Manovit is built with compliance at its core — adhering to India's DPDP Act 2023 and global healthcare data standards.
Primary Framework
Digital Personal Data Protection Act, 2023 (DPDP)
Manovit is built ground-up for compliance with India's DPDP Act 2023, the country's comprehensive data protection legislation.
Lawful Purpose: All data processing is tied to a clear, stated purpose — delivering mental health assessments and therapeutic recommendations.
Explicit Consent: Users provide informed, granular consent before any assessment, voice recording, or data collection. Consent records are stored with timestamps and IP addresses.
Data Minimization: We collect only the data strictly necessary to deliver our services — no excessive profiling or data harvesting.
Data Fiduciary Obligations: Manovit acts as a Data Fiduciary and implements all obligations including reasonable security safeguards, accuracy maintenance, and storage limitation.
Grievance Redressal: A designated Data Protection Officer (DPO) is available for all user queries, data access requests, and complaints.
User Rights
Consent Management
Granular Consent: Separate consent is obtained for each type of data processing — assessments, voice recordings, mood tracking, and journal entries.
Revocable Consent: Users can withdraw consent at any time through their account settings or by contacting the DPO.
Consent Audit Trail: Every consent action is recorded in our consent records system with timestamp, consent type, and consent text for full auditability.
Minor Protection: The platform implements age-appropriate safeguards in line with DPDP provisions for users under 18.
Infrastructure
Data Localization & Storage
All user data is stored on secure cloud infrastructure with data residency provisions.
Database backups are encrypted and follow strict retention policies.
Cross-border data transfer (if any) follows DPDP-prescribed mechanisms and safeguards.
Data at rest is encrypted using AES-256; data in transit uses TLS 1.2+.
Incident Response
Breach Notification
In the event of a personal data breach, Manovit will notify the Data Protection Board of India within the prescribed timeframe.
Affected users will be notified promptly with details about the nature of the breach, data affected, and remedial steps.
An incident response plan is maintained and regularly tested to ensure rapid, effective breach management.
All breach events are logged, investigated, and reviewed for systemic improvements.
Healthcare
Clinical Data Standards
Mental health assessment data follows clinical data management best practices.
All clinical scales (PHQ-9, GAD-7, DASS-21, WHO-5, PSS-10, GHQ-12, Ryff's) are implemented according to their published scoring guidelines.
Assessment results are stored with full audit trails — answers, scores, severity classifications, and recommendations.
Crisis alerts are triggered automatically for high-severity scores and routed to authorized clinicians only.
Ethics
Accessibility & Inclusivity
The platform is designed for linguistic diversity — supporting English and major Indian languages with ongoing expansion.
Psychoeducation content is culturally contextualized for the Indian market, referencing local helplines, practices, and research.
Voice-based assessments reduce literacy barriers, enabling broader access to mental health screening.