1. How we think about your privacy
Looking for mental health support is personal. We collect only what we need to help you find a counselor and manage your sessions, we explain why we ask for each detail, and we never sell your information.
2. What we collect
When you create an account or book a session we collect your name, email, mobile number, and date of birth. If you book as a guest, we keep the contact details you enter so the counselor can hold the session with you. If you use the matching quiz, we save your preferences, such as concerns, language, budget, and session format, so we can suggest counselors that fit. Daily check-ins about how you are feeling stay private to you; counselors never see them.
For payments, we keep the booking amount, payment status, and a payment reference so your booking and any refund can be traced. Payments are collected by Leshya and processed by our payment partner Razorpay; we never see or store your card, bank, or UPI credentials. Counselors additionally share professional details for review, such as qualifications, registration numbers, and withdrawal account details. Like most services, we also collect basic device and usage information to keep Leshya secure and to understand what to improve.
When someone buys or receives a gift card, we keep the buyer name and email, recipient name and email, gift message if provided, card code, balance, expiry, payment status, and redemption history so the card can be delivered and used only by the intended recipient.
3. How we use it
We use your information to run your bookings, connect you with your counselor, send confirmations and reminders, personalize your experience, keep the platform safe, and meet our legal duties. We send product updates only when you have chosen to receive them, and you can opt out at any time.
If you sign up for our monthly email on the resources pages, we store your email address and the time you agreed. We use it to send one email a month, nothing more. Every email carries an unsubscribe link, and leaving takes one click.
For gift cards, we email the code to the recipient. Anyone with the code can use it toward a session, so keep it private.
4. Who sees your information
Your counselor sees what they need to hold your session: your name, contact details, and booking information. We use trusted services to run Leshya, including Supabase for secure data storage, Razorpay for payment processing, and Google or Microsoft to create meeting links for online sessions. Each of these receives only what it needs to do its job. We share information with authorities only when the law requires it or when someone's safety is at risk.
If your counselor practises at a clinic, the clinic's team also sees what it needs to run your visits: the front desk and the clinic's admins can see your name, contact details, session times, and whether a session is paid. Every clinic agrees to use this only to run your sessions, and for nothing else. Leshya remains answerable to you for your personal data, so if you believe a clinic has misused it, tell us and we will act. Your answers to first-session questions stay between you and your counselor: the clinic cannot read them, and neither can we. Your daily check-ins stay private to you alone.
If you add people to a couple or group session, we keep the name and email you give for each of them so the session details can reach them. We use those details for nothing else, and anyone added this way can write to us to have their details removed.
If you connect your Google Calendar, what Leshya asks for depends on your role. Counselors grant two scopes: calendar.events, to create, update, and cancel calendar events for sessions booked through Leshya, including adding a Google Meet link, and calendar.freebusy, to read your busy and free times so clients are only offered slots when you are available. Customers grant one scope, calendar.events, so the sessions you book and their meeting links are added to your own calendar. In both cases Leshya only touches events it creates for your Leshya sessions. It does not read, edit, or delete your other calendar events, and never uses this data for advertising or sells it. Your Google authorization tokens are stored encrypted and used solely for the actions above. You can disconnect Google Calendar at any time from your account settings, which revokes Leshya's access and deletes the stored tokens.
Leshya's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this calendar data to train or improve any AI or machine learning models.
5. How we protect and keep it
Your data is encrypted in transit and at rest, and access inside Leshya is limited to people who need it to support you. We keep your information while your account is active or while we need it for legal and accounting reasons, and we remove it after that.
6. First-session questions and consent
Before your first session with a counselor, we ask a few questions so they can prepare. Your answers to these questions are stored encrypted and kept with that booking. You and your counselor can read them. Leshya staff cannot.
Before that first session we also ask you to agree to two things: that you understand the nature of counseling on Leshya and the limits of confidentiality, and that you agree to us storing your responses and session records to run your sessions. We record which version of this consent you agreed to. If we change the wording, we ask you to agree again the next time you book a first session.
You can withdraw this consent at any time from your account, under My account in the Privacy tab. Withdrawing it does not cancel sessions you have already booked. It means we will ask you to agree again before your next first session, and you can ask us to remove your saved answers.
7. Your choices and rights
You can view and update your details from your account, change your notification choices, and ask us to correct or delete your information, in line with India's Digital Personal Data Protection Act. If you are under 18, a parent or guardian gives consent for you, and they can withdraw it at any time. To make any of these requests, write to us and we will respond promptly.
9. Changes and contact
When this policy changes in a way that matters, we will tell you before the change takes effect. For any question, request, or concern about your privacy, write to us at support@leshya.app. Our grievance officer for data protection matters is Chhavi Kothari, reachable at the same address. We acknowledge a grievance within 48 hours and resolve it within 15 days.