CARE Terms of Use and Services Agreement
These Terms are a binding electronic agreement. They explain what CARE provides, what it does not provide, the responsibilities of users and professionals, payment rules, ownership of content, safety limitations and dispute arrangements.
1Operator and acceptance
CARE is owned and operated by Wish Apples Ventures Private Limited, a company incorporated under the Companies Act, 2013 (the “Company”, “Wish Apples”, “CARE”, “we”, “us” or “our”). These Terms apply to the CARE mobile application, website, web application, portals, communications and related services.
By registering, clicking an acceptance control, using CARE, booking a service, paying an invoice or continuing after a properly notified update, you enter into an electronic contract with the Company. If you do not agree, do not use CARE. The individual accepting on behalf of an organisation represents that they have authority to bind that organisation.
2Eligibility and authority
You must be at least 18 years old and legally competent to create an account. A child or other person lacking contractual capacity may be represented only by a parent, legal guardian or duly authorised representative.
You warrant that information supplied is accurate, complete and not misleading, and that you have lawful authority to provide personal data concerning any other person. Where authority is disputed, CARE may restrict access until satisfactory documentation is provided.
3Scope of CARE services
CARE may facilitate counselling, developmental and behavioural support, assessments, educational programmes, family or corporate interventions, recruitment and placement support, caregiver coordination, reports, digital records, appointments, communications and related services.
The precise scope, deliverables, duration, fees and personnel for a service are determined by the applicable proposal, programme sheet, invoice, engagement letter or service-specific consent. In case of conflict, a signed service-specific document prevails for that service, while these Terms continue to govern platform use.
4Professional independence and no guaranteed outcome
CARE coordinates services delivered by employees, consultants, counsellors, psychologists, educators, assessors, recruiters, caregivers and other professionals. Professional opinions may differ and depend on the information available at the time.
No diagnosis, placement, employment, educational, developmental, behavioural, commercial, relationship, health, financial or other outcome is promised or guaranteed. Reports and recommendations are decision-support materials and must not be treated as infallible predictions or substitutes for independent professional judgment.
5Accounts and security
Users must maintain control of their registered mobile number, device, OTPs and account access. You must notify CARE promptly of suspected unauthorised access. You are responsible for activity undertaken through your verified account unless caused by CARE's proven failure to apply legally required safeguards.
CARE may use OTP, role-based permissions, session controls, audit logs and other verification measures. Attempting to bypass access controls, impersonate another person, scrape data or interfere with the platform is prohibited.
6User responsibilities and accurate disclosure
You must provide timely, accurate and complete information relevant to the service, including medical, developmental, behavioural, educational, employment, legal, custody, safeguarding and safety information. CARE and participating professionals may rely on information supplied by you or authorised third parties.
You must not conceal material facts, alter records deceptively, upload unlawful content, harass professionals or other users, misuse reports, record sessions without permission, or use CARE to discriminate unlawfully or cause harm.
7Children and dependent persons
A child does not create a CARE account unless CARE expressly launches an age-appropriate service permitted by law. A parent or lawful guardian controls the child profile and must provide verifiable consent as required.
The person creating a child profile warrants authority to do so and must disclose custody restrictions, court orders or disputes. CARE is not responsible for resolving family-law disputes and may pause access, preserve records or seek legal documentation where competing claims arise.
8Appointments, remote services and communications
Services may occur in person, by telephone, video, messaging, home visit, school visit or another agreed mode. Remote services may be affected by connectivity, device, privacy and environmental limitations. Users must choose a private and safe setting and disclose who is present.
Operational messages may be sent by SMS, WhatsApp, email, push notification or in-app message. Marketing communication requires a lawful basis and an opt-out mechanism.
9Fees, taxes and payment
Fees, taxes, deposits, instalments and payment dates are stated in the relevant proposal, invoice or checkout screen. Unless expressly stated otherwise, quoted professional fees exclude applicable GST and third-party charges.
CARE may use authorised payment gateways. CARE does not ordinarily store full card details. Payment provider terms also apply. Failure, chargeback, reversal or fraud may result in suspension, recovery action and reasonable collection costs, subject to applicable law.
