Privacy
Privacy notice
Version 2026-10-draft. Written to be read, not skimmed past.
Draft — pending legal review
This document is a plain-language draft prepared before launch. It has not yet been reviewed by legal counsel and may change. Where it differs from applicable law, the law applies.
1. Who we are
SuperHealthyAI (“we”, “us”) provides a health and nutrition education service for adults through superhealthyai.com and our Android app. For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we act as the Data Fiduciary for the personal data described here. Our legal entity name and registered address will be added here before public launch.
2. What we collect and why
| Data | Purpose | Basis |
|---|---|---|
| Email, name you choose, password (stored only as a secure hash) | Create and secure your account; send verification and security emails | Consent when you register |
| Date of birth, height, weight, units, country, time zone | Confirm you are an adult; calculate and show BMI; schedule reminders at your local time | Your consent to health data processing |
| Optional details: activity, diet preference, goals, allergies, conditions, pregnancy status, sleep, waist size, fluid restriction | Tailor education and add safety cautions. Every one of these is optional. | Your consent to health data processing |
| Food diary, water logs | Show your totals, trends and reminders | Your consent to health data processing |
| Medicines and supplements you add, schedules, what you report taking | Send reminders and show your history | Separate consent to medicine & supplement tracking |
| Questions you ask the AI assistant and its answers | Answer you; keep your conversation history (which you can clear); investigate answers reported as unsafe | Your consent when you use the assistant |
| Technical data: IP address, device and app version, security logs | Keep the service secure, prevent abuse, fix errors | Legitimate uses permitted by law |
3. What we do not do
- We do not sell your personal data.
- We do not use your data for advertising or ad targeting, and we do not use third-party analytics or advertising trackers on the website.
- We do not use your health data to train AI models.
- We do not put your health data in web addresses, search indexes or shared caches.
4. AI processing
The AI assistant sends your question to a large language model through OpenRouter, a third-party service that routes requests to AI model providers, which may be located outside India. We minimise what is sent: your question and relevant reference text. If — and only if — you turn on “Personalised AI answers”, we also send a minimised profile summary (for example an age range, diet preference and listed allergies). We never send your name, email address or account identifiers. You can switch personalisation off at any time in Settings or in the assistant.
5. Where your data is stored
Your account and health data are stored on Amazon Web Services (AWS) infrastructure in the Asia Pacific (Mumbai) region, India. Our website is delivered through Cloudflare, which protects against attacks; pages containing your personal data are not cached by it. Email is sent through an email delivery provider. Other service providers may be added; we will update this notice when that happens.
6. How long we keep data
We keep your data while your account is active. When you delete your account, your health data is deleted promptly. We keep a minimal, pseudonymous record that an account existed and was deleted, and security logs for a limited period, where needed to meet legal obligations and protect the service. Backups are overwritten on a rolling schedule.
7. Your consent and how to withdraw it
You give separate consents for health data processing, medicine & supplement tracking, and personalised AI answers. You can withdraw any of them at any time in Settings. Withdrawing is as easy as giving consent. If you withdraw health data consent, features that need it stop working until you consent again. Withdrawal does not affect processing that happened before it.
8. Your rights
Under the DPDP Act and applicable rules you can:
- Ask for a summary of the personal data we process and how — and download a copy from Settings → Export my data.
- Correct or update your data — most of it directly in the app.
- Erase your data — Settings → Delete account (see data deletion).
- Nominate another person to exercise your rights in the event of death or incapacity, by writing to us.
- Raise a grievance with us, and if unresolved, approach the Data Protection Board of India once it is operational for such complaints.
9. Security
We use encryption in transit (HTTPS) and at rest, hashed passwords, secure HttpOnly cookies, access controls, audit logs for privileged actions, and regular backups. No system is perfectly secure; if a breach affecting you occurs, we will notify you and the authorities as the law requires.
10. Children
SuperHealthyAI is only for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has an account, contact us.
11. Contact and grievances
Privacy questions: [email protected]. Grievance Officer (name and contact to be published before launch): [email protected]. We aim to acknowledge requests promptly and respond within the time the law requires.
12. Changes
If we make material changes, we will tell you in the app and, where required, ask for your consent again.