CONNECTTOGETHER APP
ConnectTogether App Privacy Policy
Last updated: 20 October 2026
ConnectTogether is a therapy-management and care-coordination app for adult center administrators, therapists, patients and parents or guardians managing a child's care. It helps manage sessions, patient packages, care records and communication. Children are not intended to create or independently use accounts.
Operator: Pankaj Singh Bagdwal, operating ConnectTogether. For privacy questions and requests, contact support@connecttogetherapp.com.
This policy covers the ConnectTogether mobile app and its supporting services. Website demo and enquiry forms have a separate website privacy notice.
1. Information processed
- Account and contact information: name, phone number, optional email, account role, verification status, password hashes, and authentication and session records.
- Profile and professional information: profile photos, address or city, biography, age, gender, and information provided by therapists such as qualifications, experience, specialties, registration details, languages and uploaded certificates.
- Care information: patient and parent/guardian details, diagnoses or other health information entered into profiles, therapy information, appointments, attendance, notes, assessments, monthly records and documents supplied by users or care teams. These records can include information about children whose care is managed by adults.
- Packages and payments: package balances, payment records entered by centers, subscriptions, payment status and payment-provider references. Payment details entered into a provider's checkout are processed by that provider.
- Communications: private and group messages, shared photos or files, community stories, center highlights, comments, reactions, support correspondence and notification preferences.
- Technical information: push-notification tokens, device platform and app version where supplied, request identifiers, IP addresses or derived rate-limit identifiers, timestamps, authentication events and delivery/error information used to operate and protect the service.
2. How information is used
Information is used to create and secure accounts; verify contact details; recover access; connect users with their centers and care teams; manage sessions, packages and care history; deliver communications and reminders; process subscriptions; respond to requests; and investigate service errors, abuse or security incidents.
Provide only information you are authorized to share. Parents, guardians and care providers should limit information about children to what is needed for the relevant care-management purpose.
3. Who can receive information
Information is made available to the center, therapists, patients or guardians involved in the relevant account or care relationship, according to their role and the feature used. Community stories, highlights, comments and group messages are visible to the relevant audience, not just the sender. People receiving content may save copies outside the app.
The service also uses providers to operate its features:
- Amazon Web Services: hosting for the backend and application data in the deployed service.
- Google Firebase Authentication: phone verification and SMS OTP delivery. Phone numbers supplied for authentication are sent to and stored by Google for spam and abuse prevention across Google services, including Firebase.
- Expo and platform push services: Expo routes notifications through Firebase Cloud Messaging on Android and Apple Push Notification service on supported iOS deployments. Notification payloads can include message previews and session information.
- Meta WhatsApp: phone numbers and the information included in OTPs, reminders and service notifications when WhatsApp delivery is used.
- Email providers: recipient addresses and email content for verification, password recovery and support.
- Razorpay: payment and subscription processing where enabled, including checkout information and transaction references.
Providers may process information in countries other than your own under their terms and privacy policies. Information may also be disclosed where required by applicable law or necessary to address fraud, security incidents or legal claims.
4. Device permissions and notifications
The app uses device capabilities for features you select, such as choosing or capturing a photo, selecting a document, saving media and receiving notifications. You can manage permissions through your device settings. Declining a permission may prevent its related feature from working.
Push notifications and WhatsApp messages may reveal information in notification previews. Use your device's notification settings to control lock-screen previews. Contact support about notification preferences or assistance stopping WhatsApp service messages.
5. Security
The deployed service uses HTTPS for network connections, password hashing, verification codes with limited validity, access controls and session checks. These measures reduce risk but do not guarantee that information can never be accessed or disclosed without authorization. Do not share passwords or OTPs. Chat content is processed by the service; this policy does not claim end-to-end encryption.
6. Retention and account deletion
You can request account deletion in the app through Profile → Delete account, using your current password and the displayed confirmation. You can also email support@connecttogetherapp.com to request deletion or assistance without using the app. Include enough information to identify your account, but never send a password or OTP. Ownership verification may be required before action is taken.
The current account-deletion implementation removes login credentials, contact/profile fields, session tokens, device registrations and specified private/community communications. It retains a deleted account identifier. For patients and therapists, names and some shared care history remain, including session records and notes and, where applicable, assessments, packages, payments and uploaded care documents accessible to the relevant center or care team. Retained text and documents are not automatically redacted.
Deleting a center administrator removes centers owned by that account and associated application records; it does not delete independent patient or therapist accounts. Account deletion does not remove copies already downloaded by others or automatically erase provider-held records and existing backups.
Account information is stored while the account is active. The retained care history described above supports continuity and identification of historical care records. There is currently no fixed automatic expiry for retained session and care history; records are not automatically deleted after three months. Backup copies are not automatically erased when an account is deleted. For questions about a retained record, its continued use, or requesting its deletion, contact support. Provider-held information is also subject to the relevant provider's retention practices.
7. Your choices and requests
You can update supported profile information, verify a new phone number or email, manage device permissions and request account deletion. To ask about access, correction, deletion or other privacy concerns, contact support. Requests will be handled after appropriate verification and subject to applicable obligations and the retention practices described above. Centers may also maintain records independently; contact your center about its own use of care information.
8. Changes and contact
We will update the date on this page when this policy changes. Material changes will be communicated through appropriate service channels. For questions about the app's privacy practices, email support@connecttogetherapp.com.