10Third-party services and integrations
CARE may rely on hosting, cloud storage, OTP, communications, analytics, crash reporting, payment, calendar, video, background verification and other providers. Those providers may process data only for permitted purposes under contract or law.
Third-party links or services are not controlled by CARE. CARE is not liable for independent third-party acts except to the extent liability cannot lawfully be excluded or arises from CARE's own proven breach of duty.
11Intellectual property
CARE, its software, designs, methodologies, questionnaires, programmes, reports, educational content, algorithms, workflows, trademarks, trade dress and materials are owned by or licensed to the Company. A limited, revocable, non-transferable right is granted for personal or authorised organisational use.
Users may not copy, reverse engineer, resell, publish, train competing systems on, commercially exploit or create derivative works from protected CARE materials without written permission. A client may use a report for its intended internal purpose but may not misrepresent, selectively alter or publicly circulate it.
12User content and permissions
You retain rights you lawfully hold in content you upload. You grant CARE a limited licence to host, reproduce, transmit, display, analyse and otherwise process that content solely to operate the requested services, maintain records, comply with law, protect safety and improve services using de-identified or aggregated information where lawful.
You warrant that uploads do not violate privacy, confidentiality, intellectual-property, employment, healthcare, court or safeguarding obligations.
13Confidentiality
CARE applies role-based confidentiality. Confidentiality is not absolute. Disclosure may occur with valid consent, for service coordination, supervision and quality assurance, to prevent serious harm, for child or vulnerable-person safeguarding, to investigate misuse, to exercise legal rights, or when required by law or lawful authority.
Users are responsible for protecting information they download, print, forward or share outside CARE.
14Suspension and termination
CARE may suspend or terminate access for non-payment, fraud, abuse, threats, unlawful conduct, security risk, professional-boundary violations, false information, breach of these Terms or operational necessity. Where practicable and safe, notice and an opportunity to respond will be provided.
Termination does not extinguish accrued payment, confidentiality, intellectual-property, indemnity, dispute or record-retention obligations.
15Protective disclaimers
CARE is provided on an “as available” basis. While the Company uses reasonable care, it does not warrant uninterrupted operation, error-free technology, universal compatibility, permanent availability of any professional or that every communication will be immediately received.
Nothing in these Terms excludes statutory guarantees or liability that cannot legally be excluded. Any disclaimer must be read subject to applicable consumer, data-protection, healthcare, employment and other mandatory law.
16Limitation of liability
To the fullest extent permitted by law, the Company and its directors, officers, employees, consultants and authorised partners are not liable for indirect, incidental, special, exemplary or consequential loss; loss of opportunity, profit, goodwill or data; decisions made independently by a user, employer, institution, doctor or third party; or harm caused by inaccurate, incomplete or withheld information.
For claims that may lawfully be limited, aggregate liability arising from a specific paid service will not exceed the fees actually paid to the Company for that service during the six months preceding the event giving rise to the claim. This cap does not apply where prohibited by law, including liability arising from fraud, wilful misconduct or other non-excludable liability.
No professional, doctor, company or institution becomes a beneficiary of this agreement merely because a report is shared with them. Any third party relying on a CARE report does so subject to its stated scope, limitations and the need for independent verification.
17Indemnity
To the extent permitted by law, you will indemnify and hold harmless the Company and its personnel against third-party claims, losses and reasonable costs arising from your unlawful content, misrepresentation of authority, breach of confidentiality, misuse of reports, violation of another person's rights, unlawful recruitment decision, or material breach of these Terms.
This indemnity does not cover loss caused by the Company's own fraud, wilful misconduct or liability that cannot lawfully be shifted.
18Force majeure
CARE is not responsible for delay or failure caused by events reasonably beyond its control, including natural disaster, epidemic, government action, civil disturbance, power or telecom failure, cyberattack not caused by failure to apply required safeguards, vendor outage or professional unavailability. CARE will use reasonable efforts to mitigate material disruption.
19Changes
CARE may update these Terms for legal, security, operational or service reasons. Material changes will be notified appropriately. Where law or the nature of the change requires renewed consent, CARE will obtain it before the revised term applies. Archived versions and acceptance records should be retained.
