Sortedd – Privacy Policy

This Privacy Policy describes how 7AM Lifestyle & Entertainment Private Limited (operating under the brand "Sortedd"; "we", "our", "us") collects, uses, stores, and protects your information when you use the Sortedd mobile application, the website at sortedd.in, and related services (collectively, the "Service").

By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

Legal basis. This Policy is published in compliance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules notified thereunder, Section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and any other applicable sectoral regulations.

Capacity to contract. By using the Service you confirm that you are at least 18 years of age and are competent to enter into a binding contract under the Indian Contract Act, 1872.

Legal entity: 7AM Lifestyle & Entertainment Private Limited. Brand: Sortedd. Website: https://sortedd.in. Contact: hello@sortedd.in. Registered Office: 4702, 47th Floor, M3M Heights, Sector 65, Bhondsi, Gurugram, Haryana, 122102, India

For any privacy-related questions, requests, or complaints, including requests to access, correct, or delete your data, write to us at hello@sortedd.in, or use our Delete Account or Delete Data pages.

3.1 Information You Provide Directly

• Account information: mobile phone number (used for OTP-based login), full name, email address, and residential address.
• Family and household information: names, contact details, and relevant details of family members or household contacts you authorise your Chief Minion to coordinate with.
• Task content: instructions, requests, text messages, and any other content you share with your Chief Minion through the Service.

Photos and images: photographs you choose to upload through in-app chat to help your Chief Minion understand or action a task. We access your camera and photo library only when you explicitly attach an image. Photos are stored to support task execution; they are not currently processed by our AI systems (see Section 4).

• Voice messages: audio you choose to send to your Chief Minion through in-app chat. We access your device microphone only while you are actively recording a voice message.
• Support communications: information you provide when you contact our support team or Chief Minion, including the content of those messages.

Sortedd operates primarily through its own mobile application. We do not currently record calls, and our Chief Minions do not have access to your full account or data beyond the specific conversation they are assigned to.

3.2 Information Collected Automatically

• Device and app information: device model, operating system version, app version, time zone, and language preference.

Push notification tokens: your device's push token, used solely to deliver task updates to you.

Usage information: non-identifying information about how you interact with the Service, used to improve the product.

Server log information: our servers maintain logs that may include your IP address, device type, time stamps, and crash reports, used for diagnostics, security monitoring, and service-quality investigations.

3.3 Information We Do Not Collect

Payment card or banking credentials. Payments are processed via a regulated third-party payment gateway; we do not store your card, UPI, or banking credentials.

We do not read or upload your device contact list.

We do not access your camera, photo library, or microphone in the background. Access occurs only when you actively choose to attach a photo or record a voice message.

3.4 Sensitive Personal Data We May Process

In the course of delivering the Service, we may handle the following categories of sensitive personal data on your behalf, for example, medication schedules and reminders, medical appointment coordination, and dietary or allergy information shared for care-related tasks.

This information may be visible to your assigned Chief Minion and our Operations team in plain text, as it is necessary for them to coordinate the specific task you have requested (for example, a medication reminder or a doctor's appointment). We do not use this data for profiling, advertising, or any purpose beyond the task you have instructed. Explicit consent for processing sensitive personal data is obtained at the point of instruction or at account setup, consistent with Rule 5 of the SPDI Rules, 2011, in addition to the DPDP Act, 2023.

We use your information to:

Authenticate your account using OTP-based phone login.

Enable your dedicated Chief Minion to coordinate and deliver tasks on your behalf.

Coordinate tasks involving family members and household contacts you have authorised.

Send service-related push notifications about task updates and status changes.

Improve, troubleshoot, and secure the Service.

Communicate with you about service changes, support requests, and account matters.

Comply with applicable legal obligations under the DPDP Act and related Rules.

We do not sell your personal data. We do not share your data with advertisers. We do not use your data for targeted advertising.

4.1 AI and Automated Processing

The Service uses AI to help understand your task instructions and generate suggestions for your Chief Minion (for example, understanding a reminder request or suggesting gift options). These automated processes assist our human Chief Minions and Operations team; they do not make any legally or similarly significant decision about you without human review.

