1. Who we are
You & Me Counselling ("we", "us") runs an online platform that lets people find licensed counsellors and psychologists, book sessions in person or online, and pay for them. For personal information you give us through this website, we decide how and why it is used and are responsible for protecting it.
2. Information we collect
| What | Details | Why |
|---|---|---|
| Account | Name, email address, password (stored only as a one-way hash), role (patient, counsellor, administrator) | To create and secure your account |
| Patient profile | Phone number, address, state, medical or health history, emergency contact phone, anything else you choose to add | To provide care, prepare for sessions, invoice correctly and reach you in an emergency |
| Bookings and sessions | Counsellor, service, date and time, mode (in person or online), status, session notes written by your counsellor | To schedule and deliver sessions and keep a clinical record |
| Plans and packages | Plan purchased, hours bought, hours used, hours remaining | To track your prepaid session balance |
| Payments and invoices | Amount, taxes, order and payment reference numbers, refund status, invoice number | To take payment, issue GST invoices and process refunds |
| Counsellor calendar data | For counsellors who connect Google Calendar: event times and whether a time is busy (see section 4) | To avoid double-booking and show sessions in your calendar |
| Messages | What you write in the contact form, and emails we send you about your account | To reply to you and keep you informed |
| Technical data | IP address, browser type, pages requested, error logs, cookies (section 9) | To keep the service secure, working and fair to use |
Health information is sensitive. We collect only what is needed for your care and for running your booking, and you can choose what to share with your counsellor in session.
3. How we use it
- Create your account, verify your identity and let you sign in.
- Match you with a counsellor, schedule, reschedule and cancel sessions.
- Take payments, issue invoices, apply coupons and process refunds.
- Send booking confirmations, reminders, invoices and important service notices.
- Keep the platform secure, prevent fraud and misuse, and fix problems.
- Meet legal, tax and professional record-keeping duties.
We do not sell your personal information, and we do not use it for advertising or share it with advertisers.
4. Google Calendar data
Counsellors may choose to connect their Google Calendar. When they do, we ask Google for permission to read and manage events on that calendar (the scope https://www.googleapis.com/auth/calendar). We use that access only to:
- see which times the counsellor is already busy, so those times are not offered for booking;
- add booked sessions to the counsellor's calendar and keep them up to date; and
- flag clashes between the calendar and the platform so the counsellor can resolve them.
Google tokens are stored encrypted. A counsellor can disconnect at any time from the Calendar page of their dashboard, or by removing access in their Google Account's third-party access settings; disconnecting stops all further access and we delete the stored tokens.
YouAndMe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except with the user's consent, to investigate abuse or security issues, or to comply with law.
Patients are never asked to connect a Google account to use the platform.
5. Payments
Payments are processed by Razorpay, a third-party payment gateway. You enter your card, UPI or bank details directly with Razorpay; we never see or store your full card number, CVV, UPI PIN or net banking credentials. We receive only the confirmation of payment, an order and payment reference, the amount and the status. Razorpay handles that information under its own privacy policy.
6. Who we share it with
- Your counsellor and, where needed to run bookings, the administrators of the practice or group they work in.
- Service providers that help us operate: Razorpay (payments), Google (calendar sync, where a counsellor connects it), an email delivery provider, and our hosting and database provider. They may use your information only to provide their service to us.
- Authorities, where the law requires it, for example a valid order of a court or authority, or where there is a serious risk to your life or someone else's.
- A buyer or successor, if the practice is reorganised or transferred, on the same privacy terms as this policy.
7. How we protect it
- Sensitive patient fields (phone, address, medical history, emergency contact, session notes) and calendar access tokens are encrypted at rest using AES-256-GCM.
- Passwords are hashed and never stored in readable form.
- The site is served over HTTPS and sign-in cookies are protected against script access.
- Access is limited by role: patients see their own records, counsellors see their own patients, administrators see what their role requires.
- Booking, payment and cancellation records keep a change history for audit.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.
8. How long we keep it
We keep your information for as long as your account is active and as long as needed to provide care, resolve disputes and meet legal obligations, for example tax and invoice records and clinical record-keeping rules that apply to counsellors. When information is no longer needed, we delete it or anonymise it.
9. Cookies
We use only the cookies the site needs to work:
- Sign-in cookie (
YouAndMe.Auth): keeps you signed in. - Session cookie (
YouAndMe.Session): carries booking details between steps. - Security cookies: protect forms against forged requests.
We do not use advertising or cross-site tracking cookies. Razorpay's checkout may set its own cookies while you pay. You can block cookies in your browser, but signing in and booking will then not work.
10. Your choices and rights
Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you may:
- ask what personal information we hold about you and get a copy;
- ask us to correct information that is wrong or out of date;
- ask us to delete your account and information, subject to records we must keep by law;
- withdraw consent for optional uses, such as non-essential emails; and
- nominate someone to exercise these rights for you if you die or become unable to.
You can update most profile details yourself after signing in. For anything else, contact us as described in section 13. We will respond within a reasonable time and in line with the law.
11. Children
Our services for children and teenagers must be arranged and consented to by a parent or legal guardian. We do not knowingly create accounts for people under 18 without that consent. If you believe a child's information was given to us without consent, contact us and we will act on it.
12. Changes to this policy
We may update this policy as the service or the law changes. The "Last updated" date above shows the current version, and for material changes we will tell you by email or a notice on the site.
13. Contact and grievances
For questions about this policy, to exercise your rights, or to raise a privacy complaint, reach us through the contact form or call +91-9606603273. Please write "Privacy" in your message. If you are not satisfied with our response, you may approach the Data Protection Board of India as provided under the Digital Personal Data Protection Act, 2023.
This is not an emergency service. If you are in immediate danger, call 112, or iCall on 9152987821.
See also our Terms of Service.