PRIVACY POLICY

Last Updated: 12 October 2026

1. INTRODUCTION

Welcome to JNANTYA INDIA PRIVATE LIMITED ("Company", "we", "us", or "our"). We operate an adaptive AI platform ("Platform") that provides conversational AI services integrated with psychological, philosophical, spiritual, astrological, and metaphysical models to deliver self-awareness, emotional support, and actionable insights across mental health, leadership development, education, creative tools, and spiritual growth.

This Privacy Policy explains how we collect, use, store, share, transfer, disclose, and otherwise process your personal data when you use our Platform, website, mobile application, services, products, features, content, and related interfaces. By accessing or using our Platform, you acknowledge that you have read and understood this Privacy Policy and, where required by applicable law, consent to the collection and processing of your personal data in the manner described herein.

Important: Our Platform may process highly sensitive and intimate personal information voluntarily disclosed by you, including mental health-related information, psychological assessments, behavioral patterns, spiritual and religious beliefs, and decision-making profiles. We are committed to protecting such personal data with enhanced safeguards, lawful processing standards, and privacy-by-design principles.

This Privacy Policy is intended to comply with applicable laws in India, including, to the extent applicable:

• The Digital Personal Data Protection Act, 2023 and rules framed thereunder, as amended from time to time ("DPDP Act")

• The Information Technology Act, 2000

• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), to the extent relevant

• The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, where applicable

• Applicable consumer protection, cybersecurity, medical/health-adjacent, contractual, and e-commerce related legal requirements in India

Nothing in this Privacy Policy is intended to limit any rights available to you under applicable law.

2. WHO WE ARE — DATA FIDUCIARY / BODY CORPORATE

For the purposes of the DPDP Act, JNANTYA INDIA PRIVATE LIMITED is the Data Fiduciary, meaning we determine the purpose and means of processing your personal data. To the extent applicable under the Information Technology Act, 2000 and the SPDI Rules, we may also be regarded as a "body corporate" collecting, receiving, possessing, storing, dealing, or handling information.

Our Details:

• Legal Name: JNANTYA INDIA PRIVATE LIMITED

• Registered Address: PL-1706, Eldeco Accolade, Sector 2, Sohna, Gurugram, Haryana 122103

• CIN: U62020HR2026PTC142781

• Email: info@ananteya.com

• Website: https://ananteya.com

• Grievance Officer: info@ananteya.com, +91 92174 71020

• Data Protection Officer: Not separately appointed at present. Please contact our Grievance Officer.

If you have any questions about how we process your personal data, you may contact us using the details set out in Section 19 below.

3. APPLICABILITY AND SCOPE

This Privacy Policy applies to all users, visitors, subscribers, customers, participants, and other individuals who access or use the Platform or otherwise interact with us in connection with our services.

This Privacy Policy applies to personal data collected:

• Directly from you

• Automatically through your use of the Platform

• From devices connected to the Platform

• From service providers, business partners, payment partners, analytics providers, or publicly available sources, where lawful

• Through communications, support interactions, surveys, assessments, forms, waitlists, events, webinars, communities, and social media interactions with us

This Privacy Policy does not apply to:

• Information processed in a fully anonymized manner such that it cannot reasonably be linked to you

• Third-party websites, applications, products, or services not controlled by us, even if linked from our Platform

• Personal data processed by independent third parties in their own capacity as separate data fiduciaries/controllers

4. WHAT PERSONAL DATA WE COLLECT

We collect the following categories of personal data from you:

4.1 Account and Identity Information

• Name, email address, phone number, date of birth, gender

• Username, password, and authentication credentials

• Profile photograph (optional)

• Government-issued identification details, where required for verification, compliance, fraud prevention, or age-gating purposes

• Preferences, profile settings, language, and account-related choices

4.2 Sensitive / High-Risk Personal Data Voluntarily Shared by You

Certain information processed through the Platform may be sensitive in nature under legacy Indian privacy constructs or may otherwise warrant heightened protection due to the nature of the service. Such data may include:

