Privacy policy

About this policy

zhealth is a wellness and coaching service operated by Aparajita Tiwary in India. This policy explains what we collect, why we use it, when it is shared, and how you can access, withdraw consent, export, or delete your information.

zhealth is not a medical device and does not diagnose, treat, cure, or prevent disease. zhealth is intended for adults aged 18 and over.

Information we handle

We handle the following kinds of information, depending on the features you use.

• Account and profile: name, email, sign-in identifiers (if you sign in with Google, the name and email address Google shares with us), preferences, support messages, and family invitations you choose to create.
• Wellness entries: food, weight, water, sleep, exercise, cycle, glucose, and other values that you enter or ask the app to import.
• Assistant and coaching messages: what you type to the Ani assistant or the diet-chart coach (or say, where voice input is offered), and the replies. Replies are generated by AI.
• Photos and documents you add: meal photos, lab reports and skin photos, only when you choose to add them.
• Medicines: the medicines, schedules and dose records you enter, and the reminders you set.
• Connected sources: Health Connect records, Bluetooth/wearable readings, workout sessions, and device metadata needed to sync them.
• Camera measurements: temporary camera frames and derived pulse, pose, or exercise values when you start a camera feature and, for pulse and HRV captures, the recording of the signal behind the reading. Camera capture is visible and user-started; it is not silently recorded in the background. Different features use different processing paths described below.
• Diagnostics: security logs, sync status, error information, and limited product telemetry needed to keep the service reliable.

Why we use it

We use this information to:

• provide the wellness dashboard and calculate the summaries you ask for;
• sync connected devices and deliver workouts and coaching;
• respond to support requests, protect accounts and improve reliability.

Health and sensitive records are used only for the purpose shown in the consent screen. We do not sell health data or use it for targeted advertising.

Health Connect and device permissions

Health Connect access is optional. Before Android shows its permission sheet, zhealth displays an itemised purpose notice and records your affirmative consent. The operating system permission and our purpose consent are both required. You may revoke either one; new imports then stop. Availability depends on the records and devices supplied by your phone or connected provider.

Health Connect data types and limited use

When you allow it, zhealth can read these Health Connect types: steps, step cadence, distance, elevation, floors, active and total calories, basal metabolic rate, exercise sessions, heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, blood pressure, blood glucose, body temperature, basal body temperature, skin temperature, sleep, weight, height, body fat, lean body mass, hydration, VO2 max and the cycle records (menstruation, ovulation test, cervical mucus, intermenstrual bleeding), plus your earlier history so trends are not empty on day one. It can write back heart rate, heart rate variability, respiratory rate, hydration and nutrition that you log in zhealth. Each type is used only for the feature that shows it. The use of information received from Health Connect adheres to the Google Play User Data Policy, including its Limited Use requirements: we use it only to provide and improve the features you see, we do not sell it, we do not use it for advertising, and people do not read it except with your consent, for security, or where the law requires.

On-device libraries and sign-in

Some features rely on libraries that run inside the app. Google ML Kit reads text and barcodes on your device. Google MediaPipe finds the face and body outline in camera frames on your device. A pose-coaching library measures exercise form and joint angles on your device. A bundled heart-rate-variability routine turns a pulse signal into HRV values on your device. The Polar Bluetooth library reads heart rate and beat intervals from a Polar strap or armband you pair. zhealth does not pass your camera frames or sensor signals to other parties through these libraries. Google Sign-In, if you choose it, shares your name and email address with us. If you turn on the optional on-device assistant, the app downloads a language-model file to your phone from Hugging Face (huggingface.co). Only the file is fetched; your messages are not sent to Hugging Face by this download.

Overnight recordings

If you turn on overnight monitoring, sensor and sound-level data from the night are stored in a private storage area tied to your account so the morning summary can be built. They are not part of automatic account deletion yet; the deletion page explains how to ask for them to be removed.

Camera processing and optional third-party services

Processing on your device

Camera features are always started by you, show a live preview, and require camera permission. zhealth's own face-pulse, fingertip, and exercise/pose paths process the camera frames on your device. A derived reading, quality value, and timestamp may be kept when the feature says that it will save a result. The pulse and HRV screens also keep a recording of the signal behind the reading, as the next paragraph explains.

Pulse and HRV recordings

When you finish a fingertip pulse or HRV capture, or a face scan, while signed in and while health-data processing is switched on for your account, the app uploads that capture's recording to cloud object storage, filed under your account identifier. The recording is the camera signal as a series of numbers (one brightness value per frame, not the pictures), the phone's motion-sensor readings from the same minute, and, if a chest strap or another connected sensor was in use, that sensor's raw waveform (for a chest strap, its electrocardiogram). A small label file goes with it, naming the parts of the capture, the device model, the app version, and any reference reading you chose to add. If you use Record or upload a clip and choose Upload, the whole video clip you recorded or picked is stored the same way. We keep these recordings to check and improve how accurately zhealth measures pulse and HRV, for example by re-running an improved method on captures already taken and by comparing the camera signal with a connected strap. We do not use them for advertising. If an upload fails, a copy stays on your phone and is tried again later.

Deleting recordings

Deleting your account, or switching off health-data processing, removes these recordings from storage as part of that same request, together with the database records that point to them. If storage cannot be reached at that moment, or a removal is refused, your account is still deleted, you are told how many recording files are still waiting, and we remove the remaining files by hand within a month and confirm by email.

