Privacy Policy
AIHealthLab ("we", "us") operates the AIHealthLab Android app (package com.aihealthlab.app, published on Google Play by the developer "AIHealthLab") and the website app.helpmebro.in. We are the Data Fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 (DPDP Act). This policy explains what we collect, why, who we share it with, how long we keep it and the choices you have. It applies to the app and the website.
Who We Are
Data Fiduciary: Anurag Singh, trading as AIHealthLab, Noida, Uttar Pradesh 201306, India. Email: privacy@helpmebro.in.
In Short
- We collect only what the app needs to work. We don't sell your data and we don't use analytics trackers.
- The free version shows a small number of ads from Google AdMob. You can remove ads permanently with a one-time purchase through Google Play.
- Your health logs (weight, measurements, water, fasting, workouts, journal, challenge progress) are visible only to you. Our admin team cannot view them, and they are never used for advertising.
- You can delete your account and all its data from inside the app at any time.
What We Collect and Why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and name (from Google sign-in or what you enter at email sign-up) | Create and secure your account, sign you in | Consent / contract |
| Profile: birth year, height, target weight, activity level, diet preference, fitness experience, main goal | Personalise targets and content | Consent |
| Health logs you enter: weight, body measurements, water, fasting sessions, workouts, journal (mood, energy, sleep, stress, notes), challenge progress, achievements | Show your progress, charts and streaks; sync between your devices | Explicit consent (you choose to enter it) |
| App settings (theme, units, water goal, fasting preferences) | Keep your preferences across devices | Contract |
| Technical data (sign-in timestamps, last activity date) | Security, preventing abuse, aggregate usage counts | Legitimate use |
| Purchase record (product, Google Play order ID and purchase token, date) | Remove ads on your account and restore your purchase on new devices | Contract |
| Advertising data collected by Google AdMob (advertising ID, device and app information, approximate location from IP address, ad interactions) | Show ads in the free version, measure ads and prevent ad fraud. Collected by Google, not by us | Consent where required / legitimate use |
| Emails we send (address, template, delivery status) | Deliver sign-in codes and the welcome email, and troubleshoot delivery | Contract |
We do not collect your precise location, contacts, SMS, call logs, photos, files, microphone or camera. We don't read data from Health Connect or other apps. Fasting safety screening answers are never stored. We don't collect gender.
How We Treat Health Data
- Health and fitness data you enter is used only to provide the app's features to you (charts, streaks, reminders, sync).
- It is never sold, never shared with advertisers or ad networks, never used to target or personalise ads, and never used for credit, insurance or employment decisions.
- Staff cannot read it. Database rules allow each account to read only its own records.
- AIHealthLab is a general wellness app. It is not a medical device and does not diagnose or treat any condition.
Ads and Purchases
The free version shows a limited number of ads served by Google AdMob: small banners at the bottom of some screens and, occasionally, a full-screen ad when you finish reading an article. Ads never appear during sign-in, fasting timers, safety screens or the journal, and only family-friendly (PG) ads are requested. Google may use cookies and your device's advertising ID to show and measure ads. Where the law requires it (for example in the EEA and UK) we ask for your consent first. You can change your choice at any time in Profile → Remove Ads → Ad Privacy Choices, reset or delete your advertising ID in Android Settings → Google → Ads, and read how Google uses data at policies.google.com/technologies/partner-sites.
"Remove Ads" is a one-time purchase processed entirely by Google Play. We never see your card, UPI or bank details. We store only the purchase record listed above so your account stays ad-free.
Emails We Send
We send sign-up and sign-in codes and one welcome email when you create your account. We don't send marketing emails.
Device Permissions
- Notifications (optional, asked at runtime): reminders you set for water, journal and fasting.
- Internet and network state: sign-in, sync, loading ads and downloading articles and PDF guides.
- Run at start-up / background work: re-schedule your reminders after a restart and sync in the background.
- Google Play Billing: buy and restore the Remove Ads purchase.
- Advertising ID (
AD_ID, added by Google Mobile Ads): lets Google AdMob show and measure ads in the free version. You can reset or delete it in Android Settings → Google → Ads.
Where Your Data Is Stored
Your data is stored on your phone (in an app-private database, with your sign-in session encrypted using the Android Keystore) and in our cloud database hosted by Supabase. Access is protected by row-level security so each account can only read its own records. Article images and PDF guides are hosted on Cloudflare R2 and contain no personal data. All connections use HTTPS.
Our service providers may store or process data outside India (for example in Singapore, the EU or the USA). Where they do, we rely on their contractual and security commitments, and transfers follow the DPDP Act and any restrictions notified under it.
Third-Party Services
| Service | What it does | Their policy |
|---|---|---|
| Supabase | Database, sign-in and sign-in code emails | supabase.com/privacy |
| Google Sign-In (Credential Manager) | Optional sign-in with your Google account | policies.google.com/privacy |
| Google Play Billing | Processes the Remove Ads purchase | |
| Google AdMob and User Messaging Platform | Ads in the free version and consent choices | |
| Cloudflare R2 | Hosts article photos and PDF guides (no personal data) | cloudflare.com/privacypolicy |
| Our email (SMTP) provider | Sends the welcome email | Named on request |
Who We Share It With
We share data only with service providers that process it for us under contract: Supabase (database and authentication), Google (Google sign-in if you choose it, Google Play for purchases and Google AdMob for ads in the free version), our email provider (to send sign-in codes and the welcome email) and Cloudflare (content delivery). Your health logs are never shared with Google AdMob, advertisers, data brokers or insurers. We may disclose data if required by law.
How Long We Keep It
| Data | Kept for |
|---|---|
| Account, profile, settings and health logs | While your account is active. Deleted immediately when you delete your account. Entries you delete in the app are removed from sync and erased when your account is deleted |
| Purchase record (ad-free entitlement) | While your account is active; deleted with your account. Google keeps its own order records under Google's policy |
| Email delivery records | Up to 30 days |
| Admin audit log (staff actions, no health data) | Up to 1 year, for security |
| Database backups | Overwritten within 30 days |
| Data on your phone | Until you sign out, delete your account or uninstall the app |
Your Rights
- Access and correct your data in the app at any time.
- Delete your account and data: Profile → Delete account, or see Delete Your Account.
- Withdraw consent by deleting entries or your account. Change ad consent at any time in Profile → Remove Ads → Ad Privacy Choices.
- Opt out of personalised ads in Android Settings → Google → Ads, or remove ads completely with the Remove Ads purchase.
- Nominate another person to exercise your rights in case of death or incapacity (DPDP Act) by writing to us.
- Complain to our Grievance Officer, and if unresolved, to the Data Protection Board of India.
Children
AIHealthLab is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18, and the app is not part of Google Play's Families programme. Fasting features are blocked for anyone who tells us they are under 18. If you believe a child has created an account, email us and we will delete it.
This Website
app.helpmebro.in is a static website. It sets no cookies and uses no analytics, ads or third-party scripts. Our hosting provider keeps standard server logs (IP address, browser, pages requested) for security for a short period.
Security
We use encryption in transit, encrypted session storage, least-privilege access, audit logs for admin actions and row-level security. No system is perfectly secure; please keep your device locked and your email account protected. If we discover a breach that affects you, we will notify you and the Data Protection Board of India as the law requires.
Changes
We'll post updates here with a new effective date and, for significant changes, notify you in the app before they apply.
Contact and Grievance / Compliance Officer
Grievance and Compliance Officer: Anurag Singh, AIHealthLab, Noida, Uttar Pradesh 201306, India.
Email: privacy@helpmebro.in. We acknowledge requests within 72 hours and respond within 30 days.