Use of third-party AI. To provide this functionality, the text content of your messages and voice messages you send are processed by a third-party AI service provider, which generates suggestions and structured task information for your Chief Minion. Photos you attach in chat are not currently sent to or processed by this AI system.

We obtain your consent for this processing at account setup, and you can withdraw it at any time by writing to hello@sortedd.in (see Section 8). Under our AI provider's standard data controls, your message and voice content is retained for up to 30 days for abuse-monitoring and service-operation purposes, then deleted, unless Sortedd applies for and is granted enhanced data controls with our provider, subject to the provider's approval. Our AI provider's published policy confirms that data submitted through its API is not used to train or improve its models.

4.2 Communications You Can Opt Out Of, and Those You Cannot

You may receive product updates and occasional service-related communications from us. You can unsubscribe from non-essential communications by writing to hello@sortedd.in. You cannot opt out of service notices, administrative notices, billing notices, security alerts, or notices we are legally required to send.

4.3 Aggregated and Anonymised Data

We may aggregate or anonymise data such that it no longer identifies you. Once anonymised, such data is no longer "personal data" under the DPDP Act and may be used for analytics, research, and product improvement without the restrictions of this Policy.

We share your information only with:

Your assigned Chief Minion and Sortedd's Operations team, who need access to deliver the Service to you. Access is limited to the specific client conversation an individual is assigned to, not the full customer database.

Service providers who help us operate our infrastructure, cloud hosting and database services, our AI provider, payment gateway, and push notification delivery, under confidentiality and data protection obligations. See Section 6.

Third-party vendors and service partners (for example, cleaning, driver, care, gifting, or travel partners) engaged to fulfil your specific request. We share only the minimum information necessary to complete that task.

Law enforcement, courts, or regulators, where disclosure is required by applicable law, court order, or to protect our legal rights or the safety of our users.

We do not share family-member information or task content with any third party for marketing or advertising purposes.

You are responsible for ensuring you have the authority and consent necessary to share information relating to family members, household staff, or third parties (such as an emergency contact or vet) through the Service.

The Service relies on the following categories of third-party processors, each engaged under confidentiality and data protection obligations:

Cloud Hosting and Database

Application backend and database: hosted on secure cloud infrastructure located within India.

Onboarding and account data is stored on this same India-based infrastructure.

AI Processing

A third-party AI service provider, accessed via Sortedd's own account with that provider. Message text and voice content you send to your Chief Minion are processed by this provider to generate suggestions and structured task information. This provider's data processing terms are incorporated into its standard services agreement. Data submitted for this purpose is not used by the provider to train its models. This processing may take place on infrastructure located outside India; see Section 12.

Payment Gateway

A regulated and licensed Indian payment aggregator, governed by the Reserve Bank of India. Payments are processed directly on their platform; Sortedd does not store any card, UPI, or banking credentials.

Push Notification Delivery

Standard mobile platform notification services for iOS and Android.

In future releases, if we integrate additional tools, we will update this Policy and, where required, seek your consent before activating them.

External links. The Service may direct you to third-party websites or apps, for example, a vendor's booking confirmation page or a payment gateway. This Policy does not govern your interaction with those third parties.

Data Category

Retention Period

• Account information (name, phone, email, address)

Duration of membership + 3 years after account closure

• Task content and Chief Minion messages

Duration of membership + 1 year after account closure

• Voice messages

As per app storage; content processed by our AI provider is retained for up to 30 days (Section 4.1)

• Content sent to our AI provider

Up to 30 days under standard retention terms, then deleted

• Server logs

90 days from generation

• Support communications

2 years from last interaction

• Payment transaction records

8 years (GST and accounting law requirements)

• Legal hold data

Until the relevant legal proceeding concludes

You may request deletion of your account and associated data at any time. See our Delete Account or Delete Data pages. We will action verified deletion requests within the timeframes required by applicable law, typically within 30 days.

Under the Digital Personal Data Protection Act, 2023, you have the right to:

Access the personal data we hold about you.

Correct inaccurate or incomplete data.

Request deletion of your data, subject to legal retention obligations.

Withdraw consent for processing where consent is the basis for processing.