20Governing law and disputes
These Terms are governed by the laws of India. Subject to mandatory consumer jurisdiction, the parties will first attempt good-faith resolution through CARE's grievance process. If unresolved, disputes may be referred to arbitration under the Arbitration and Conciliation Act, 1996 by a sole arbitrator mutually appointed, with seat and venue at Mumbai, Maharashtra, proceedings in English, and courts at Mumbai having supervisory jurisdiction.
Nothing prevents either party from seeking urgent interim relief, reporting a crime, approaching a statutory regulator or exercising a non-waivable consumer right.
21General provisions
If a provision is invalid or unenforceable, it will be narrowed to the minimum extent required and the remainder will continue. Failure to enforce a right is not a waiver. The English version controls unless CARE expressly designates another version as equally authoritative. Electronic records and acceptance logs may be used as evidence as permitted by law.
Privacy and Data Protection Policy
CARE will explain what data is collected, why it is needed, who can access it, how long it is kept and how a person can exercise rights. CARE does not sell personal data to data brokers or advertisers.
1Data fiduciary and contact
Wish Apples Ventures Private Limited determines the purposes and means of processing personal data through CARE and acts as the Data Fiduciary or equivalent controller where applicable.
Registered office: insert complete registered office address. Privacy/Grievance contact: insert name and designation. Email: help@wishapples.com | Telephone: insert number.
2Who this policy covers
This policy covers users, prospective users, parents, guardians, children, family members, candidates, employees, employers, clients, caregivers, counsellors, psychologists, educators, assessors, vendors, visitors and authorised representatives whose personal data is processed through CARE services.
3Categories of data
CARE may process identity, contact, account and verification data; family and guardian data; educational and employment records; CVs, references and background-verification information; behavioural, developmental, psychological and assessment data; health-related information, prescriptions, medication logs and incident records; photographs, audio, video and session notes; biometric or fingerprint-derived data where a specific service requires it; appointment, payment and invoice data; communications; location supplied with a report; device, log, diagnostic and security data; and consent and audit records.
CARE should collect only data reasonably necessary for specified purposes and should avoid storing full payment-card credentials.
4Sources
Data may be collected from you, a parent or guardian, an employer or corporate client, a school or institution, a referring professional, an authorised caregiver, a background-verification source, a device or application, or another person lawfully authorised to provide it. CARE will provide notice directly where required and practicable.
5Purposes and lawful use
CARE uses data to create and secure accounts; verify identity and authority; deliver counselling, assessment, recruitment, education and care coordination; schedule and communicate; generate reports and recommendations; process payments; maintain professional and legal records; provide support; supervise quality; prevent fraud and misuse; protect a child or person; comply with law; establish or defend legal claims; and improve services using appropriately de-identified or aggregated information.
Data will not be processed for a new incompatible purpose without an appropriate notice and lawful basis.
6Consent and withdrawal
Where processing is based on consent, consent must be free, specific, informed, unconditional and unambiguous, expressed through clear affirmative action. Consent for optional marketing, promotional use or testimonials must be separate from essential service consent.
Withdrawal will be as easy as giving consent. Withdrawal does not make prior lawful processing invalid and may affect CARE's ability to continue a service that genuinely requires the data.
7Children's data
CARE processes a child's data only through an adult workflow and with verifiable consent of a parent or lawful guardian where required. CARE will not knowingly undertake tracking or behavioural monitoring of children for advertising, or targeted advertising directed at children.
CARE must implement a guardian-verification process appropriate to the risk and applicable commencement provisions of Indian data-protection law. The guardian must be able to review, correct and request deletion of the child profile, subject to lawful retention and safeguarding needs.
8Biometric and highly sensitive information
Fingerprint capture, biometric templates, psychological data, health-related data, photographs, videos and detailed child records require heightened safeguards. CARE must display a service-specific notice before collection, state whether raw images or derived templates are retained, identify purpose and retention, restrict access and prohibit secondary use unless separately authorised and lawful.
Biometric information must not be used for unrelated identification, advertising, surveillance or disclosure to employers, insurers or other parties without an applicable legal basis and explicit notice.
9Sharing and recipients
CARE may share data with authorised CARE personnel and professionals; the user's approved care or service team; corporate or institutional clients within the agreed scope; cloud, communications, payment, analytics, video, scheduling and security providers; professional advisers; insurers; regulators, courts or law-enforcement authorities; and persons necessary to protect safety or legal rights.
