How Hulp collects, uses, and protects your information — written in plain language, under India's Digital Personal Data Protection Act, 2023.
This Privacy Policy describes how Secret Terry Private Limited (operating under the brand "Hulp"; referred to as "we", "our", or "us") collects, uses, stores, and protects your information when you use the Hulp mobile applications (iOS and Android), the Hulp website at hulp.in, and related services (collectively, the "Service").
By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
Legal basis. This Policy is published in compliance with applicable Indian law, including: (i) the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules notified thereunder; (ii) Section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"); and (iii) any other applicable sectoral regulations.
Capacity to contract. By using the Service you confirm that you are at least 18 years of age and are competent to enter into a binding contract under the Indian Contract Act, 1872.
Defined terms. "Personal data" carries the meaning given to it under the DPDP Act. The SPDI Rules use the related expression "Sensitive Personal Data or Information" (SPDI) for categories such as passwords, financial credentials, health information, biometric data, and medical records; where any such category is involved in the Service, we apply both the DPDP Act and the SPDI Rules.
Legal entity: Secret Terry Private Limited
Brand: Hulp
Website: https://hulp.in
Privacy contact: privacy@hulp.in
Registered office: 33rd Floor, PH02, Tower-A, Pioneer Araya, Sector-62, Gurugram, Haryana – 122098, India
Corporate office: Plot No. 89, Sector 44, Gurugram, Haryana – 122003, India
For any privacy-related questions, requests, or complaints — including requests to access, correct, or delete your data — please write to us at privacy@hulp.in, or use our Delete Account or Delete Data pages.
We collect only the information needed to operate the Service.
In the course of delivering the Service, we may handle the following categories of sensitive personal data on your behalf:
We process this data solely to carry out tasks you have explicitly instructed your PA to perform. We do not use it for profiling, advertising, or any secondary purpose. Explicit consent for processing sensitive personal data is obtained at the point of instruction or, where applicable, at account setup. This data is handled in accordance with Rule 5 of the IT (SPDI) Rules, 2011, in addition to the DPDP Act, 2023.
We use your information to:
We do not sell your personal data. We do not share your data with advertisers. We do not use your data for targeted advertising.
AI and Automated Processing Disclosure: Automated processing. The Service uses AI and automated systems to understand your task instructions, route them to the appropriate PA or system, and generate suggestions (for example, meal plans, vendor shortlists). These automated processes assist our PAs but do not make final decisions about you autonomously. No legal or similarly significant decision is made about you solely by automated means without human review.
When you sign up for the Service, you may receive product updates, tips, and occasional promotional emails from us. You can unsubscribe at any time by using the link in those emails or by writing to privacy@hulp.in. You cannot opt out of service notices, administrative notices, billing notices, security alerts, or notices we are legally required to send — these are necessary to operate your account.
We may aggregate or anonymise data in a manner that no longer identifies you or your family. Anonymisation is carried out using industry-standard techniques (such as aggregation, generalisation, or suppression) such that re-identification of any individual from the resulting dataset is not reasonably possible. Once aggregated or anonymised, such data is no longer "personal data" under the DPDP Act and may be used by Hulp for analytics, research, product improvement, and similar purposes without the restrictions of this Policy.
We share your information only with:
We do not share family-member information or task content with any third party for marketing or advertising purposes.
Explicit User Responsibility: User is responsible for ensuring that he/she has the authority and consent necessary to share information relating to family members, household staff, or third parties through the Service.
The Service relies on the following categories of third-party processors. Each is bound by a written agreement requiring confidentiality and DPDP-compliant data handling:
In future releases, if we integrate additional tools (for example, analytics or crash reporting), we will update this Policy and, where required, seek your consent before activating them. Material changes will be communicated to you in-app or by email.
External links. The Service may direct you to third-party websites or apps — for example, a hotel's booking confirmation page, a payment gateway, a doctor's appointment portal, or a courier's tracking page. This Policy does not govern your interaction with those third parties. Each of them maintains its own privacy policy, which we encourage you to read before sharing information with them.
We retain your account and task information only for as long as necessary for the purpose for which it was collected. The following retention periods apply:
| Data category | Retention period |
|---|---|
| Account information (name, phone, email) | Duration of subscription + 3 years after termination |
| Task content & PA messages | Duration of subscription + 1 year after termination |
| Call recordings | 90 days from date of call |
| Voice messages | 90 days from date of sending |
| Server logs & IP data | 90 days from generation |
| Support communications | 2 years from last interaction |
| Payment transaction references | 8 years (GST & accounting law requirements) |
| Legal hold data | Until the relevant legal proceeding concludes |
Certain records may be retained after deletion of your account where required for fraud prevention, taxation, accounting, dispute resolution, or legal compliance.
