Privacy Policy

1. Who this policy covers

This policy explains how Brighters collects, uses, stores, and protects personal information — including your child's information — when you use this website to request or receive a developmental, autism, or ADHD assessment.

Every account on Brighters belongs to a parent or legal guardian. Children do not have their own login or account on this platform; we never collect information directly from a child through this site.

2. Information we collect

You sign in with your mobile number, which we verify with a one-time code sent by SMS. When you submit our intake form, we also collect your name and — where you choose to share them — your email address, your child's name, age, developmental history, and what's concerning you. You may optionally upload a previous assessment, school, or therapy report.

Once an assessment is underway, your assigned clinician enters standardized assessment scores, clinical observations, and recommendations tied to your child's profile. If you send us a message through the Contact page, or correspond with our care team, we keep that message and the phone number or email you used.

We do not collect government ID numbers, payment details, or precise location data through this site.

3. Consent, especially for your child's data

Because this service involves a minor's personal and health information, the Digital Personal Data Protection Act, 2023 requires us to obtain verifiable consent from a parent or lawful guardian before processing it — and to process it only in ways that serve your child's wellbeing.

When you submit the intake form, a single required checkbox confirms two things together: that you are the child's parent or legal guardian and are yourself an adult, and that you consent to us administering the assessment and processing the associated data as described in this policy — these are combined because they're really one authorization for the one thing happening (your child being assessed), not two separate purposes. A second, separate checkbox is optional — consent to use your child's assessment data to help develop our own AI-assisted tools (see Section 5) — and has no bearing on whether your child can be assessed; it stays its own checkbox because it covers a genuinely different, severable purpose. We record which version of this policy's consent language you agreed to and when.

You can withdraw consent at any time by contacting us at the grievance address below — this stops any assessment in progress and any further use of previously collected data for new purposes, though it may not be possible to un-deliver a report already completed, and we may need to retain some records where law requires it (see Section 10).

4. How we use your information

We use the information you and your clinician provide to: administer the assessment you requested, generate your child's report and recommendations, let our care team follow up with you, and maintain continuity of care across multiple assessments over time (for example, showing your Assessment History on your Progress dashboard).

We do not use your or your child's information to build advertising profiles, and we do not run behavioral tracking or targeted advertising of any kind toward children on this platform.

5. AI-assisted tools and training data

At signup, you're asked for a separate, optional consent to let us use your child's assessment data — scores and the clinician-authored report text — to help develop and improve Brighters' own AI-assisted tools. This is entirely optional and separate from the consent needed to receive an assessment: declining it doesn't affect your child's assessment, report, or care in any way.

This use doesn't exist yet as a live feature — we're capturing consent now so that if and when we build it, we only ever draw on data from families who specifically opted in. If you consent now and change your mind later, you can withdraw that consent at any time (see "Your rights" below); withdrawal stops future use but can't undo training that already happened on a version of a tool. We haven't yet finalized how this data would be de-identified or anonymized before any such use, and we'll update this section with specifics before the feature is built, not after.

Separately from the optional consent above, and not dependent on it: for some assessments our clinicians use an AI reading service (Google's Gemini) to copy the scores from a standardized score report into your child's record. A clinician checks the values before they are saved, and the report file itself is deleted from our storage afterwards (see Section 8).

6. Who can see it

Access is role-based and limited to what a given role needs. You can see your own child's released reports and progress. The clinician assigned to your child's care can see the records needed to provide that care. Care-team administrators can see intake and account information needed to coordinate your assessment.

For certain assessments (currently, Vineland developmental assessments), a report is only released to your dashboard after a second person on our team has reviewed it.

We do not sell your or your child's information, and we do not share it with third parties for their own marketing purposes. We may disclose information where legally required — for example, in response to a valid court order.

7. Service providers that handle data for us

We use a small number of companies to run the service. We share information with them only so they can provide that service to us.

Google (Firebase and Google Cloud) stores our records and uploaded files, signs you in, and hosts this website. Google Calendar and Google Meet are used to set up and run your video sessions: we keep your child's name out of calendar entries, and you join through the link on your Brighters dashboard. Google's Gemini service is used for the score-reading step described in Section 5.

MSG91 sends our text messages: your sign-in codes, your booking confirmation, and your appointment reminder. They receive your mobile number and the message text. Resend sends our emails, including the notification our team receives when you contact us or submit a request.

8. How we store and protect it

Your information is stored using Firebase (Google Cloud infrastructure), encrypted in transit and at rest using industry-standard practices. This is encryption in transit and at rest — not end-to-end encryption, meaning Brighters' systems (not just you and your clinician) are technically capable of accessing the data where our access-control rules permit it, as described in Section 6.

Uploaded source documents used only to extract assessment scores (currently, Vineland score-report PDFs) are deleted from our storage shortly after your clinician saves the extracted assessment — we don't keep a second permanent copy of that source document once the assessment record itself is saved.

Our database is hosted in Google Cloud's Mumbai region (asia-south1). Files you upload are stored in Google Cloud Storage's Asia multi-region, which keeps data in Google data centres in Asia but not necessarily in India. We do not make a commitment that all data stays within India.

9. Messages we send you

We send service messages by SMS about your booking: a sign-in code, a confirmation when you book, and a reminder shortly before your session. These messages contain your first name and the appointment time only — never your child's name or anything about their assessment. We do not use your number for marketing.

If you give us an email address, we may also email you about your booking or your child's report.

10. Your rights, and how long we keep your data

Subject to legal and clinical record-keeping requirements, you can: request a copy of the personal data we hold about you and your child, ask us to correct inaccurate information, withdraw consent for future processing (including the optional AI-training consent in Section 5), and request that we delete your data.

You can request an export of your data, or request deletion, from your Account page (reachable from the profile menu once signed in). To correct something, email us at the address in Section 12 or tell your clinician. Requests are reviewed by a person on our team rather than actioned instantly, since some records (like completed clinical assessments) may need to be retained for a period even after a deletion request, consistent with applicable law.

We keep assessment records for as long as your account is active, to support continuity of care and let you track your child's progress over multiple assessments. If you request deletion, we retain only what we're legally required to keep, and remove the rest. We will state specific retention periods here once they are settled with our legal advisers.

11. If something goes wrong with your data

If a personal data breach affects you or your child, we will tell you and the Data Protection Board of India, in the way and within the time the law requires, and explain what happened and what you can do.

12. Grievance officer / contact

If you have a question, concern, or complaint about how we handle your or your child's personal data — including consent, access, correction, or deletion requests — contact our Grievance Officer at grievance@brighters.com. We aim to respond within 15 days.

Brighters Health Private Limited, Embassy TechVillage, Block L, Devarabisanahalli, Outer Ring Rd, Bellandur, Bengaluru, Karnataka 560103.

13. Changes to this policy

We'll update this page when our practices change, and we'll update the "last updated" date above when we do.