We use anonymised, aggregated usage data — never individual conversations — to understand how the service is being used and to improve it over time.
We do not use your conversation content to train AI models on your personal disclosures without explicit, informed consent. We do not build advertising profiles. We do not analyse your emotions or mental state for any commercial purpose.
What we do not do.
We do not sell your data. To anyone. Ever.
We do not share your conversations with third parties except where required by law and only after exhausting every legal avenue to protect your privacy. If we are ever required to disclose data by a court or authority, we will notify you to the extent the law permits.
We do not use your conversations for advertising targeting, either on Drishti or on any other platform.
We do not share data with insurance companies, employers, or institutions of any kind.
Data storage and security.
Your data is stored on servers with industry-standard encryption at rest and in transit. We use HTTPS for all communications. Session tokens are stored in secure, HTTP-only cookies that cannot be accessed by browser scripts.
We retain your conversation data for as long as your account is active. If you delete a conversation, it is removed from our systems within 30 days. If you delete your account, all associated data — conversations, usage history, subscription records — is permanently deleted within 30 days.
No security system is impenetrable. If we become aware of a breach that affects your data, we will notify you promptly.
Your rights.
You have the right to access all data we hold about you at any time. You can delete any conversation from within the Drishti interface. You can delete your entire account and all associated data by writing to us at the contact address below.
You have the right to know what data we hold, to correct inaccuracies, and to receive your data in a portable format. You have the right to withdraw consent at any time.
For users in India, these rights are protected under the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023.
Cookies and local storage.
We use a single session cookie — named drishti_session — to keep you signed in. This cookie is essential to the service; the service cannot function without it. We do not use any tracking cookies, advertising cookies, or third-party cookies.
We use your browser's local storage to save conversation history on your device. This data never leaves your device unless you are signed in, in which case it is synchronised with your account.
Children.
Drishti is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it immediately.
Changes to this policy.
If we make material changes to this policy, we will notify you by email or by a prominent notice within the service before the changes take effect. Your continued use of Drishti after the effective date constitutes acceptance of the revised policy.
This policy was last updated in May 2026.
Contact.
Questions about this policy, requests to access or delete your data, or any concerns about how your information is handled can be sent to:
privacy@askdrishti.com
For general account or support queries, write to care@askdrishti.com. We aim to respond within 3 business days.