Security & trust

What we do with your data, in plain words.

Balkonee is built for India, so the Digital Personal Data Protection Act — not HIPAA — shapes every decision here.

Please read this first

Designed around DPDP principles — not certified.

Balkonee has not yet been formally reviewed by a data protection lawyer. Our current consent framework is provisional and pending that review. We will not describe ourselves as compliant, certified or approved until an actual review says so. Everything below describes how the product is built today, not a legal guarantee.

How it works today

Eight things we hold to.

Consent is versioned and revocable

New terms mean asking again, and consent can be withdrawn.

Audio and transcripts are deleted

They exist only long enough to produce a summary.

Clinical summaries are never client-visible

No route exists — it isn't a toggle someone could flip.

Shared recaps are frozen

Editing creates a new version; what was read stays what was read.

AI never sees clinical content

It's given the shape of a thing — never an instrument or a score.

Crisis resources are always reachable

Tele-MANAS 14416, iCall/Kiran and 112 — never behind a tap.

Unfinished thought records are invisible

Zero rows reach a therapist until you submit.

Nothing crosses a relationship boundary

Scoped to one accepted relationship, enforced in the database.