• Mental Health and Psychological Data: Information you share about your mental health conditions, emotional state, psychological assessments, therapy history, stress levels, anxiety, depression, trauma, mood patterns, or other mental health-related information

• Behavioral and Decision-Making Patterns: Data derived from your interactions with the AI, including behavioral tendencies, decision-making patterns, personality traits, cognitive patterns, emotional responses, and inferred preferences

• Spiritual and Religious Beliefs: Information about your spiritual practices, religious beliefs, astrological preferences, philosophical views, and metaphysical interests

• Biometric Data (if applicable): Voice recordings, speech patterns, facial imagery, or other biometric attributes if you use voice, audio, or video interaction features and expressly permit such collection

• Health Data: Any physical or mental health information you voluntarily share during conversations with the AI

• Other Intimate Personal Data: Journal-style reflections, relationship information, family-related disclosures, personal dilemmas, emotional vulnerabilities, and similar content voluntarily shared in conversations

We request that you do not provide any personal data that is not reasonably necessary for your use of the Platform.

4.3 Conversational and Interaction Data

• All text, voice, image, video, or multimedia inputs you provide to the AI during interactions

• Your prompts, questions, concerns, goals, reflections, and feedback

• Contextual conversation history and memory retained across sessions to enable personalized responses

• Metadata such as timestamps, session duration, usage flows, and interaction frequency

• Records of support tickets, complaints, incident reports, or requests submitted by you

4.4 Technical and Device Data

• IP address, browser type, browser settings, operating system, device type, device model

• Device identifiers, advertising identifiers, app instance IDs, and log information

• Referring URLs, crash reports, diagnostics, and performance data

• Cookies, SDKs, pixels, tags, session IDs, and similar technologies

• Approximate or precise geolocation data, if you enable relevant permissions

4.5 Payment and Financial Data

• Payment method details, masked card details, UPI reference details, billing address, invoice details, tax information, and transaction history

• Payment status, subscription information, refunds, and chargeback records

• We do not store full payment card details unless handled by compliant payment service providers in accordance with applicable law and industry security standards

4.6 Data You Provide About Others

If you refer another person to our Platform, upload content containing another person's information, nominate another individual, or otherwise share third-party personal data with us, you represent and warrant that you have the necessary authority, notice, and consent to do so and to permit us to process such data for the relevant purpose.

4.7 Information from Third Parties

We may receive information about you from:

• Identity verification vendors

• Payment gateways and financial institutions

• Social sign-in or authentication providers

• Advertising, attribution, analytics, fraud prevention, and cybersecurity vendors

• Licensed professionals or referral partners, where you direct or consent to such sharing

• Publicly available sources, where lawful and relevant

5. HOW WE COLLECT PERSONAL DATA

We collect personal data in the following ways:

• When you create an account or profile

• When you subscribe to or purchase our services

• When you interact with the AI or use Platform features

• When you fill forms, assessments, questionnaires, or surveys

• When you communicate with us via email, chat, phone, or social media

• When you enable device permissions such as microphone, camera, contacts, or location

• When you participate in events, communities, promotions, or referral programs

• Through cookies and similar tracking technologies

• From service providers, business partners, and third-party integrations, where permitted by law

6. HOW WE USE YOUR PERSONAL DATA — PURPOSE LIMITATION

We process your personal data only for specific, lawful, and disclosed purposes, including the following:

6.1 To Provide and Improve the Platform

• Deliver conversational AI services tailored to your inputs

• Generate personalized insights, recommendations, and guidance

• Maintain contextual memory of your conversations to ensure continuity and relevance across sessions

• Enable account creation, login, subscriptions, and profile management

• Troubleshoot technical issues and improve functionality, reliability, safety, and user experience

• Improve AI models, algorithms, and response quality, subject to applicable law, contractual commitments, and any choices made available to you

6.2 To Deliver Mental Health and Wellness Services

• Provide emotional support, mental health guidance, wellness insights, and related assistance through AI-enabled tools

• Identify patterns in your emotional and psychological state to offer relevant prompts and insights

• Escalate or recommend professional support, crisis resources, or licensed mental health professionals where appropriate and where available, subject to your consent and applicable disclaimers

