Your health data is sensitive, and we treat it that way. This policy explains what we collect, why, and the control you have. Preventians complies with India’s Digital Personal Data Protection Act, 2023.
1. Data we collect
We collect the details you share during onboarding — goals, health history, dietary preferences — along with meal photos, activity and messages with SIA and your dietitian. We also collect basic device and usage data to keep the app working.
2. How we use it
Your data is used to build and adapt your plan, power SIA’s coaching, and let your dietitian care for you. We never sell your personal data, and we never use identifiable health data for advertising.
3. Wearables & Health Connect
If you choose to connect a smartwatch, ring or fitness band, Preventians reads your steps, sleep, heart rate and weight through Google Health Connect — with read-only permissions you grant explicitly and can revoke at any time from Health Connect settings. This data is used solely to show your own activity in the app and to personalise your wellness plan. It is never used for advertising, never sold, and never shared with third parties. Disconnecting or deleting your account removes this data from our servers.
4. Storage & security
Data is encrypted in transit and at rest, and stored on servers located in Mumbai, India. Access is restricted to authorised personnel and your assigned dietitian on a strict need-to-know basis.
5. Data retention
We keep your personal and health data only for as long as your account is active. When you delete your account — from Profile → Delete account in the app, or at preventians.in/delete-account — your personal data and health records are permanently erased from our systems within 30 days, except where we are legally required to retain limited records (for example, tax or accounting records of a payment). Data read from Google Health Connect (steps, sleep, heart rate, weight) is removed from our servers when you disconnect the source or delete your account. Encrypted backups are rotated and fully purged within 30 days. We do not store your payment card details — these are handled by our payment provider. If you withdraw consent for a specific use, we stop that processing and delete the related data unless the law requires us to keep it.
6. Your rights
You can access, correct, export or delete your personal data at any time from within the app, or by writing to us. You may also withdraw consent for specific processing, subject to any legal retention requirements.
7. Contact
Questions or requests? Reach us at [email protected]. We respond to verified requests within statutory timelines.