Privacy Policy

We only collect data we actually need. Depending on how you use the platform, this may include:

• Account data: name, email, phone number, city.
• Preferences: your matching criteria (city, languages, religion, baby age, hours).
• Payment metadata: order IDs, amount, status. Card and UPI details are handled entirely by our payment partner (Cashfree) and never touch our servers.
• Verification data (with explicit consent): caregiver's Aadhaar number, PAN, address, DL, voter ID, employment history, and other identity documents.
• Call metadata: when you use our masked calling feature, we log the two numbers, call time, and duration. We do not record call audio.
• Device data: IP address, browser, and coarse location, for security and analytics.

• To match you with caregivers based on your preferences.
• To run the background verifications you request.
• To route masked calls between families and caregivers.
• To process payments and issue receipts.
• To send account, service, and safety notifications.
• To detect abuse, fraud, or harassment on the platform.

We do not sell your personal data. We do not use your data to train third-party AI models.

• TLS (HTTPS) encryption in transit; AES-256 encryption at rest.
• Identity documents (Aadhaar, PAN) are stored in a private, access-logged bucket accessible only to our verification-ops team.
• After verification, Aadhaar and PAN numbers are masked to last-4 digits everywhere in the product.
• Row-level security is enforced at the database layer so users can only ever read their own data.
• We follow the principle of least privilege for internal access.

Only these categories of processors, and only for the purposes listed:

• Cashfree Payments — payment processing.
• Verification bureaus & government APIs — for the specific checks you ordered (PAN, Aadhaar, credit history, criminal records, police).
• Communication partners — WhatsApp Business API, email delivery, SMS OTP.
• Cloud infrastructure — hosting and database (in India / Singapore regions).

We disclose data to law enforcement only when compelled by a valid legal order.

• Account data: for as long as your account is active, plus 90 days after deletion.
• Verification reports: 3 years, per industry norms (may be needed for disputes).
• Payment records: 7 years, as required by Indian tax and accounting law.
• Call metadata: 180 days.

You may, at any time, request to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data (subject to retention obligations above).
• Withdraw consent for verification processing (for future checks).
• Nominate a person to exercise these rights on your behalf if you cannot.
• Raise a grievance (see next section).

Email privacy@thecarecircle.in from the email address on your account. We respond within 30 days as required by the DPDP Act.

In accordance with the DPDP Act and the Information Technology Rules, our Grievance Officer is:

Grievance Officer
thecarecircle, Bangalore, Karnataka, India
Email: grievance@thecarecircle.in

Our platform is intended for parents and caregivers (adults). We do not knowingly collect data from anyone under 18 using the platform as an end-user. Data about children (e.g. baby age band) is collected only as a matching preference from the parent.

We use essential cookies for authentication and privacy-friendly analytics to understand product usage in aggregate. We do not run third-party ad-tracking cookies.

We may update this policy. Material changes will be notified via email and in-product before they take effect. The "Last updated" date at the top of this page will change.