Privacy policy
Draft for review. This page is being finalised with our legal advisers before launch.
Between is used for something deeply personal, so we collect as little as we can, keep it for as short a time as we can, and never sell it or use it for advertising. This policy explains what we process as a data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), and the choices you have.
Who we are
Between is operated by (to be added before launch), (to be added before launch). Contact: (to be added before launch).
What we collect and why
- Account: your email address, to sign you in with a link. If you choose Google sign-in, your name and email from Google.
- Profiles you create: first names, and optionally age, gender, work, photos, how you feel loved, how you handle conflict, a prompt answer, topics, and notes for your guide. We use these only to personalise your sessions.
- Voice samples: if you both agree, a short recording of each of you reading one sentence, used only to tell your voices apart in sessions. It is never played back, and you can delete it anytime.
- Sessions: what you say is transcribed live so the guide can follow the conversation and write your summary. Audio is never stored. Transcripts are deleted once your summary is written, unless you turn on “Save transcripts”. Summaries, your story, agreements, check-outs and weekly check-ins are kept until you delete them.
- Payments: handled by Razorpay. We never see or store your card, UPI or bank details; we keep the plan, amounts, dates and invoice numbers.
- Safety: if a possible safety concern comes up in a session, we record only that it happened and its category (for example “self-harm”), never what was said, so we can understand and improve how we respond.
- Technical: basic logs (time, page, errors) to keep the service running and secure. We don’t use advertising or tracking cookies.
Your consent
We process your personal data on the basis of your consent, given when you create your account and set up your profiles, and separately for voice samples. You can withdraw consent at any time by deleting the relevant data in Settings or deleting your account; this doesn’t affect processing that happened before.
Who processes data for us
We use a small number of service providers, under contracts that limit them to processing on our instructions:
- OpenAI (United States) — the voice guide, transcription, summaries and safety checks. Session content is sent to OpenAI to provide the service; we have requested that it is not retained for training.
- Razorpay (India) — payments.
- Email provider — sign-in links and receipts.
- Hosting provider — where our servers and database run.
Some processing happens outside India, as permitted under the DPDP Act. We protect data in transit and at rest; sensitive content such as notes, photos, voice samples, transcripts and summaries is encrypted in our database and storage.
Who can see what
Sessions together, your story and summaries of sessions together are visible to both partners in your shared space. Private sessions are visible only to the person who had them. Our staff do not read your sessions; access to systems is restricted and logged.
How long we keep it
- Transcripts: until your summary is written (or until you delete them, if you chose to keep them).
- Summaries, story, check-ins, profiles and photos: until you delete them or your account.
- If “Save summaries” is off: a session’s summary is kept for one day so you can read it, then deleted.
- Voice samples: until you delete them or your account.
- Payment and invoice records: as long as the law requires (typically eight years for tax records), even after you delete your account. They are kept apart from everything else and deleted when that period ends.
- Feedback you send us: until you delete your account. Our team reads feedback, so the form asks you to leave out anything private.
- Backups: encrypted, and kept for 14 days. Something you delete disappears from the app straight away and from backups when they roll over.
Deleting your account also cancels any plan with Razorpay straight away, so there are no further charges.
Your rights
Under the DPDP Act you can ask to access a summary of your data, correct or update it, erase it, and nominate someone to exercise your rights if you can’t. Most of this you can do yourself in Settings, including deleting everything at once. For anything else, or to raise a grievance, contact our Grievance Officer: (to be added before launch), (to be added before launch). We respond within the time the law sets. If you are not satisfied, you may complain to the Data Protection Board of India.
Children
Between is only for adults aged 18 and over. We don’t knowingly process children’s data.
Changes
If we change this policy in a meaningful way we’ll tell you in the app before it takes effect. See also our terms and safety page.