The website camera page

The zhealth website has its own camera pulse page (Camera PPG, with Face and Finger modes). It runs entirely in your browser: after you press Start visible camera and allow camera access, it reads the camera picture on your device to estimate pulse and heart-rate variability, including a timed 30-second measurement. It does not use the microphone, does not record or save pictures or video, and does not upload the camera feed, the signal or the result. Closing or leaving the page discards them.

Optional comparison providers

Some optional comparison features send a camera clip or stream to a named provider. A separate in-app consent explains the recipient and purpose before anything is sent:

• VitalLens by Rouast Labs (private comparison build only): the user-started, approximately 30-second face scan forwards face-camera frames through zhealth's server proxy to Rouast Labs in Australia. This route is deferred and is not exposed by the current Play release. If enabled in a separately reviewed build, Rouast processes the frames to return heart rate, breathing rate, and (where the plan supports it) HRV. zhealth does not intentionally retain the raw face video; the comparison result and timestamp can be deleted from the zhealth account. The vendor's own processing and retention terms apply to the frames while they are with Rouast.
• WaveLight Health (private comparison build only): the user-started fingertip clip is uploaded to WaveLight's supplied upload endpoint and analysed there for pulse, blood oxygen, and blood-pressure estimates. This route is deferred and is not exposed by the current Play release. If enabled in a separately reviewed build, the raw clip is not intentionally stored in zhealth and the beta result is kept out of the zhealth health record and scores. WaveLight controls processing and retention on its service; its current terms are shown or linked in the feature flow. Nothing is sent unless the WaveLight consent switch is enabled.
• QuickPose and the zhealth pose engine: pose landmarks, rep counting, range-of-motion and form feedback run on the device in the workout flow. Raw exercise frames do not leave the device through this path.

Where accepted readings are stored

Accepted readings and account data are transmitted over encrypted connections to our application services, including Vercel-hosted APIs and Supabase storage/database services. We do not sell health or camera data and do not grant providers permission to advertise to you using it. The current Play release keeps the two named comparison providers out of its reachable feature surface; the descriptions above remain so a private test build is not mistaken for an on-device-only flow.

AI processing

The Ani assistant, the diet-chart coach, meal-photo recognition, lab-report reading and skin analysis use AI models run by other companies. When you use one, zhealth sends what you provided (your message, photo or document) to the provider that handles the request.

What is sent

• Your input: the message, photo or document you gave to the feature.
• Context for the assistant and the coach: to answer about you, they also receive your profile (age, sex, height, weight and goals), your recent readings, today's food log, and any conditions, medications and allergies you entered.
• Privacy filters: names, phone numbers, email addresses and ID numbers in a typed message, and in lab-report text, are replaced before it is sent, where our filters recognise them; photos are sent as they are.

Who processes it

The providers are Google (Gemini), OpenAI, Groq and Vercel's AI gateway, which passes a request on to one of them. They process it for us to produce the reply; we do not sell it and do not allow them to use it to advertise to you.

Accuracy and reporting

Replies are generated by AI, can be wrong and are not medical advice. In the app, each reply has a Report button.

Medicines, lab reports and skin photos

Medicines keeps the medicines you add, their schedule and the doses you mark taken or skipped, and sets reminders on your phone. If you tap Buy for a refill, the medicine's name (and its strength only if you choose to send it) is passed to the pharmacy partner you open; nothing is sent otherwise. If you share your records with a dietician, they can see only what you choose to share, and you can end the sharing at any time. Lab reports you upload are read with the AI document reader described above. Skin analysis is for adults aged 18 and over and reads a photo you take or upload with the AI image reader described above.

Sharing

We share information only with service providers that operate the product for us, when you direct an export or care-team sharing action, when required to protect the service or comply with law, or when a provider is clearly named in an optional feature consent. The named camera providers are Rouast Labs/VitalLens and WaveLight Health as described above; Vercel, Supabase and our cloud object-storage provider host zhealth services, and the AI providers named under AI processing handle the requests described there. We do not sell personal, Health Connect, or camera data.

Retention and deletion

What we keep and for how long

We retain information only while it is needed for the selected wellness service, account security, legal obligations, or a user-requested support record. You can export your data, withdraw processing consent, delete Health Connect imports, or permanently delete your account from the privacy centre. Account deletion removes identifiable operational data, except that stored pulse and HRV recordings follow the deletion note under Camera processing above; legally required records and genuinely anonymous aggregate statistics may remain where permitted by law. Third-party Health Connect records owned by another app remain under that app's control.

How to delete your account

Use the public account deletion page or, after signing in, open Privacy centre. The deletion action requires an authenticated session and a typed confirmation so another person cannot erase your account by knowing only your email address.

Security and your choices

How we protect your data

We use authentication, access controls, encryption in transit, row-level database access, and audit records. No online service is risk-free.

Your choices

You may:

• decline optional permissions or disconnect a device;
• revoke consent at any time;
• request a copy of your data;
• contact us about an error or a request.

Contact and complaints

Grievance contact

Grievance contact under the Digital Personal Data Protection Act, 2023: Aparajita Tiwary, reachable at the address below. We acknowledge a request within seven days and aim to resolve it within a month.

How to reach us

For privacy, deletion, or DPDP-related questions, contact aparajita.tiwary57@gmail.com. Include the email used for your zhealth account and the request you want us to process. We will verify account ownership before disclosing or deleting personal information.

If you are not satisfied

If you are not satisfied with our response, you can complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

Changes to this policy

This policy is written for the current zhealth wellness build. We will update the version date when a material data use, provider, or permission changes.