How your data is handled

Privacy Policy

Last reviewed: 11 September 2026 • Written to the Digital Personal Data Protection Act 2023 and the Mental Healthcare Act 2017

Core Guarantee: Unlike commercial therapy apps that monetize patient data or upload clinical records to third-party cloud AI servers, this practice operates on an offline-first system I built and run myself (TaOS). Your medical confidentiality is absolute.

1. Data Collection & Offline-First Processing

When you submit assessment forms (such as the Burnout Calculator or Attachment Quiz) or book a clinical consultation, information is captured securely via Netlify Edge Forms and synced directly to Tanuj Suthar's local, encrypted SQLite practice database (TaOS). We do not store clinical session notes on any public cloud server.

2. Analytics & Cookies

This site uses Google Analytics 4 in Consent Mode, and it stays switched off until you accept it on the banner. Decline, and no analytics cookie is written and no measurement is sent. Only if you accept, the site also measures how pages are read — how far you scroll, which sections you see and which buttons you tap — with its own small script: no cookie, no IP address, nothing you type, and no ID that follows you between visits. The therapy and booking pages are never measured this way. There is no Facebook Pixel, no advertising pixel, and no cross-site tracking of any kind. If you sign in to The Study, your browser also stores a sign-in token so you are not asked to log in repeatedly; that token is essential to the service and is cleared when you sign out.

3. Psychophilics Blog & Media Content

Articles imported from Psychophilics are educational resources. As noted in our mandatory disclaimer, they do not constitute medical advice and reflect only the personal views of volunteer authors.

4. The Study — Accounts, Email & Learning Progress

The Study (tanujsuthar.com/study) is a separate, non-clinical library of free and paid learning resources. It is kept deliberately apart from the therapy practice: it runs on its own database and shares nothing with clinical records in either direction.

What is collected, and only when you choose to sign in: your email address; your name and profile picture only if you sign in with Google and Google supplies them; which resources you open and how far through them you are; and the date you joined. Sign-in uses a one-time link or Google — no password is ever created, transmitted or stored.

Why: to keep your place across your devices, to show you your own progress, and — only if you tick the consent box — to email you when something new is published. Consent is separate, explicit and never pre-ticked, as required by the Digital Personal Data Protection Act, 2023.

Who else sees it: nobody. Your address is never sold, rented, shared or passed to advertisers. Data is stored with Supabase, acting solely as a processor on our instructions, under row-level access rules that make it technically impossible for one reader to see another reader's email or progress.

If you buy something in The Study: payment is made by UPI straight to Tanuj Suthar’s own account, using your own banking app. This website never sees and never stores a card number, a bank account number, a UPI PIN or any banking credential, and there is no payment company in the path. The only thing recorded here is the reference number you type in, the amount, the item, and whether access has been granted — kept because it is the receipt for what you bought. There is no stored payment instrument, so nothing can ever be charged to you automatically.

Leaving: every email carries an unsubscribe link. To delete your Study account and all progress attached to it — permanently, not archived — email tanuj.suthar.psych@gmail.com with the subject “Delete my Study account”. It is actioned within 7 days, and you may also request a copy of everything held about you.

5. Your Rights Over Your Data

Under Indian Digital Personal Data Protection (DPDP) Act standards, you keep full control over your records. You may request full export or complete physical deletion of your intake records at any time by contacting practice administration directly.

← Return to Practice Homepage