• Monitor for safety signals, harmful content, misuse, or emergency-risk indicators, where technologically feasible and legally permitted

6.3 To Enable Leadership, Educational, and Creative Tools

• Deliver leadership development support, educational content, creative tools, reflective exercises, and self-development features based on your profile, interests, and goals

6.4 Account Management and Communication

• Create and manage your account

• Send service-related notices, security alerts, transaction confirmations, and important updates

• Respond to your queries, complaints, support requests, and grievance submissions

• Provide onboarding support, renewals, reminders, and administrative communications

6.5 Safety, Security, Fraud Prevention, and Compliance

• Detect, prevent, investigate, and remediate fraud, abuse, harassment, unlawful activity, unauthorized access, model manipulation, and other misuse of the Platform

• Enforce our terms, policies, and community standards

• Protect the rights, safety, integrity, and property of the Company, users, third parties, and the public

• Comply with applicable legal obligations, law enforcement requests, judicial orders, regulatory directions, tax requirements, accounting standards, and audit obligations

6.6 Research, Analytics, and Product Development

• Conduct analytics, benchmarking, testing, quality assurance, and internal research

• Develop, validate, evaluate, and improve our systems, safety controls, and user experience

• Produce de-identified, anonymized, or aggregated reports, trends, and insights that do not reasonably identify you

6.7 Marketing and Promotional Communications

• Send newsletters, product updates, surveys, event invitations, promotional offers, and other marketing communications, where permitted by law and subject to your preferences

• Personalize content, recommendations, and engagement messages based on your interactions and preferences

6.8 Corporate Transactions and Business Administration

• Facilitate investments, restructuring, financing, audits, mergers, acquisitions, divestitures, business transfers, or similar corporate events

• Maintain internal records, governance documentation, risk registers, and compliance controls

We will not process your personal data for any purpose that is incompatible with the purposes described above unless such processing is permitted by law or we obtain any additional consent required under applicable law.

7. LEGAL BASIS / GROUNDS FOR PROCESSING

We process personal data on one or more of the following grounds, to the extent recognized under applicable Indian law:

• Consent: Where you have provided free, specific, informed, unconditional, and unambiguous consent for one or more specified purposes

• Performance of Contract: Where processing is necessary to provide the services requested by you or to perform our contractual obligations

• Compliance with Legal Obligations: Where processing is necessary to comply with applicable law, lawful directions, court orders, or regulatory requirements

• Legitimate Uses / Employment of Lawful Uses: Where processing is otherwise permitted under the DPDP Act or other applicable law for legitimate uses, safety, fraud prevention, network security, or related lawful purposes

• Medical or Emergency Situations: Where necessary to respond to emergencies involving threat to life or health, subject to applicable law

• Other Lawful Grounds: Any other ground available under applicable law from time to time

Where consent is the basis of processing, you may withdraw such consent in accordance with Section 12 of this Privacy Policy.

8. CONSENT MECHANISM AND NOTICE

Where required by law, we will provide you with or make available a notice at or before the time of collection of personal data specifying:

• The personal data to be collected

• The purpose of processing

• The manner in which you may exercise your rights

• The manner in which you may withdraw consent

• The categories of recipients with whom data may be shared, where required

• Contact details of the Grievance Officer or designated contact point

Your consent may be obtained through click-wrap acceptance, in-app notices, account registration flows, device permission prompts, email confirmation, written approval, or other lawful mechanisms.

You agree that:

• Consent provided by you may be logged and retained as evidence of notice and consent

• Separate or additional consents may be obtained for certain high-risk processing activities

• If you decline to provide certain personal data or withdraw consent for certain processing, some parts of the Platform may become unavailable, degraded, or non-functional

9. AI-DRIVEN PROFILING, INFERENCING, AND AUTOMATED PROCESSING

Our Platform uses artificial intelligence, large language models, machine learning, and data analytics to:

• Analyse your inputs and interactions

• Generate personalized responses and insights

• Create or infer psychological, behavioral, preference-based, and decision-making profiles