Access is limited by role, purpose and contract. CARE does not sell personal data or disclose it to advertisers for independent behavioural advertising.
10Corporate and recruitment data
Where an employer or corporate client sponsors an assessment, CARE must clearly state which outputs will be shared with the organisation and which counselling or personal notes remain confidential. Candidates must be informed of the assessment purpose and recipients.
Employers remain responsible for lawful, fair and non-discriminatory employment decisions. CARE does not guarantee candidate conduct, performance, retention, background, medical fitness or legal eligibility unless specifically verified within the stated scope.
11International processing
CARE may use service providers whose infrastructure or support personnel are located outside India. Any transfer will be subject to applicable Indian restrictions, contractual protections, vendor due diligence and security controls. The IT team must maintain a current vendor and hosting-location register.
12Security
CARE will implement reasonable technical and organisational safeguards proportionate to risk, including encryption in transit and where appropriate at rest, OTP and session controls, least-privilege access, audit logging, secure development, vulnerability management, backups, vendor controls, incident response, staff confidentiality and periodic access review.
No system is absolutely secure. Users must promptly report suspicious access and secure exported records.
13Breach response
CARE will maintain an incident-response plan to identify, contain, assess and remediate personal-data breaches. Notifications to affected persons, the Data Protection Board of India or another authority will be made where and when applicable law requires. Internal breach records must document facts, effects and remedial action.
14Retention
CARE retains data only for the duration reasonably necessary for the service, legal compliance, professional recordkeeping, safety, dispute resolution, fraud prevention and enforcement. The Company must adopt a written retention schedule by data category.
| Data category | Proposed retention |
|---|---|
| Unsuccessful enquiries | 12 months |
| Routine account & support logs | 24 months after closure |
| Financial and tax records | Statutory period |
| Recruitment records | 24 months, unless a longer lawful period is disclosed |
| Counselling, assessment, child-care and programme records | insert counsel-approved period |
| Security logs | insert period |
| Backups | Rolling deletion within insert period |
Deletion may involve secure erasure or irreversible anonymisation. Data subject to legal hold, safeguarding need, payment dispute or statutory retention may be restricted rather than immediately erased.
15Rights and requests
Subject to applicable law, a person may request access to a summary of personal data and processing, correction, completion, updating, erasure, withdrawal of consent, grievance redressal and nomination of another person to exercise rights in the event of death or incapacity.
CARE may verify identity and authority before acting. Requests will be acknowledged and handled within the period required by applicable law. Unfounded, repetitive or abusive requests may be handled as permitted by law.
16Automated analysis and AI
CARE may use algorithms or AI-assisted tools to organise information, identify patterns, prepare drafts or support professional review. CARE will not represent an automated output as a definitive diagnosis or guaranteed decision. Material recommendations should remain subject to appropriately qualified human review.
The IT and programme teams must document what inputs are used, whether data is sent to an external AI provider, retention settings, human oversight and limitations disclosed to users.
17Cookies and SDKs
The website and app may use essential cookies, analytics, crash reporting, push notifications and software development kits. The IT team must maintain an SDK register identifying provider, data collected, purpose, retention and sharing. Non-essential tracking should be disabled until any required consent is obtained.
18Changes and versions
Material changes will be notified through the app, website or registered contact details. Fresh consent will be obtained where legally required. CARE will maintain prior versions and effective dates.
Child, Guardian and Family Consent Framework
Professional Services, Assessment and Safety Disclaimer
- Counselling and developmental support are collaborative services and may involve discussion of difficult subjects. Results vary.
- CARE reports reflect information, observations, tools and professional judgment available at a particular time. Conditions and behaviour can change.
- A report must not be used outside its stated purpose or treated as medical fitness, legal capacity, creditworthiness, employment guarantee or forensic opinion unless expressly prepared for that purpose by a duly qualified professional.
- Independent doctors, employers, schools, insurers, courts and other decision-makers must conduct their own evaluation. CARE is not responsible for their independent decisions.
- No user may threaten, harass, secretly record or compromise the safety of a CARE professional. Home visits may be ended where conditions are unsafe.
