Privacy Policy

1. Who we are

NutriMama ("we", "us", "our") is an AI-assisted women's health companion focused on pre-pregnancy, pregnancy, postpartum, and menstrual wellness. This policy explains what personal data we collect, why we collect it, and the rights you have under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. What we collect

• Account data: name, email, phone number, hashed password.
• Health data you provide: pregnancy stage, last menstrual period, cycle logs, symptoms, mood, sleep, nutrition preferences, condition flags such as PCOS.
• Conversations: messages you send to the AI assistant, stored to maintain context and improve safety.
• Device & usage data: browser type, language, and request logs (IP address, browser, page visited), which we keep for 30 days for security and then delete. We also note the days you open the app (only the date, nothing you did or wrote), so we can see whether people come back and improve Keen; it is deleted with your account. We use no advertising or third-party analytics.

3. Why we use your data

• Personalising nutrition, cycle, and wellness guidance.
• Running medical triage (RED / YELLOW / GREEN) and emergency escalations.
• Sending check-in reminders and weekly summaries.
• Processing subscription payments via Razorpay.
• Detecting abuse and keeping the service secure.

4. Legal basis (DPDP Act, 2023)

We process your personal data on the basis of your explicit consent, which you give during sign-up and onboarding. You may withdraw consent at any time from Settings. Withdrawal does not affect lawful processing already carried out.

5. AI processing & PII redaction

Before anything you type is sent to an AI provider — your new message and the earlier messages of the conversation that go with it — we automatically take out Indian identifiers: Aadhaar, PAN, phone numbers, email, ABHA, voter ID and bank account numbers. The same applies to text we send to be indexed for search. The model only receives the health content it needs.

Photos you upload (a lab report, a meal) and voice clips you record cannot be cleaned this way. They are sent as they are, only to read or transcribe them. Avoid photographing ID cards or anything you do not want read.

6. Sharing and third parties

We do not sell your data. We share limited data only with:

• AI providers, only to generate replies, meal plans and report readings: Google Gemini, Groq, Anthropic (Claude, for Pro plans) and Hugging Face; when those are busy, one of our backup providers answers instead: Cerebras, SambaNova, OpenRouter, Mistral, Cloudflare Workers AI, NVIDIA NIM, Cohere or GitHub Models.
• Voice:Microsoft (Keen's voice), Google Cloud (Keen's backup voice, when Microsoft's does not answer), ElevenLabs (the premium voice, on Pro and for a few lines a day in your first 3 days) and Groq Whisper (turning a paid user's voice into text). Only Keen's reply, or your clip together with the names of the foods you log most (so the microphone hears your own dishes right), is sent — never your medicines, readings or family's names.
• Sign-in: Google (if you sign in with Google), Truecaller (if you choose it), and SMS and email services that deliver your one-time code (Resend, Gmail, SMSGate, httpSMS).
• Payments: Razorpay.
• Hosting: Vercel (the app) and Neon (the database).

Some of these providers process data outside India, as the DPDP Act allows.

Family view — only if you share it.You can make a private link for your family (Share with family). Anyone who has the link sees, without signing in: the name you type, how many weeks pregnant you are (or your baby's age), tips on how to help and the danger signs — and, on Pro, your medicine times and next check-up if you tick them. Never your mood, weight, readings, reports or chats. We store only a scrambled form of the link and count how often it is opened. It stops after 90 days unless you renew it, and you can switch it off at any time.

7. Retention

• Your account and health data are kept while your account is active. When you delete your account you are signed out at once; everything is permanently erased 7 days later (until then, signing in again cancels the deletion).
• Payment records (amount, date, plan and Razorpay reference — no health data) are kept after deletion, as Indian tax and accounting law requires.
• To stop the free trial or a referral reward being claimed twice, we keep a one-way fingerprint (a hash) of the phone number or email that claimed it. It cannot be turned back into the number or email.
• A phone number we text a sign-in code to is deleted from that log after 2 days. To keep within our daily email limit we log each email we send with a one-way hash of the address, also deleted after 2 days.
• If you sign up for our blog newsletter we keep only your email address, to send it (about once a week, through Resend). The link at the bottom of every newsletter erases your address from the list at once; we keep only a one-way fingerprint (a hash) of it, so it cannot be signed up again by someone else. Deleting your NutriMama account erases it too, with the rest of your data.
• Guest accounts (no phone or email) are erased after 60 days without use.
• Chat messages older than 90 days may be condensed into short notes in Keen's memory, which you can see, correct or clear on the Memory page.
• Keen learns how you like her to talk — reply length, humour, emojis, the name you ask her to call you, which reply style you enjoy, and on how many days you have talked — from your own words and your 👍/👎. It is kept on your account (no message text), is used only to shape how Keen talks to you (inside her instructions to the same AI providers named above), and you can see it or start it fresh on the Memory page.

8. Your rights

• Access and download a copy of your data.
• Correct inaccurate information.
• Erase your account and associated data.
• Withdraw consent for specific processing.
• Nominate a person to act on your behalf if you die or cannot act yourself (DPDP § 14) — write to us to do this.

9. Children & minors

NutriMama can be used from age 4. For anyone under 18, a parent or guardian must give consent at sign-up by ticking the consent box; we record when and from which device it was given. Without it the account cannot be created.

A parent then approves the account from their own NutriMama account: the child sends them a one-time link, and they approve it signed in with their own verified phone number and a date of birth showing they are 18 or older. We record who approved and when. The parent sees the child's first name and age, never their health information. From 1 May 2027, an under-18 account that no parent has approved is paused until one does; nothing saved in it is lost. The parent can withdraw the approval at any time from Settings → Children you approved; the account then pauses at once. If no parent approves it again within 30 days, the account is deleted like any account its owner deletes (erased 7 days later). While paused, the child can still download their data or delete the account from their dashboard.

A child's account is never shown plans or prices, only opens the screens meant for that age, and is shown no advertising (there is none in NutriMama).

The Keen chat is open at every age, with the same AI-chat consent as everyone. Keen is told the account's age group on every reply and answers for it: simple words for a child, never dieting, weight-loss or medicine doses for anyone under 18, no adult content, and a parent, guardian or doctor for anything serious.

If you are a parent and did not give consent for your child's account, write to kenekrishna11@gmail.com and we will delete it.

10. Contact

For privacy questions or grievances, contact our Data Protection Officer at kenekrishna11@gmail.com.