Privacy Policy

1. Who we are

Ayura is operated by Ayura Health, Inc. If you have privacy questions or want to make a privacy request, contact privacy@ayura.app.

2. Scope of this policy

This policy applies to information we collect directly from you, automatically from your device or browser, and from your use of Ayura features such as quizzes, wellness tracking, meal scans, and face-scan-based wellness reflection tools. It does not apply to third-party services that have their own privacy notices, such as app stores, payment processors, or third-party websites we link to.

3. Data we collect

Account and profile data

• Name, email address, account identifiers, and login information.
• Profile details such as age range, wellness goals, preferences, locale, and language.
• Customer support messages, survey responses, and other information you choose to submit.

Wellness and feature input data

• Dosha quiz responses, routine logs, check-ins, journal-style entries, and wellness notes.
• Meal photos, food scan inputs, and other content you submit for nutritional or dosha-oriented analysis.
• Face scan images, optional selfies, and related outputs or metadata generated to support non-diagnostic wellness reflection features.
• Recommendations, insights, and history generated from your use of Ayura.

Device, app, and usage data

• Device type, operating system, browser or app version, IP-based region, and coarse location derived from IP.
• Crash reports, diagnostics, security logs, and feature usage events.
• Cookie, local storage, and similar technical data as described in our Cookie Policy.

4. Sensitive wellness data and scans

Certain Ayura features involve information that can be considered sensitive under some privacy laws, including wellness notes, routine history, food photos, and face scan inputs. We collect and process this information only to provide the feature you choose to use, improve service reliability and safety, comply with law, and protect users and the platform.

• You choose whether to submit meal photos, wellness notes, or face scans.
• Our face-scan feature is intended for wellness reflection, not identity verification or facial recognition.
• We do not use wellness data, meal scans, or face scans for third-party behavioral advertising or data brokerage.
• If we need your consent for sensitive-data processing under applicable law, we will request it through the product or other appropriate flow.

5. How we use data

• Create and manage your account and authenticate access.
• Provide Ayura tools, quizzes, tracking, meal analysis, face-scan analysis, and personalized wellness content.
• Generate educational AI-assisted recommendations and improve feature quality, safety, and accuracy.
• Maintain service security, prevent fraud or abuse, debug issues, and monitor performance.
• Respond to support requests, account questions, and legal or compliance matters.
• Send transactional notices such as updates to the service, security alerts, and required legal notices.
• Comply with applicable law, enforce our terms, and protect rights, safety, and property.

6. Cookies and analytics

We use essential technologies to run the service and may use limited analytics or measurement tools to understand reliability, engagement, and product performance. For more detail on cookies, similar technologies, and choices, see our Cookie Policy.

7. Legal bases (Europe / EEA / UK)

Where GDPR-style rules apply, we rely on one or more of the following legal bases:

• Performance of a contract to provide the service you request.
• Legitimate interests, such as service security, abuse prevention, support, and product improvement.
• Consent for optional or sensitive processing where consent is required.
• Compliance with legal obligations.

8. How we share data

We may share personal data with the following categories of recipients:

• Cloud hosting, storage, infrastructure, and security providers.
• Analytics, diagnostics, and error-monitoring providers.
• Authentication, communications, and customer-support providers.
• Service providers that help us process user-submitted content to deliver Ayura features.
• Payment or subscription providers when relevant to billing and plan management.
• Professional advisors, auditors, insurers, or corporate transaction counterparties when reasonably necessary.
• Courts, regulators, law enforcement, or other parties when required by law or to protect rights and safety.

We do not sell personal data. We also do not share personal data for cross-context behavioral advertising.

9. International transfers

Ayura may process personal data in countries other than the one where you live. When cross-border transfer rules apply, we use appropriate safeguards such as contractual commitments, access controls, and organizational protections designed to protect transferred data.

10. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including service delivery, account administration, legal compliance, dispute resolution, fraud prevention, and security.

• Account and profile data are generally kept while your account remains active and for a limited period afterward.
• Wellness logs, quiz responses, and other user content are generally retained until you delete them or request account deletion, unless law or security needs require longer retention.
• Uploaded meal or face-scan content may be stored for feature operation, troubleshooting, and user history, then deleted or de-identified when no longer needed.
• Security logs, diagnostics, and support records may be kept for limited periods appropriate to security, support, and legal needs.

When we no longer need data, we delete it, de-identify it, or keep it in a form that no longer reasonably identifies you, unless applicable law requires otherwise.

11. Your choices and privacy rights

You can ask us to access, correct, delete, or export certain personal data, or to object to or restrict certain processing, where applicable law provides those rights. You can also withdraw consent where we rely on consent, although that does not affect processing already completed before withdrawal.

To make a request, email privacy@ayura.app. Please include enough information for us to understand your request and verify your identity when required. We may deny or limit requests where permitted by law, such as when we need certain information for security, legal compliance, or fraud prevention.

India

Users in India may have rights to access, correct, update, and erase certain personal data, subject to applicable law and operational requirements.

Europe / EEA / UK

You may have rights to access, rectify, erase, restrict, object, and receive portability of your data, and to lodge a complaint with your local supervisory authority.

USA

Depending on your state, you may have rights to know, access, correct, delete, and obtain information about our data practices. If your state provides appeal rights after a request decision, you may ask us how to submit an appeal.

12. Marketing and notifications

If we send marketing emails, you can unsubscribe using the instructions in the message. Service-related notifications, account notices, and legally required communications may still be sent when necessary.

13. Children's privacy

Ayura is intended for adults and is not directed to children under the age required by applicable law to use the service independently. If we learn that we collected personal data from a child without appropriate authorization, we will take reasonable steps to delete it.

14. Security

We use reasonable technical, administrative, and organizational safeguards designed to protect personal data, including access controls, monitoring, and security review practices. No system is completely secure, and you are responsible for protecting your account credentials and device access.

15. HIPAA and medical-use notice

Ayura is generally offered as a consumer wellness service and not as a hospital, clinic, insurer, or emergency service. In ordinary consumer use, information shared with Ayura may not be protected health information under HIPAA. If Ayura later supports regulated healthcare workflows, separate terms or notices may apply.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the "Last updated" date. If we make material changes, we may provide additional notice through the service or by other appropriate means.

17. Contact us

For privacy questions, rights requests, or concerns about this policy, contact privacy@ayura.app.