Privacy Policy
Privacy Policy
Effective Date: February 25, 2025
Last Updated: June 14th, 2025
App Name: Path Rational
1. Introduction
Path Rational (“we,” “our,” “us”) is a digital platform that uses AI, based on Cognitive Behavioral Therapy (CBT) and Rational Emotive Behavior Therapy (REBT), to provide structured self-help tools and pre-therapy support. This Privacy Policy outlines how we collect, use, store, and protect your personal and psychological data in line with:
-
The Health Insurance Portability and Accountability Act (HIPAA), USA
-
American Psychological Association (APA) Ethical Guidelines
-
Indian Mental Healthcare Act (MHCA) 2017
-
Bharatiya Nyaya Sanhita (BNS) 2023 – Sections 271, 272, 356(2)
-
International best practices for AI-based services
By accessing or using Path Rational, you acknowledge and consent to the data practices described in this policy.
2. Information We Collect
We collect the minimal data necessary for providing mental health support and ensuring user safety. The data includes:
a. Personal Data (optional)
-
Name (or pseudonym)
-
Email address
-
Age or date of birth
-
Emergency contact (used only in high-risk cases)
b. Mental Health Interaction Data
-
Chat and session transcripts with the AI-based counsellor
-
Psychological exercises and journaling entries
-
Goals, emotional ratings, and progress across sessions
c. Technical and Device Data
-
IP address
-
Device type and browser
-
Usage statistics (anonymized)
-
Crash reports and diagnostic logs (for service improvement only)
3. How We Use Your Data
Your information is used strictly for emotional support and safety purposes. Specifically, we use your data to:
-
Deliver personalized CBT/REBT-based responses
-
Track session progress and behavior change
-
Provide supervisors with access to encrypted transcripts (if applicable)
-
Improve service quality using anonymized analytics
-
Notify designated emergency contacts if there's a clear risk of self-harm or harm to others
-
Ensure language, tone, and recommendations are culturally sensitive and user-preferred
We do not use your data for advertising, selling, or sharing with third-party marketing agencies.
4. Confidentiality and Access Controls
a. Who Can Access Your Data?
-
Only authorized supervisors and system administrators working under strict confidentiality agreements can access session transcripts, and only when supervision is active.
-
The data is not accessible to third parties, sponsors, or analytics partners unless legally required.
b. Emergency Protocols
In case of high-risk situations (e.g., suicidal ideation, harm to others), the app may notify an emergency contact designated by you. Only the minimum necessary information is disclosed.
We comply with:
-
APA's Duty to Protect (Ethical Standard 4.05)
-
HIPAA’s Minimum Necessary Rule
-
MHCA 2017 Section 23 and 24
5. Data Security Measures
Your data is protected through the following measures:
-
AES-256 encryption for data storage and TLS for data transmission
-
Role-based access restrictions
-
Regular security audits
-
Automatic logout after inactivity
-
Storage on HIPAA and MHCA 2017-compliant cloud servers
-
Daily data backups and recovery protocols
We do not store biometric data or financial information.
6. Legal Compliance
a. Bharatiya Nyaya Sanhita (BNS) Compliance
-
Section 271 BNS
-
Section 272 BNS
-
Section 356(2) BNS
b. Indian Mental Healthcare Act (MHCA) 2017
-
Section 23
-
Section 108
-
Section 82
-
7. Use of OpenAI’s LLM
Path Rational currently integrates OpenAI’s language model to provide conversational psychological support. Users are advised:
-
AI responses are generated probabilistically and may not always be accurate or complete
-
Data may be temporarily processed by OpenAI infrastructure but not used to train its models (we apply opt-out when applicable)
-
OpenAI’s own Privacy Policy may apply in part.
-
The developers may change the base LLM used anytime.
8. User Rights
You have the following rights, which can be exercised by contacting us at info@morphicminds.com:
-
Right to access your stored data
-
Right to request correction of incorrect records
-
Right to request deletion (“right to be forgotten”)
-
Right to limit data processing
-
Right to withdraw consent at any time
We will respond within 15 working days for all data access or deletion requests.
9. Limitations of Confidentiality
We strictly protect your data but reserve the right to disclose minimal information in these situations:
-
You are at immediate risk of self-harm or harm to others
-
There is suspected child or elder abuse
-
A legal order or subpoena compels disclosure
In all such cases, we follow the Minimum Necessary Rule and document the disclosure.
10. Policy Updates
We may revise this Privacy Policy periodically to reflect:
-
Changes in technology or infrastructure
-
Legal or regulatory updates
-
User feedback
Major changes will be communicated via app notifications and email. Continued use of the app after such notification constitutes acceptance.
11. Contact Information
Email: info@morphicminds.com
Address: Morphic Minds
700, Prime 9, Bhagwagar Layout,
Dharampeth, Nagpur, India 440010
By continuing to use Path Rational, you acknowledge that you understand and accept the terms of this Privacy Policy.
Let me know if you'd like the Terms & Conditions document next in the same detailed format.