Privacy Policy

Effective date: 15 June 2026 · Last updated: 7 July 2026

Svas (“we”, “us”) provides a regional Indian nutrition and meal-planning app. This policy explains what personal data we collect, why, and your rights. We are the data fiduciary for your information and handle it in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).

1. Information we collect

• Account & identity: email address and/or phone number (for sign-in via one-time password), and Google account basics if you sign in with Google.
• Profile & preferences: age, biological sex, height, weight, activity level, goal, dietary preferences, regional cuisine choices, and any health conditions or allergies you choose to enter. Some of these are health-adjacent and we treat them with care.
• Usage of the app: the meal plans generated for you and the meals you log as eaten/skipped.
• SvasAI conversations: if you use SvasAI, the messages you send it and, for Smart Scan, the food photos you choose to upload. These are used to generate a reply and are processed by our AI providers (see “Third-party processors”).
• Payments: if you subscribe, your payment is processed by Razorpay. We do not receive or store your card/UPI/bank details, we store only your subscription status and plan.
• Diagnostics & analytics: aggregated product-usage events and crash/error reports to improve the app (see “Third parties”).

2. How we use your data

• To generate personalized, region-matched meal plans and nutrition estimates.
• To save your profile and meal logs so they sync across your devices.
• To operate subscriptions and unlock premium features.
• To run SvasAI: your message, and any photo you scan, is sent to our AI providers so it can understand you and reply, grounded in your plan and our food data. We use these only to give you a reply, never for advertising.
• To diagnose problems, prevent abuse, and improve the product.

We do not sell your personal data. We do not use your health-related inputs for advertising.

3. Third-party processors

• Supabase: secure database, authentication, and file storage (data encrypted at rest and in transit).
• Razorpay: payment processing (PCI-DSS compliant).
• Google: optional Google sign-in.
• Sarvam AI, Google (Gemini) and OpenAI: the AI providers that power SvasAI. When you use SvasAI, your message text and, for Smart Scan, the photo you upload is sent to one or more of these providers to generate a reply. We don’t send them your name, email, or payment details, and we don’t use your conversations or photos for advertising.
• PostHog: product analytics (usage events).
• Sentry: crash/error monitoring.

4. Data retention

We keep your data while your account is active. You can ask us to delete it (see your rights). Backups are retained for a limited period and then purged.

SvasAI conversation history is kept with your account so you can refer back to it, and it is deleted when you delete your account. Photos you scan with Smart Scan are used only to identify the food; we do not use them for any other purpose.

5. Your rights (DPDP Act)

• Access a summary of the personal data we hold about you.
• Correct or update inaccurate data.
• Request erasure of your data and account.
• Withdraw consent (this may limit app functionality).
• Raise a grievance with our contact below.

To exercise any right, email contact@svas.life.

6. Children

Svas is not directed to children under 18. We do not knowingly collect their data.

7. Security

Data is encrypted in transit (TLS) and at rest. Access to your records is restricted to your own account via row-level security. No method is 100% secure, but we work to protect your information.

8. Changes

We may update this policy; material changes will be notified in-app or by email.

9. Contact

Questions or data requests: contact@svas.life.