Privacy Policy & Data Protection Disclosure
How we process, protect, and handle biometric, WhatsApp, and personal health data
1. Principles of Data Processing
This Privacy Policy is formulated in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and Meta Business Platform Policies.
2. Information We Collect
- Biometric & Physical Parameters: Age, Gender, Current Weight, Height, Target Goal (Fat loss/Muscle gain), and Activity Level.
- Dietary & Clinical Preferences: Diet category (Veg, Non-Veg, Jain, Vegan), Food allergies (Lactose, Gluten, Nuts), and Self-reported constraints (Thyroid, PCOD, Diabetes).
- Contact & Communication Data: Full Name, Email Address, and WhatsApp Mobile Number.
- Image Data (Photo Meal Scans): Photos of food items uploaded for AI portion estimation (processed via cryptographically hashed perceptual caching; faces or non-food images are strictly ignored).
3. Purpose of Processing
We process your information strictly for:
- Mathematical calculation of BMR/TDEE and nutritional breakdown.
- Daily morning delivery of personalized meal charts on WhatsApp at 06:30 AM.
- Timed pre-meal notifications and hydration balance reminders.
- Payment processing and subscription lifecycle management via PCI-DSS compliant Razorpay.
🛡️ Absolute Zero Third-Party Data Sale Guarantee
We do NOT sell, rent, monetize, or trade your personal or health biometrics to pharmaceutical companies, advertising brokers, or unassociated third-party entities under any circumstance.
5. Data Principal Rights (Under DPDP Act 2023)
Every registered user holds sovereign rights over their data:
- Right to Access & Summary: Review all health profiles and tracking metrics on your dashboard.
- Right to Data Portability: 1-Click download of your complete JSON archive via Privacy Dashboard.
- Right to Correction & Erasure: Request permanent scrubbing of your records within 30 days.
- Right of Grievance Redressal: Direct communication with our designated Grievance Officer.
6. Data Retention & Cryptographic Security
All passwords are encrypted with bcrypt hashing. Communication with our servers is secured through 256-bit TLS/SSL encryption. Webhook signatures from Razorpay and WhatsApp are cryptographically verified using HMAC SHA-256.