How your data is handled.

Only what the app needs to function: your Google account email, a first name you tell us during onboarding, age, gender, and date of birth. We do not buy, sell, or share your data with advertisers.

Each session: the spoken conversation you have with Cittaa, the text transcript of that conversation, and the analysis report derived from it.

During a session, your microphone audio is streamed to our backend, which relays it to Google Geminiin real time. Gemini does the speech recognition and generates Cittaa's spoken responses. We use Google's paid tier, which contractually prohibits Google from using your conversations to train their models.

We do not retain the live audio stream after the session ends. The full session recording is stored only long enough to compute your report, then handled per our retention policy.

Your conversation transcripts and analysis reports are encrypted at rest in our database using AES-256-GCM. The encryption key is held only by our application server. A backup leak, a stolen disk, or a rogue database administrator would see ciphertext, not your words.

All network traffic uses TLS in production: HTTPS between your browser and our backend, and WSS between our backend and Google Gemini.

Inside the product: only you. Reports, sessions, and profile fields are scoped to your account at every database query.

Inside our company: engineers may need to investigate technical issues. Access to production data is logged and limited to named individuals. We do not read transcripts for any other purpose.

Outside our company: Google (the AI processor described above). That's the only third party that sees your conversation.

If you turn on Memory in Settings, Cittaa saves a short list of durable facts you've shared (e.g. “starting a new job in July”, “sister's name is Priya”) so future sessions can feel continuous instead of starting from scratch.

Each saved item is encrypted at rest the same way transcripts are. Each item also has an expiry — chronic facts (relationships, conditions) stay until you remove them; time-bound facts (an event, a healing window) auto-delete when they stop being relevant.

Memory is off by default. You can turn it off at any time, view every saved item, extend an item's expiry, or delete individual items or all of them. We never use these items for anything except feeding them back into your own future sessions, and they go with your account if you delete it.

You can delete your account at any time from Settings. That removes your profile, every session, every report, every saved memory, and your Google sign-in link to Cittaa — across our systems.

Want a copy of your data, or have a specific request under the DPDP Act, GDPR, or another law? Email privacy@cittaa.in and we'll respond within 30 days.

Cittaa is a mental-health care provider. Our clinical team includes licensed psychologists and therapists, and we work with people through assessment, individual therapy, couples and family work, and ongoing support.

Vocalysis is a separate, lighter-touch service within Cittaa: a private voice-based reflection tool. It is designed to help you notice your own patterns and check in with yourself between sessions, or on your own. It is not therapy. It does not diagnose, treat, or prescribe, and the conversations are not reviewed by a clinician unless you explicitly choose to share them.

If you would like clinical support — a first consultation, ongoing therapy, or help with something specific — please reach our care team at care@cittaa.in. If you are in immediate distress or crisis, please contact your local emergency number or an established crisis helpline rather than using Vocalysis.

Anything else, write to privacy@cittaa.in.