Privacy Policy | Sariya Health

1. Who We Are

Sariya Health is a mental health and wellness platform operated by Health Berta. We connect clients in Ghana with licensed therapists, wellness professionals, and AI-powered mental health support.

If you have questions about this policy, contact us at impact@sariyahealth.com.

2. Information We Collect

2.1 Information you provide directly

Account information: your full name, email address, and password when you create an account.
Profile information: phone number, location, occupation, and areas of concern you share during onboarding. This helps us connect you with the right professionals.
Session-related information: booking preferences, session history, and post-session reviews you submit.
Payment information: we do not store your card details. All payments are processed securely by Paystack, our payment provider. We only store transaction references and amounts.
Donation information: if you donate, we store your donation amount and Paystack transaction reference.
AI chat history: conversations you have with Sariya AI (text) are stored to provide conversation continuity. Voice sessions are not stored.

2.2 Information collected automatically

Authentication cookies: we use a single session cookie set by Supabase (our authentication provider) to keep you logged in. This cookie is essential for the platform to function and cannot be disabled while you are signed in.
Google account data: if you connect your Google account (required for professionals, optional for clients), we store your Google user ID to verify session attendance via Google Meet. We do not access your Gmail, Google Drive, or any other Google services.

We do not use Google Analytics, Meta Pixel, or any third-party tracking or advertising tools. We do not place advertising cookies on your device.

3. How We Use Your Information

We use your information solely to operate the platform:

To create and manage your account
To match you with appropriate therapists and wellness professionals
To book, schedule, and manage your sessions
To process payments and manage your session credits
To verify session attendance via Google Meet (for earnings accuracy and session records)
To send you transactional emails — booking confirmations, session reminders, and account notifications
To provide and improve Sariya AI, our mental health companion
To manage your organisation memberships if you belong to a corporate or community group on the platform

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 4.

4. Who We Share Your Information With

We share the minimum necessary data with the following service providers who help us operate the platform:

Supabase — our database and authentication provider. Your data is stored on Supabase's secure infrastructure.
Paystack — our payment processor. They handle all card and mobile money transactions. Their privacy policy applies to payment data.
Google — we use Google Calendar and Google Meet to schedule and host video sessions. Your email address is shared with Google to add you as a meeting attendee.
Postmark — our email delivery provider. Your email address is used to send you transactional emails.
OpenAI — your messages to Sariya AI (text and voice) are processed by OpenAI's API. OpenAI's usage policies apply. We do not send your name or personal profile to OpenAI.

We may also disclose information if required by law or to protect the safety of our users or the public.

5. Sensitive Health Information

The areas of concern and diagnoses you share during onboarding are sensitive health information. We treat this data with the highest level of protection:

It is stored in a restricted database table with row-level security — only you and our platform administrators can access it.
It is never shared with third parties for any purpose.
It is never used for advertising, profiling, or sold to any party.
It is used only to help match you with suitable professionals and improve your experience on the platform.

6. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (e.g. payment transaction records).

AI conversation history is retained to provide continuity in your support experience. You may request deletion of your AI conversation history at any time by contacting us.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate information in your profile
Delete your account and associated personal data
Export your data in a portable format
Withdraw consent for optional data uses at any time

To exercise any of these rights, contact us at impact@sariyahealth.com. We will respond within 14 days.

8. Security

We take security seriously. Your data is protected by:

Row-level security (RLS) on all database tables — users can only access their own data
Encrypted connections (HTTPS/TLS) across the entire platform
Restricted admin access — only authorised Health Berta team members can access administrative functions
Sensitive data (diagnoses, phone numbers, Google IDs) stored in a separately restricted table with additional access controls

No system is 100% secure. If you believe your account has been compromised, contact us immediately at impact@sariyahealth.com.

9. Children's Privacy

Sariya Health is not intended for use by children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us and we will delete the account promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions or requests, contact us at: impact@sariyahealth.com