- CARE may contact an emergency person or appropriate authority where there is a reasonable and lawful safety concern.
Payment, Cancellation and Refund Policy
1Booking and payment
A booking is confirmed only after required payment, written confirmation or authorised credit arrangement. Programme seats, professional time and home visits may be reserved specifically for the client.
2Cancellation by client
The checkout or proposal must state the applicable cancellation window. Programme, travel, testing-kit and third-party costs may have separate non-refundable conditions.
| Notice given | Suggested default |
|---|---|
| More than 48 hours | Reschedule once without professional fee |
| 24–48 hours | 50% fee |
| Less than 24 hours / no-show | 100% fee |
3Cancellation by CARE
CARE may reschedule due to illness, emergency, safety, force majeure or professional unavailability. The primary remedy is rescheduling or credit; a refund may be offered where service cannot reasonably be delivered.
4Programme withdrawal
Fees for commenced programmes compensate reserved capacity, assessment, planning, materials and staffing. Any refund must follow the signed proposal and applicable consumer law; unperformed separable services may be considered proportionately.
5Disputed payment
Users should raise billing disputes within 15 days. Chargeback fraud, false disputes or non-payment may result in suspension and lawful recovery.
6Taxes
GST and other taxes apply as stated. Tax invoices require accurate billing information.
Recruitment and Placement Terms
- CARE is an intermediary and assessment/coordination service unless a written agreement expressly states otherwise. It is not the employer of a placed candidate merely because it introduced, assessed or trained that person.
- Employers must independently verify identity, qualifications, references, licences, immigration/work status, criminal or police records, medical fitness and any role-specific legal requirement.
- Candidates warrant that information and documents are genuine and authorise stated checks. False information may result in removal and lawful disclosure.
- No guarantee is given regarding performance, honesty, attendance, retention, compatibility, misconduct or future events. Any replacement assurance must be expressly written, time-limited and conditional.
- Employers remain responsible for lawful contracts, wages, working hours, leave, safety, insurance, statutory benefits, dignity, non-discrimination and workplace compliance.
- For nannies, caregivers and home personnel, the client must provide a safe workplace, appropriate accommodation where applicable, clear duties, lawful rest and leave, and must not retain original identity documents unlawfully.
- CARE may suspend a placement process where safeguarding, exploitation, violence, harassment, trafficking, child-safety or other serious concerns arise.
Account Deletion and Data Request Policy
- Provide the same deletion/request facility through a public website form or help page suitable for Google Play disclosure.
- Deletion means deletion of the account and associated personal data, except data retained for a disclosed lawful reason such as tax, fraud prevention, safeguarding, professional recordkeeping, dispute or legal hold.
- Deactivation alone must not be represented as deletion.
- Where a guardian requests deletion of a child profile, verify authority and consider whether another lawful guardian, safeguarding obligation or legal hold affects the request.
- The response should identify completion, restricted retention, expected backup expiry and appeal/grievance route.
Grievance Redressal and Complaints
- Accept privacy, service, billing, professional-conduct, safety and accessibility complaints through a traceable channel.
- Acknowledge complaints promptly and assign a reference number.
- Triage urgent child-safety, medical, self-harm, violence, abuse and data-breach matters immediately under the relevant escalation protocol.
- Investigate impartially, preserve relevant records, restrict conflicts of interest and communicate the outcome.
- Inform the complainant of any internal review, statutory regulator or consumer remedy that cannot be waived.