• Predict emotional states, likely interests, and support needs

• Improve continuity, relevance, and contextualization of responses

Important Disclosures:

• No Substitute for Professional Advice: Outputs generated by the Platform are informational and assistive in nature and do not constitute medical advice, psychiatric diagnosis, psychotherapy, legal advice, financial advice, or any other regulated professional advice unless expressly stated otherwise through a separately governed service

• No Fully Automated Decisions on Critical Matters Without Safeguards: We do not intentionally rely solely on fully automated processing to make decisions producing legal or similarly significant effects on you without appropriate safeguards, human review where required, or another lawful basis

• Potential for Inaccuracy: AI-generated outputs may be incomplete, inaccurate, inappropriate, or unsuitable in certain situations. You should exercise independent judgment and seek professional assistance where needed

• Human Escalation / Review: You may contact us to raise concerns regarding AI-generated outputs, request review of harmful or inaccurate outputs, or seek assistance in relation to the functioning of the Platform

• Safety Monitoring: We may use automated systems and human moderation, where necessary and proportionate, to detect abuse, harmful conduct, security incidents, or crisis indicators

10. CHILDREN AND PERSONS WITH DISABILITIES

Our Platform is not intended for children, unless expressly stated otherwise and operated in compliance with applicable law. To the extent required under the DPDP Act and related rules:

• We do not knowingly process personal data of children without verifiable consent of a parent or lawful guardian

• We do not knowingly undertake tracking, behavioural monitoring, or targeted advertising directed at children in a manner prohibited by applicable law

• We do not knowingly process personal data in a manner likely to cause any detrimental effect on the well-being of a child

If use of the Platform by a child is permitted for a specific offering, such use shall be subject to parental or lawful guardian consent and any age-gating or verification measures we may implement.

If you are a parent or lawful guardian and believe that a child has provided personal data to us without required authorization, please contact us immediately so that we may take appropriate action.

Where applicable law requires additional safeguards for persons with disabilities represented by lawful guardians, such safeguards shall apply mutatis mutandis.

11. COOKIES, TRACKERS, AND SIMILAR TECHNOLOGIES

We use cookies, software development kits (SDKs), pixels, local storage, tags, and similar technologies to:

• Maintain sessions and authenticate users

• Remember preferences and settings

• Analyse traffic, usage, performance, and engagement

• Secure the Platform and prevent fraud

• Measure campaign effectiveness

• Personalize content and features, subject to law and your preferences

Cookies may be:

• Strictly necessary

• Functional

• Analytics-related

• Performance-related

• Advertising or attribution-related, where applicable

You may manage cookies through your browser or device settings. However, disabling certain cookies or permissions may affect the availability or proper functioning of the Platform.

This website does not currently use analytics, advertising or tracking cookies. If that changes, we will ask for your consent first.

12. YOUR RIGHTS AS A DATA PRINCIPAL / DATA SUBJECT

Subject to applicable law, you may have the following rights in relation to your personal data:

12.1 Right to Access Information

You may request a summary of the personal data being processed by us, information regarding processing activities, and details of recipients with whom your personal data has been shared, to the extent required by law.

12.2 Right to Correction and Updating

You may request correction, completion, or updating of inaccurate, misleading, incomplete, or outdated personal data.

12.3 Right to Erasure

You may request deletion or erasure of your personal data where such deletion is required by law or where the purpose of processing has been fulfilled, consent has been withdrawn, or retention is no longer necessary, subject to legal exceptions.

12.4 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time with effect for future processing. Withdrawal will not affect the lawfulness of processing undertaken prior to such withdrawal.

12.5 Right to Grievance Redressal

You may raise concerns or complaints regarding our processing of your personal data by contacting our Grievance Officer.

12.6 Right to Nominate

You may nominate another individual to exercise your rights under applicable law in the event of your death or incapacity, to the extent such right is available under applicable law.

12.7 Right to Complaint Before Competent Authority

If you are not satisfied with our response, you may have the right to approach the appropriate statutory authority, including the Data Protection Board of India, subject to applicable law.

