Privacy Policy
Last updated [DATE] · Effective [DATE]
my 2nd brain is a reminder service delivered over WhatsApp, operated by [LEGAL ENTITY NAME] (“we”, “us”), registered at [REGISTERED ADDRESS, CITY, STATE, PIN], India.
This policy explains what we collect, why we collect it, who else handles it, and how you can have it removed. It is written to be read, not to be survived.
1. What we collect
| What | Why we need it |
|---|---|
| Your WhatsApp phone number | It is your account. We have no other way to identify you or send you a reminder. |
| Your WhatsApp profile name | Supplied to us by WhatsApp with each message. Used so reminders read “Priya asked me to remind you” rather than a phone number. |
| The text of messages you send us | To work out what to remind you about, and when. |
| Your reminders | The text, the time, and whether it repeats. |
| Delivery records | When we sent a reminder and whether it arrived, so we do not send it twice. |
| Consent records | The message in which you first wrote to us, kept as proof that you asked to receive reminders. |
| Your time zone | So “9am” means 9am where you are. |
| Payment status | Whether you are on the free or paid plan. |
What we do not collect
- Your other WhatsApp conversations. We can only see messages sent to our number.
- Your phone’s contact list, photos, location, or files.
- Payment card details. If you subscribe, our payment provider handles that and we never see the card.
2. Why we are allowed to hold it
We process your information on the basis of your consent, given when you message our number and continue to use the service. You can withdraw that consent at any time by replying STOP or asking us to delete your data. Withdrawing it means we can no longer provide the service.
3. How your messages are read
To turn “remind me to pay rent on the 1st” into a scheduled reminder, the text of that message is processed by an automated language-understanding service operated by [AI PROCESSOR NAME, e.g. Anthropic PBC]. We send only the message text and your time zone. It is used to determine the reminder and its timing, and is not used to train models.
No human at my 2nd brain reads your messages routinely. We may look at a specific message only if you contact us with a problem and we need it to help, or if we are legally required to.
4. Who else your information reaches
- Meta Platforms (WhatsApp)
- Every message between you and us travels through WhatsApp. Meta’s own privacy terms apply to that delivery, separately from this policy.
- Our hosting provider
- [HOSTING PROVIDER AND REGION] — stores the database that holds your reminders.
- Language-understanding provider
- [AI PROCESSOR NAME] — as described in section 3.
- Payment provider
- [PAYMENT PROVIDER, e.g. Razorpay] — only if you subscribe to the paid plan.
We do not sell your information, and we do not share it for advertising. We disclose it otherwise only where the law requires it.
5. How long we keep it
- Reminders — until they have been delivered, then for [e.g. 90 days], so you can look back at them.
- Your account and contacts — while your account exists.
- Consent and delivery records — for [e.g. 24 months] after the account closes. We are required to be able to show that a person agreed to receive messages.
- Payment records — as long as Indian tax law requires.
6. Your rights
Under India’s Digital Personal Data Protection Act, 2023, you may:
- Ask what we hold about you, and get a copy.
- Have anything wrong corrected or completed.
- Have your data erased — see deleting your data.
- Withdraw consent at any time.
- Nominate someone to exercise these rights if you die or become incapacitated.
- Complain, to us first and then to the Data Protection Board of India.
Message us on WhatsApp or email privacy@my2ndbrain.in. We respond within [e.g. 30 days].
7. Grievance Officer
As required by Indian law:
- Name
- [GRIEVANCE OFFICER NAME]
- grievance@my2ndbrain.in
- Address
- [REGISTERED ADDRESS]
- Response time
- Within [e.g. 30 days] of receipt
8. Security
Messages travel over WhatsApp’s encrypted infrastructure. Our database is encrypted at rest and reachable only by the service itself. Access is limited to those who need it to run the service. No system is perfect; if a breach affects you, we will tell you and the Data Protection Board as the law requires.
9. Children
my 2nd brain is not for children under 18. We do not knowingly collect information from them. If you believe a child has used the service, write to us and we will delete it.
10. Where your data lives
Your information is stored at [HOSTING REGION]. Processing by the providers in section 4 may occur outside India, under contractual safeguards.
11. Changes
If we change this policy in a way that materially affects you, we will message you on WhatsApp before it takes effect. The date at the top always reflects the current version.
12. Contact
privacy@my2ndbrain.in · [LEGAL ENTITY NAME], [REGISTERED ADDRESS], India.