1. Who We Are

VitaBurn AI Technologies ("Company", "we", "us") operates the following digital health applications:

• VitaBurnAI — vitaburnai.com — AI-powered fitness and disease risk tracking
• VitaPoshan AI — vitaposhanai.com — Indian food calorie tracking
• VitaPoshan — vitaposhan.com — Family nutrition tracking

Registered address: Pune, Maharashtra, India. Medical Advisor: Dr. Anurag Singh.

2. Data We Collect

2.1 Personal Information

• Full name, email address, phone number
• Profile photo (if provided)
• Google account information (if Google login used)

2.2 Health & Fitness Data (Sensitive)

• Age, gender, weight, height, BMI
• Daily calorie intake and food logs
• Physical activity and exercise logs
• Blood pressure, blood glucose, sleep data
• Disease risk scores (diabetes, hypertension, cardiovascular, fatty liver)
• Prakriti (Ayurvedic body type)
• Family medical history

2.3 Technical Data

• Device type, browser, operating system
• IP address, location (country level only)
• App usage patterns and session data

2.4 Payment Data

Payment processing is handled by Razorpay. We do not store credit card or bank details. We only store payment confirmation IDs.

3. How We Use Your Data

Purpose	Legal Basis
Provide personalised health tracking and AI coaching	Contract / Consent
Calculate disease risk scores and metabolic age	Explicit Health Consent
Process payments and manage subscriptions	Contract
Send health reminders and notifications	Consent
Improve AI models and app features	Legitimate Interest
Comply with legal obligations	Legal Obligation

4. Data Storage & Security

Your data is stored on Supabase (PostgreSQL database) with servers located in Singapore/US. We implement:

• End-to-end encryption for all data transmission (HTTPS/TLS)
• Row-level security (RLS) — you can only access your own data
• Encrypted database storage
• Regular security audits
• Profile photos stored locally on your device
• Breach notification: In the event of a data breach affecting your personal data, we will notify you and the Data Protection Board of India within 72 hours, as required by the DPDP Act 2023

5. Data Sharing

We share your data ONLY with these trusted partners:

Partner	Purpose	Location
Supabase Inc.	Database & authentication	USA/Singapore
Razorpay Pvt. Ltd.	Payment processing	India
Google LLC	Login authentication (if used)	USA
MSG91	OTP SMS delivery	India

We never sell your personal or health data to third parties. We do not share data with advertisers.

6. Your Rights

Under the Digital Personal Data Protection Act 2023 (DPDP Act) and IT Act (SPDI Rules), you have the right to:

• Access: Request a copy of all data we hold about you
• Correction: Update inaccurate personal data
• Deletion: Request deletion of your account and all data
• Portability: Export your health data in CSV format
• Withdraw consent: Stop processing at any time
• Grievance redressal: Lodge complaint with our Grievance Officer

7. Health Data Disclaimer

8. Children's Privacy

Our services are intended for users aged 18 and above. VitaPoshan's child growth features require parent/guardian consent. We do not knowingly collect data from children under 13 without parental consent.

9. Cookies & Tracking

We use essential cookies and localStorage for:

• Maintaining login sessions
• Saving app preferences (theme, onboarding status)
• Profile photo storage

We do not use advertising cookies or cross-site tracking.

10. Data Retention

• Active account data: Retained while account is active
• Deleted account data: Removed within 7 working days (DPDP Act)
• Payment records: Retained for 7 years (legal requirement)
• Anonymous analytics: Retained indefinitely

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or in-app notification. Continued use after changes constitutes acceptance.

12. Grievance Officer