Nominate another individual to exercise your rights in the event of your death or incapacity.

Raise a grievance with our Grievance Officer (Section 9) before approaching any external authority.

Lodge a complaint with the Data Protection Board of India if your grievance is not resolved to your satisfaction.

8.1 How to Withdraw Consent

You may withdraw consent for any processing activity at any time by writing to hello@sortedd.in, or using our Delete Account or Delete Data pages. We will action your withdrawal within 7 business days.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Withdrawing consent for core processing activities (such as account authentication) will result in termination of your Sortedd membership, as the Service cannot function without that data.

Grievance Officer: Mohit Varshney, Founder and CEO. Email: hello@sortedd.in. Address: 7AM Lifestyle & Entertainment Private Limited, 4702, 47th Floor, M3M Heights, Sector 65, Bhondsi, Gurugram, Haryana, 122102, India

We will acknowledge your grievance within 2 business days and resolve it within 30 days of receipt, as required under the DPDP Rules, 2025.

If your grievance is not resolved within this period, or you are dissatisfied with our response, you may escalate the matter to the Data Protection Board of India, established under Section 18 of the DPDP Act, 2023.

We use reasonable technical and organisational measures to protect your data, including:

Encryption of data in transit and at rest.

Access controls limiting Chief Minion and employee access to a need-to-know, per-conversation basis.

Secure cloud hosting on infrastructure located in India.

Routine review of our systems and processes.

We require all third-party processors we work with to meet appropriate data protection and confidentiality standards, consistent with the requirements of the DPDP Act, 2023.

No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your phone and OTP credentials secure.

10.1 Data Breach Notification

In the event of a personal data breach likely to result in harm to you, we will notify the Data Protection Board of India as required under Section 8(6) of the DPDP Act, 2023, and notify you promptly at your registered email or phone number with details of the breach, the data affected, and the steps we are taking.

Sortedd is intended for use by adults aged 18 and over. We do not knowingly collect personal data directly from individuals under 18.

The Service may involve coordination of tasks related to minors in your household, for example, scheduling appointments or activities for a child. Where the Service involves data of a minor in your household, you confirm that you are the minor's parent or lawful guardian and that you consent on the minor's behalf, as required under Section 9 of the DPDP Act, 2023.

• Your account data, task content, and database records are stored on cloud infrastructure located within India.

The one exception is AI processing: to generate suggestions and process your requests, the text content of your messages and voice messages is processed by our third-party AI provider (Section 4.1, Section 6), which may process this data on infrastructure located outside India, under that provider's standard data processing terms. This transfer occurs only with your consent (Section 4.1), and you may withdraw it at any time, though doing so may limit certain AI-assisted features of the Service.

If we transfer personal data outside India for any new reason in future, we will update this Policy, notify you in-app or by email before the transfer becomes effective, and ensure appropriate safeguards consistent with Section 16 of the DPDP Act, 2023.

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top. We will notify you of material changes in-app or by email before they take effect. Continued use of the Service after a change indicates your acceptance of the updated Policy.

7AM Lifestyle & Entertainment Private Limited. Email: hello@sortedd.inGrievance Officer: Mohit Varshney, Founder and CEO. Registered Office: 4702, 47th Floor, M3M Heights, Sector 65, Bhondsi, Gurugram, Haryana, 122102, India

Standalone consent notice, mandatory, shown before account creation in the Sortedd mobile app.

Before you create your Sortedd account, we collect the following personal data for the purposes listed below. You may withdraw consent at any time by writing to hello@sortedd.in.

Data Collected

Purpose

Mobile number

OTP login / account authentication

Name, email, address

Account creation and service delivery

• Family member details

Task coordination on your behalf

• Task content, messages, and voice messages

Chief Minion service delivery

Message and voice content processed by our AI provider

Understanding your requests and generating suggestions

Health and medication-related task data

Executing health- and care-related tasks

• Device and log data

Security and diagnostics

By tapping "Agree, Create Account", you consent to the above collection and processing, including the processing of your message and voice content by our third-party AI provider as described above. You may withdraw consent at any time by writing to hello@sortedd.in, without affecting the lawfulness of prior processing.