How to Exercise Your Rights: You may submit a request by emailing info@ananteya.com or through account settings or any privacy request mechanism made available on the Platform.

We may take reasonable steps to verify your identity before acting on any request. We may reject or limit requests where permitted by law, including where we are unable to verify identity, where the request is manifestly unfounded, or where retention is required by law.

13. DATA RETENTION — HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, for as long as your account remains active, for as long as required by applicable law, or for such longer period as may be necessary for legal claims, enforcement, fraud prevention, or audit requirements.

Indicative Retention Periods:

When personal data is no longer required, we will delete, erase, anonymize, or securely dispose of it in accordance with applicable law and our retention practices.

14. HOW WE SHARE OR DISCLOSE YOUR DATA

We do not sell your personal data for monetary consideration. We may share, disclose, or transfer personal data only in the following circumstances and subject to applicable safeguards:

14.1 Service Providers / Data Processors

We engage trusted third-party vendors, processors, and service providers for functions such as:

• Cloud hosting and infrastructure

• AI model support and processing infrastructure

• Payment processing

• Customer support and CRM

• Analytics, diagnostics, and monitoring

• Security, fraud prevention, and identity verification

• Email, SMS, push notification, and communication services

• Audit, legal, compliance, and professional advisory services

Such parties are authorized to process personal data only for specified purposes, under contractual confidentiality and data protection obligations, and in accordance with our instructions to the extent required by law.

14.2 Licensed Professionals and Support Partners

With your consent or at your direction, we may share relevant information with licensed therapists, psychologists, psychiatrists, coaches, counselors, wellness experts, or referral partners to facilitate support or services requested by you.

14.3 Affiliates and Group Entities

We may share data with our holding companies, subsidiaries, affiliates, or entities under common control for internal administration, compliance, security, support, analytics, product development, and service delivery purposes, subject to appropriate safeguards.

14.4 Legal, Regulatory, and Governmental Disclosures

We may disclose personal data where required or permitted by law, including in response to subpoenas, court orders, governmental requests, law enforcement requirements, regulatory directives, tax inquiries, or to establish, exercise, or defend legal rights.

14.5 Corporate Transactions

In connection with a proposed or completed merger, acquisition, investment, financing, asset sale, business transfer, insolvency proceeding, or restructuring, personal data may be disclosed to counterparties, advisors, lenders, or acquirers, subject to confidentiality and lawful processing requirements.

14.6 Protection of Rights and Safety

We may disclose personal data where necessary to protect the rights, safety, property, or security of the Company, users, third parties, or the public, including to investigate fraud, cyber incidents, abuse, or threats of harm.

15. CROSS-BORDER TRANSFERS

We may store and process personal data in India and, where permitted by applicable law, in other jurisdictions through our service providers or affiliates.

Where personal data is transferred outside India, we will do so only:

• As permitted under the DPDP Act and applicable rules

• Subject to any government restrictions, negative lists, or transfer conditions then in force

• Pursuant to appropriate contractual, technical, and organizational safeguards, where applicable

To the extent Indian law restricts transfer of personal data to any particular jurisdiction, we will not transfer personal data to such jurisdiction in contravention of law.

If all personal data is hosted and processed only within India, the Company may specifically state so in its operational disclosures or product documentation.

16. HOW WE PROTECT YOUR DATA — SECURITY SAFEGUARDS

We implement and maintain reasonable security practices and procedures designed to protect personal data against unauthorized access, acquisition, use, disclosure, alteration, destruction, loss, or misuse.

Technical Safeguards:

• Encryption of data in transit using industry-standard cryptographic protocols

• Encryption or equivalent protection of sensitive stored data

• Access controls, authentication measures, and privileged access restrictions

• Network security controls, logging, monitoring, and threat detection

• Vulnerability management, patching, security testing, and periodic assessments

• Backup, recovery, and resilience controls

• Secure development and change management practices

Organizational Safeguards:

• Role-based access control and least-privilege principles

• Confidentiality obligations for employees, consultants, and contractors

• Internal privacy, security, and incident management policies

• Due diligence and contractual controls for third-party vendors

• Employee training and awareness programs

• Periodic review of security practices

AI-Specific Safeguards:

• Controls to reduce unauthorized extraction, prompt abuse, model misuse, and adversarial exploitation

• Dataset minimization and access restriction practices, where feasible

• Testing for bias, safety, harmful output patterns, and governance compliance

While we strive to use commercially reasonable safeguards, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorized access or security incident.

