Satva

Privacy Policy Satva (सत्व) — AI-Powered Indian Nutrition Coach Effective Date: April 16, 2026 | Last Updated: April 16, 2026

Satva (“we,” “our,” or “the App”) is operated by Satva Technologies. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the Satva mobile application.

By downloading, installing, or using Satva, you agree to this Privacy Policy. If you do not agree, please do not use the App.

1. Information We Collect 1.1 Information You Provide Phone Number — Used for account creation and authentication via Firebase Phone Authentication (OTP verification). Health Profile — Age, gender, height, weight, activity level, health goal (lose weight/maintain/build muscle), and health conditions (diabetes, cholesterol, hypertension, PCOS, fatty liver). You provide this voluntarily during onboarding. Kitchen Inventory — Ingredients you select as available in your kitchen. Meal Logs — Dishes you log, portion sizes, meal times, and whether you applied Satva’s AI recommendations. Cook Profile — If you use Cook Owner mode: your cook’s name, WhatsApp number, and preferred language. 1.2 Information Collected Automatically Device Information — Device model, operating system version, and app version for crash reporting and compatibility. Usage Data — Which features you use, frequency of use, and interaction patterns (anonymized) via Firebase Analytics. Camera Images — When you use the Snap feature, photos are captured temporarily for AI food detection. Images are processed and NOT stored permanently on our servers. 1.3 Information from Third Parties Firebase Authentication — Phone number verification status. PayU Payment Gateway — Transaction ID, payment status, and subscription plan. We do NOT receive or store your bank account details, UPI PIN, card numbers, or CVV.
2. How We Use Your Information Personalization — Your health profile, conditions, and goals are used to generate AI-powered nutrition recommendations specific to your body and dietary needs. AI Food Detection — Camera images are sent to Google’s Gemini AI API for food identification. Images are processed in real-time and are NOT stored by us after processing. Ingredient Analysis — Photos of grocery packaging are sent to Google’s Gemini AI API to read ingredient lists and nutrition labels. Meal Tracking — Meal logs are stored locally on your device and used to compute your Satva Score, daily summaries, and health trend data. Kitchen Management — Pantry inventory is stored locally and updated when you log meals. Subscription Management — Your phone number and subscription status are stored in Firebase Firestore to manage premium access across device reinstalls. Cook Communication — If you use Cook Owner mode, meal plans are formatted for WhatsApp sharing. We do NOT send messages on your behalf; you initiate the send. Analytics — Anonymized usage data helps us improve the App’s features and performance.
3. Data Storage and Security Local-First Architecture: The majority of your health data (profile, meal logs, daily summaries, pantry inventory, Satva Score) is stored locally on your device in an encrypted database. This data is NOT uploaded to our servers unless explicitly required for a feature (e.g., subscription verification). 3.1 Where Data is Stored On Your Device — Health profile, meal logs, pantry inventory, daily summaries, Satva Score, meal patterns, weekly plans. Firebase Firestore — Subscription status (phone number, plan type, expiry date, transaction ID). Pending ingredient/dish data contributed by users. Firebase Authentication — Phone number and authentication tokens. Google Gemini AI — Food images and ingredient photos are sent for processing. Google’s API Terms of Service govern their data handling. We do NOT control data retention by Google’s AI services. 3.2 Security Measures All network communication uses HTTPS/TLS encryption. PayU payment hash is generated server-side; payment credentials (salt) are never stored on your device. Firebase Firestore access is restricted by security rules — users can only read their own subscription data. Release builds strip all debug logs that might contain sensitive information. Device backups are disabled to prevent unauthorized data extraction.
4. Data Sharing We do NOT sell, rent, or trade your personal information. We share data only in the following limited circumstances:

Google Gemini AI — Food images and ingredient photos are processed by Google’s Generative AI API for food detection and ingredient analysis. Your health profile (conditions, goals, targets) is included in AI prompts to personalize recommendations. Google’s API Terms of Service state that API data is not used to train their models. Firebase (Google) — Authentication data and subscription records are stored on Google’s Firebase infrastructure, governed by Firebase Terms of Service. PayU — Payment transactions are processed by PayU India. We share your phone number, name, and email with PayU for transaction processing only. PayU’s Privacy Policy governs their handling of payment data. Legal Requirements — We may disclose information if required by law, court order, or government regulation applicable in India.

1. Your Rights Access — All your health data is visible within the App at all times. Deletion — You can delete all local data by clearing the App’s data or uninstalling the App. To request deletion of your Firestore subscription data, contact us at the email below. Correction — You can update your health profile, goals, conditions, and kitchen inventory at any time within the App. Withdraw Consent — You can stop using any feature at any time. Revoking camera permission disables the Snap feature. Uninstalling the App removes all local data. Data Portability — Contact us to request an export of your data in a machine-readable format.

2. Children’s Privacy Satva is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

3. Data Retention Local Data — Retained on your device until you clear data or uninstall the App. Subscription Data — Retained in Firestore for the duration of your subscription plus 90 days after expiry, then automatically deleted. Analytics Data — Anonymized analytics are retained for up to 14 months per Google Analytics data retention policies. Camera Images — NOT retained. Processed in real-time and discarded after AI analysis.
4. Third-Party Services The App uses the following third-party services, each with their own privacy policies:

Google Firebase (Authentication, Firestore, Analytics, Cloud Functions) Google Gemini AI (Food detection, nutrition analysis) PayU India (Payment processing)

1. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of material changes by displaying a notice within the App. Continued use after changes constitutes acceptance.

2. Contact Us For questions, concerns, data deletion requests, or complaints regarding this Privacy Policy:

Email: privacy@satva.app Address: Satva Technologies, Bangalore, Karnataka, India If you believe your privacy rights have been violated, you may file a complaint with the appropriate data protection authority in India.