Kundly Privacy Notice

The short version

Kundly asks for your life story, and optionally your name, WhatsApp number, or email, so we can write back to you.
The moment you submit, an AI writing system reads your story and writes you a short Spark. No person reads it first. The one exception: if what you write suggests you may be at immediate risk, we pause the instant Spark and a clinician reads your submission first. You will still receive your full Reflection Letter.
Before your full Reflection Letter is sent, Dr. Wilfred D'souza reads your story personally, under the supervision of Dr. Niharika Reddy.
We keep what you write for up to 12 months, then delete it. You can ask us to delete it sooner, any time, for any reason.
We never sell your information and never use it for advertising. We never share it with anyone else without your separate, specific consent.
You can ask what we hold about you, correct it, or erase it, at any time. If we cannot sort it out, you can complain to the Data Protection Board of India.

The full notice below covers everything the Digital Personal Data Protection Act, 2023 (the DPDP Act) requires us to tell you.

1. Who this notice covers

This notice covers Kundly only, the free reflection tool at weave.clinic/kundly. Our other services (booking a session, buying a Weave Press publication) are covered by the main Privacy Policy at weave.clinic/privacy.

2. Who is responsible for your information

Weave Centre for Integrative Psychiatry, a partnership of Dr Wilfred D'souza and Dr Niharika H. S., based in Mumbai, Maharashtra, India, is the data fiduciary responsible for your personal data under the DPDP Act. That means we decide what data Kundly collects and why.

You can reach us at:

WhatsApp: +91 76250 04229
Email: niharika@weave.clinic

3. What Kundly collects

Your life story. The narrative you write across the six chapters of the form. This may touch on sensitive things: your relationships, your history, your mental health.
Your name, if you choose to give it. Kundly does not require it.
A WhatsApp number and/or an email address, so we know where to send your Reflection Letter, and so you can pick up a saved draft on another device.
Answers to a few safety-related questions inside the form, so we can flag immediate risk and point you toward crisis support if you need it.
A reference code (something like SK-1234), generated once you submit, so we can find your submission without needing your name anywhere else in our systems.
Basic technical and usage data, collected automatically through Google Analytics and a small internal log, such as which pages you visited. Once you have a reference code, this usage data is recorded against that code and can therefore be connected to your submission, whether or not you gave us your name or contact details.

We do not ask for a diagnosis, a government ID, or payment details. Kundly is free.

4. Why we collect it, and on what basis

We process your information for one specified purpose: to write you a Spark and, later, a Reflection Letter, and to deliver both to you. If you give us your email only to resume a saved draft, we use it only for that, to send one resume link.

Our lawful basis is your consent, given freely, specifically, and through a clear affirmative action, as Section 6 of the DPDP Act requires. You give this consent by ticking the boxes on the "Before we begin" page before you start writing. Nothing you write is sent to us until you press submit at the end.

5. The Spark: what happens the moment you submit

As soon as you submit, an AI writing system reads what you wrote and generates a short reflection, the Spark, in about a minute. No person reads your story before you see your Spark. The Spark is a preliminary reflection, not a diagnosis and not a medical opinion.

There is one deliberate exception. If what you write suggests you may be at immediate risk of harming yourself or someone else, the instant Spark is paused and your submission goes to a clinician for personal reading first. You will see crisis support options right away, your writing is kept safe, and your full Reflection Letter still reaches you.

The DPDP Act does not currently create a separate right specific to automated decisions the way some other countries' data laws do. We are telling you how this works anyway, because it is your story and you deserve to know what happens to it at each step.

6. Who reads your story after that

Before your full Reflection Letter is sent (usually within 2 to 4 business days), Dr. Wilfred D'souza, a psychiatry resident, reads your submission personally, under the clinical supervision of Dr. Niharika Reddy, a consultant psychiatrist. No one else reads it.

Your information also passes through:

Supabase, the cloud database platform that stores your submission on our instructions, on servers located in the United States (AWS us-east-1 region). Supabase is our data processor: it does not use your information for its own purposes.
Anthropic, the provider of the AI writing system that generates your instant Spark. When you submit, your story is sent to Anthropic's Claude service, processed on servers in the United States, and used only to write your Spark. Anthropic is our data processor: it does not use your story to train its models or for its own purposes.
WhatsApp or your email provider, whichever channel you choose, for delivery.
Google Analytics, for the basic usage data in Section 3, in pseudonymous form.

We do not sell your information, and do not share it with anyone for marketing or research without asking you separately, first. We will only share it beyond this if a lawful order from an Indian court or authority requires it.

7. How long we keep it

We keep your submission, including your story, contact details, and reference code, for up to 12 months from the day you submit. After that, we delete it. You do not have to wait: you can ask us to delete it at any time, for any reason.

8. Consent, and how to withdraw it

You give consent by ticking the required boxes on the "Before we begin" page, unticked by default, before you write anything. You can withdraw consent at any time, as easily as you gave it, using the contacts in Section 12.

If you withdraw after we have already generated your Spark or started your Reflection Letter, we will stop further processing and delete your stored information, but we cannot undo work already done before your withdrawal reached us.

9. Your rights under the DPDP Act

The law calls you the data principal. Whatever it calls you, you have the right to:

Know what personal data of yours we hold, and how we are processing it.
Correct anything wrong or incomplete.
Erase your information, including your story, at any time.
Complain, if you are unhappy with how we handled your information (Section 12).
Nominate another person to exercise these rights on your behalf, if something happens to you.

10. Kundly is for adults

Kundly is for people 18 and older. Before you begin, you confirm you are 18 or older and writing about your own life. We do not knowingly collect personal data from anyone under 18. If we later learn a submission came from someone under 18, we will delete it and will not send a Reflection Letter.

11. If something goes wrong

If we discover a data breach affecting your personal data, we will notify the Data Protection Board of India and tell you, in the form and manner the law requires, and explain what happened and what you should do.

12. How to contact us, and how to complain

WhatsApp: +91 76250 04229
Email: niharika@weave.clinic

If you are not satisfied with how we resolve your concern, you may complain to the Data Protection Board of India.

13. Changes to this notice

If this notice changes, the updated version will always live at weave.clinic/kundly/privacy, with a new "last updated" date. Material changes will be flagged for at least 30 days.