🔒 Privacy Policy

Last Updated: April 21, 2026 · DPDP Act 2023 Compliant

VitaPoshan Technologies Pvt Ltd ("we", "us", "our") respects your privacy and complies with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. Information We Collect

Personal Data:

Email address (for login)
Name (optional, user-provided)
Phone number (if provided for WhatsApp reminders)
Payment information (processed by Razorpay, not stored by us)

Health-Related Data (with your consent):

Food logs and calorie tracking entries
Height, weight, age (for BMI and tiffin plans)
Dietary preferences (veg/non-veg/Jain)
AGNI chat history
Children's growth data (ONLY with verified parental consent)

Technical Data:

IP address, device type, browser
Usage analytics (anonymized)
Cookies and local storage

2. Children's Data (Special Protection)

Under DPDP Act 2023, Section 9: We require verifiable parental consent before processing any personal data of children under 18 years of age.

We collect children's data ONLY for the Kid Growth Tracker feature
Parent/guardian must check a consent box before data is processed
We do NOT use children's data for advertising or behavioral monitoring
Parents can request deletion of child data at any time
Children's data is stored securely and isolated from marketing systems

3. How We Use Your Data

Providing app features (calorie tracking, AI tiffin plans, AGNI chat)
Personalizing your nutrition experience
Processing payments and subscriptions
Sending important service communications
Improving our services (anonymized analytics only)
Complying with legal obligations

4. Data Sharing

We DO NOT sell your personal data. We share data only with:

Supabase (database/auth provider) — securely stores your data
Razorpay (payments) — processes transactions
Anthropic Claude (AI provider) — processes your queries (anonymized)
Legal authorities — only when legally required

5. Your Rights (Under DPDP Act)

You have the right to:

Access your data (request a copy)
Correct inaccurate data
Delete your data (right to erasure)
Withdraw consent at any time
Nominate another individual for data access (in case of death/incapacity)
Grievance redressal via our Grievance Officer

To exercise these rights, email: privacy@vitaposhanai.com

6. Data Security

All data encrypted in transit (HTTPS/TLS 1.3)
Database encryption at rest (Supabase Row-Level Security)
Regular security audits
Access controls and authentication
Data breach notification per DPDP Act requirements

7. Data Retention

Active accounts: data retained while subscription is active
Cancelled accounts: data deleted within 90 days (unless legally required)
Children's data: deleted upon parent request or child turning 18 (with re-consent)
Payment records: retained for 7 years (tax compliance)

8. Cookies

We use essential cookies for login/authentication and optional analytics cookies. You can disable cookies in your browser settings (app functionality may be limited).

9. International Data Transfer

Data is primarily stored in India (Supabase Mumbai region). Some AI processing may occur via Anthropic's servers (anonymized queries only).

10. Updates to This Policy

We may update this policy. Material changes will be notified via email and in-app notifications 30 days in advance.

11. Grievance Officer

Name: Dr. Anurag Singh

Email: grievance@vitaposhanai.com

Phone: +91 9503435366

Response Time: Within 30 days (per IT Rules 2021 & DPDP Act 2023)