In-App Consent Screens and UX Copy
IT, Security and App-Store Implementation Schedule
| Control | Implementation requirement | Owner / status |
|---|---|---|
| Legal links | Publish stable HTTPS URLs for Terms, Privacy, Refunds, Account Deletion, Grievance and Support. Links must work without login. | Assign |
| Consent ledger | Store user ID, role, document name/version, language, timestamp, device/session identifier, checkbox state and withdrawal/update history. | Assign |
| No automatic active accounts | When a user names another caregiver, create an invitation record only. Activate after OTP verification, notice and acceptance by that person. | Assign |
| Guardian verification | Implement risk-appropriate guardian verification and evidence logging before child data collection. | Assign |
| Role-based access | Define least-privilege matrices for parent, nanny, counsellor, coordinator, assessor, recruiter, employer, admin, super-admin, IT support and auditor. | Assign |
| High-risk data | Encrypt sensitive child, health, psychological, biometric, identity and background-verification data; separate access and logging. | Assign |
| Export controls | Watermark sensitive exports with user, date and confidentiality notice. Log downloads and sharing where appropriate. | Assign |
| Deletion | Provide in-app deletion initiation and public web path. Build workflow for legal hold, restricted retention, deletion, anonymisation and backup expiry. | Assign |
| Vendor register | Document every hosting, database, SMS, WhatsApp, email, analytics, crash, payment, video, AI and background-check provider, locations and data fields. | Assign |
| SDK review | Remove unnecessary SDKs. Verify privacy manifests/labels and Google Data Safety against actual network traffic and code. | Assign |
| Security operations | MFA for privileged users, access reviews, vulnerability scanning, patching, secure backups, breach playbook and staff confidentiality. | Assign |
| Audit and evidence | Immutable or tamper-evident logs for report creation/editing, access changes, consent, payment, deletion and administrative action. | Assign |
| Emergency UX | Display emergency disclaimer at counselling entry points and maintain an internal escalation button/process. | Assign |
| Accessibility | Readable font size, plain language summaries, screen-reader labels, colour contrast and alternatives to colour-only meaning. | Assign |
| Versioning | Archive all policy versions and force renewed acceptance only when legally or materially necessary. | Assign |
Apple App Store submission check
- Privacy Policy URL included and functional.
- Support URL and current contact details included.
- App Privacy responses disclose all data collected by CARE and third-party partners.
- Account creation is accompanied by in-app initiation of account deletion.
- Purpose strings and permission prompts explain why camera, microphone, photos, location or contacts are needed.
- Health, child and sensitive-data flows comply with applicable App Review Guidelines.
Google Play submission check
- Privacy Policy URL is public, active, non-geofenced and linked in the app.
- Data Safety form matches actual collection, sharing, encryption, deletion and SDK practices.
- If account creation exists, in-app deletion and a public web deletion/request link are provided.
- Prominent disclosure appears before sensitive permission or data collection where required.
- Target audience, child safety and advertising declarations are accurate.
- Payment and subscription disclosures match the commercial model.
Do not publish until completed
The following operational facts cannot safely be invented in a legal policy. They must match the company's actual systems, contracts and practices.
- Complete registered office and correspondence address
- Grievance Officer / privacy contact details
- Authorised signatory and board approval
- Actual hosting provider(s), server region(s) and backup locations
- Complete third-party vendor and SDK list
- Exact categories of data collected by each screen and permission
- Biometric process: raw image, template, algorithm, vendor, storage and deletion
- AI providers, input data, training/retention settings and human review
- Retention schedule approved by counsel and programme heads
- Refund/cancellation windows for each product and programme
- Emergency/safeguarding escalation contacts and SOP
- Professional registrations, scope and supervision model
- Account and child-profile deletion workflow
- Apple App Privacy and Google Data Safety answers
- Cybersecurity incident response owner and breach-notification workflow
- Final legal review under Indian law and any foreign market entered
Legal Reference Notes
- Digital Personal Data Protection Act, 2023 (India), including consent, children's data, security safeguards, breach and data-principal rights provisions.
- Digital Personal Data Protection Rules, 2025 and notified commencement timeline; implementation must be reviewed against the provisions in force on the publication date.
- Information Technology Act, 2000 and applicable rules/directions concerning security, intermediaries, electronic records and incident reporting.
- Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020, where applicable.
- Indian Contract Act, 1872; Arbitration and Conciliation Act, 1996; Information Technology Act provisions recognising electronic contracts.
- Applicable professional, healthcare, mental-health, child-protection, employment, recruitment, tax and local laws depending on the exact service.
- Apple App Review Guidelines, App Privacy Details and in-app account deletion requirements.
- Google Play User Data, Data Safety, account deletion and families/target-audience requirements.
Final Counsel Review
Before publication, an Indian advocate should validate enforceability, the arbitration and liability clauses, professional scope, guardian verification, retention periods, recruitment terms, cancellation rules and the actual technical data flow. The policy must describe what the product truly does, not what the company hopes it does.