You may request deletion of your account and associated data at any time. See Delete Account or Delete Data. We will action verified deletion requests within the timeframes required by applicable law (typically within 30 days).
Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you have the right to:
You may withdraw consent for any or all processing activities at any time by:
We will action your withdrawal within 7 business days. Please note:
(a) Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
(b) Withdrawing consent for core processing activities (e.g., account authentication) will result in termination of your Hulp subscription, as the Service cannot function without that data.
(c) Withdrawal of consent for optional activities (e.g., promotional emails) will not affect your access to the Service.
To exercise any of these rights, write to privacy@hulp.in with your registered phone number and a description of your request. We may need to verify your identity before fulfilling the request.
Hulp Privacy Team — designated Grievance Officer under the DPDP Act, 2023
Email: grievance@hulp.in
Address: Secret Terry Private Limited, 33rd Floor, PH02, Tower-A, Pioneer Araya, Sector-62, Gurugram, Haryana – 122098, India
We will acknowledge your grievance within 2 business days and resolve it within 30 days of receipt, as required by the DPDP Rules, 2025.
If your grievance is not resolved within this period, or if you are dissatisfied with our response, you may escalate the matter to the Data Protection Board of India established under Section 18 of the DPDP Act, 2023.
We use commercially reasonable technical and organisational measures to protect your data, including:
In the event of a personal data breach that is likely to result in harm to you, we will:
If you believe your account has been compromised, please write immediately to privacy@hulp.in or contact our support team.
No system is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your phone and OTP credentials secure.
We are not responsible for security incidents that arise from factors outside our reasonable control — for example, a breach of our cloud or payment-gateway providers' systems, internet-routing or telecom failures, force-majeure events, or your own disclosure of your account credentials. In each such case, we will act in good faith to mitigate the impact and inform you and the relevant regulator as required by law.
Hulp is intended for use by adults aged 18 and over. We do not knowingly collect personal data directly from individuals under 18.
The Service may involve coordination of tasks related to minors in your household — for example, scheduling medical appointments or pickups for a child. Where the Service involves data of a minor in your household, you confirm that you are the minor's parent or lawful guardian and that you consent on the minor's behalf, as required by Section 9 of the DPDP Act, 2023.
By providing such an instruction relating to a minor, you are providing verifiable parental consent as required under Section 9 of the DPDP Act, 2023. We continue to evaluate additional technical mechanisms for verifiable parental consent as the DPDP Rules evolve, and will update this section accordingly. If we become aware that personal data of a minor has been provided without valid parental consent, we will delete it within 72 hours of becoming aware and notify you at your registered contact.
All personal data we process is stored on cloud infrastructure located entirely within India. We use two trusted cloud providers for redundancy and performance:
We do not transfer personal data outside India.
Certain technical metadata or limited processing by approved service providers may involve cross-border access, subject to applicable laws and appropriate contractual safeguards.
If, in future, we need to transfer personal data outside India for any reason, we will (a) update this Policy, (b) notify you in-app or by email before the transfer becomes effective, and (c) ensure appropriate safeguards consistent with Section 16 of the DPDP Act, 2023 and any country-restriction notifications issued by the Government of India.
We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top. We will notify you of material changes in-app or by email before they take effect. Continued use of the Service after a change indicates your acceptance of the updated Policy.
For any questions, concerns, or requests regarding this Policy or our data practices, contact:
Secret Terry Private Limited
Email: privacy@hulp.in
Grievance Officer: grievance@hulp.in
Registered office: 33rd Floor, PH02, Tower-A, Pioneer Araya, Sector-62, Gurugram, Haryana – 122098, India
Corporate office: Plot No. 89, Sector 44, Gurugram, Haryana – 122003, India
Standalone consent notice — mandatory; shown before account creation in the Hulp mobile app.
Before you create your Hulp account, we collect the following personal data for the purposes listed below. You may withdraw consent at any time from Settings → Privacy → Manage Consent.
| Data collected | Purpose |
|---|---|
| Mobile number | OTP login / account authentication |
| Name, email, address | Account creation & service delivery |
| Family member details | Task coordination on your behalf |
| Task content & messages | PA service delivery |
| Voice messages & call recordings | Service quality & dispute resolution |
| Health & financial task data | Executing health- and finance-related tasks |
| Device & log data | Security & diagnostics |
By tapping "Agree, Create Account", you consent to the above collection and processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.