Privacy policy

Who we are

No Pain Heals ("NoPainHeals", "we", "us") builds interactive therapy systems for children. We are based at Anand, Gujarat 388121, India. You can reach us at info@nopainheals.com or +91 973 706 0987.

This policy covers both this website and the NoPainHeals therapy platform used inside clinics, schools and child development centres.

The two kinds of data we handle

These are kept separate, and the distinction matters for everything that follows.

• Enquiry data — what you send us through this website when you request a demo: your name, email address, phone number, role, organisation, city, the activities you are interested in and anything you write in the message box. We are the controller of this data.
• Therapy session data — what the platform records during a session: activity attempts, accuracy, time on task, difficulty settings and the identifier the clinic uses for that child. The clinic (or, for home use, the parent) is the controller of this data. We process it on their instructions and hold it on their behalf.

Please do not send us details of a specific child's health, diagnosis or treatment through this website. The contact form is not a secure channel for clinical information.

Who can see therapy records

Only the account that created a record, and the people that account authorises. In practice that means the clinic that ran the session, or the parent who entered it. Access is controlled per account; there is no shared pool of records, and no clinic can see another clinic's children.

Our own staff do not browse therapy records. A small number of engineers can access production systems where it is necessary to keep the service running or to fix a fault you have reported. That access is restricted, logged, and used only for that purpose.

What we use data for

• Enquiry data: to reply to you, arrange a demo, and follow up about that enquiry.
• Therapy session data: to show progress to the therapist and the family, to let the therapist adjust a treatment plan, and to produce the reports they choose to produce.
• Keeping the service working: diagnosing faults, security, and preventing abuse.

A child's results are analysed only against that same child's earlier sessions. We do not compare children with one another, produce rankings or norms across children, or feed one family's data into anything that serves another. If we ever want to use aggregated, fully anonymised figures to improve the activities themselves, we will ask the controlling clinic first and they can decline without losing any functionality.

We do not use any of it for advertising, marketing profiles or promotional targeting, and we never will.

Children's data

Our users are children, and we treat their data accordingly. Records are created by a clinic or a parent acting for the child, on the basis of consent obtained by that clinic or parent. We do not knowingly collect data directly from a child, we do not profile children, and we do not serve advertising of any kind in the product.

How we protect it

• Data is encrypted in transit using TLS, and encrypted at rest.
• Access is role-based: an account sees only its own records.
• Administrative access to production is restricted and logged.
• These safeguards are modelled on the technical standards in the HIPAA Security Rule — encryption, access control, audit logging and integrity checking.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that affects your data, we will tell the affected clinic without undue delay and support them in notifying families and the authorities as required.

Who else is involved

We use a small number of service providers to run the service — for example hosting and email delivery. They act only on our instructions, may use the data only to provide that service, and may not use it for their own purposes. We do not transfer data to anyone else, except where the law requires it of us.

How long we keep it

• Enquiry data: for as long as we are in contact with you, and a reasonable period afterwards for our records.
• Therapy session data: for as long as the controlling clinic or parent keeps their account, or until they ask us to delete it. If an account closes, we delete or return the data on request.

Your rights

Under India's Digital Personal Data Protection Act 2023 you may ask us to show you the data we hold about you, correct it, delete it, or stop contacting you, and you may withdraw consent you previously gave. Email info@nopainheals.com and we will deal with it.

If the request concerns therapy records held for a clinic, we will refer you to that clinic, because the records are theirs — and we will help them act on it.

Grievances

If you are unhappy with how we have handled your data or a request about it, write to info@nopainheals.com marked for the attention of the Grievance Officer, or call +91 973 706 0987. We will acknowledge and respond. If you remain dissatisfied you may escalate to the Data Protection Board of India.

Cookies and tracking

This website sets no advertising cookies. It uses Google Analytics to count visits and see which pages are read, which sets cookies and collects the pages you view, your approximate location, and your browser and device type. We use this only to understand and improve the site and do not use it to identify you. Google processes this data under its own privacy policy. If you would rather not be counted, you can block the cookies or use a browser extension that disables Google Analytics.

Changes to this policy

If we change this policy we will update this page and the date below. We will not weaken the five commitments at the top without telling the clinics and families affected directly.

Last updated: October 2026.