17. PERSONAL DATA BREACHES

In the event of a personal data breach, we will take such measures as may be required under applicable law, which may include:

• Assessing and containing the incident

• Mitigating harm and restoring system integrity

• Maintaining records of the incident and corrective actions

• Notifying affected users and/or the competent regulatory authority where required by law

• Cooperating with lawful investigations and remediation requirements

Nothing in this Privacy Policy shall be construed as an admission of liability in relation to any specific incident.

18. THIRD-PARTY LINKS, PLUG-INS, AND INTEGRATIONS

Our Platform may contain links to third-party websites, applications, plug-ins, SDKs, APIs, payment gateways, app stores, social media platforms, or services. We are not responsible for the privacy, security, content, or practices of such third parties. Your interaction with such third parties is governed by their own terms and privacy policies.

Where third-party integrations are enabled, certain personal data may be shared or exchanged to enable the requested functionality. We encourage you to review the privacy practices of all third parties with whom you interact.

19. GRIEVANCE REDRESSAL MECHANISM

If you have any questions, concerns, complaints, or grievances regarding this Privacy Policy or our processing of personal data, you may contact our Grievance Officer at:

Grievance Officer:
Email: info@ananteya.com
Phone: +91 92174 71020
Address: PL-1706, Eldeco Accolade, Sector 2, Sohna, Gurugram, Haryana 122103

We will endeavour to acknowledge and address grievances within the timelines prescribed by applicable law.

20. CHANGES TO THIS PRIVACY POLICY

We may modify or update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, business practices, services, products, technologies, or risk posture.

Where required, we will notify you of material changes by one or more of the following means:

• Posting the updated Privacy Policy on the Platform

• Updating the "Last Updated" date above

• Sending an email or in-product notification

• Displaying a prominent notice on the Platform

To the extent permitted by law, your continued use of the Platform after such changes become effective shall constitute your acknowledgement of the updated Privacy Policy. Where additional consent is required by law, we will obtain such consent before processing your personal data for the new purpose.

21. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Subject to applicable law and rights before competent statutory authorities, courts at Gurugram, Haryana, India shall have exclusive jurisdiction over disputes arising out of or in connection with this Privacy Policy.

22. DISCLAIMERS SPECIFIC TO THE NATURE OF THE PLATFORM

Given the nature of the Platform and the possibility that users may share highly personal or health-adjacent information:

• The Platform is intended to support reflection, awareness, and informational assistance, and is not a replacement for emergency services, medical treatment, psychiatric care, or crisis intervention

• If you are experiencing a medical emergency, psychiatric emergency, self-harm thoughts, suicidal ideation, or any urgent crisis, you should immediately contact emergency services, a licensed medical practitioner, or a qualified mental health professional

• You should avoid sharing information that is not necessary for your use of the Platform, including financial passwords, government identification numbers, or other highly confidential credentials unless specifically requested through a secure and lawful workflow

• We reserve the right to suspend, restrict, or report misuse of the Platform where necessary for safety, legal compliance, or protection of rights

23. CONSENT

By clicking "I Agree", "Accept", "Submit", by creating an account, or by accessing or using our Platform, you confirm that:

• You have read and understood this Privacy Policy

• You have been provided with notice of the collection and processing of your personal data

• You consent, where required by law, to the collection, use, storage, disclosure, sharing, and other processing of your personal data as described herein

• You understand the nature of AI-generated outputs and the limitations associated with such outputs

• You understand that you may withdraw consent, seek correction, request erasure, and exercise other rights in accordance with applicable law

• You represent that the information provided by you is accurate and that, where you provide information relating to another person, you are authorized to do so

(Consent records may be maintained in accordance with applicable law and internal compliance requirements.)