Privacy Policy
Last updated: July 27, 2026
Swasth ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.
1. Information We Collect
1.1 Personal Information (account creation)
- Name and email address
- Profile photo (optional)
1.2 Health Information (entered by you)
- Menstrual cycle data (period dates, length, flow, symptoms)
- Pregnancy information (due date, week-by-week progress)
- Baby profiles, growth measurements, and vaccination records
- Medication and dosage records
- Mood entries and journal notes
- Sleep data (bedtime, wake time, quality, sleep score)
- BMI and body measurements
- Health assessment questionnaire responses
1.3 Device Information
- Device type and operating system version
- Push notification token (for reminders)
- Anonymous device fingerprint (for analytics only)
2. How We Use Your Information
- Core functionality: Cycle prediction, pregnancy tracking, medication reminders, and health insights
- Sync: Synchronize data across devices via encrypted cloud storage
- Notifications: Send health reminders (vitamin D, hydration, exercise, sleep)
- Improvement: Understand usage patterns and improve the app
3. How We Store Your Data
Your data is stored in two ways:
- Local storage: Encrypted SQLite database on your device. This data never leaves your device unless you enable cloud sync.
- Cloud storage: If you create an account and enable sync, your data is stored in Supabase (PostgreSQL) with row-level security, ensuring only you can access your data.
4. Data Sharing
We do not sell, trade, or rent your personal or health information to any third party. Your data may be shared only:
- With your explicit consent (e.g., partner sync feature)
- To comply with legal obligations under Indian law
- To protect the rights and safety of Swasth users
We use the following service providers who process data on our behalf:
- Supabase — Cloud database hosting (encrypted, SOC 2 compliant)
- Expo — Push notification delivery
- Google/Firebase — Anonymous analytics (no personal data)
5. Data Security
- All data is encrypted in transit using HTTPS/TLS
- Cloud data is encrypted at rest by Supabase
- Local database uses device-level encryption
- Row-level security ensures only you can access your data
- Profile photos are stored in encrypted Supabase Storage buckets
6. Your Rights (DPDP Act 2023)
Under the Indian Digital Personal Data Protection Act, 2023, you have the right to:
- Access: View all data we hold about you (available in-app under Settings)
- Correction: Update or correct your personal information at any time
- Erasure: Delete your account and all associated data permanently
- Data Portability: Request a copy of your data in a machine-readable format
- Withdraw Consent: Disable cloud sync at any time (local data remains on device)
To exercise these rights, contact our Grievance Officer at devendermahto@gmail.com.
7. Children's Privacy
Swasth is intended for users aged 18 and above. We do not knowingly collect personal information from children under 18. If we become aware that a child has provided us with personal data, we will delete it promptly.
Parental features (baby tracking) collect data entered by the parent about their child's growth and vaccinations. This data remains under the parent's account and control.
8. Data Retention
- Active accounts: Data is retained as long as your account is active
- After deletion: All data is permanently removed within 30 days of account deletion
- Backup systems: Residual data in backups is purged within 90 days
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through in-app notification. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or your data:
- Grievance Officer / Email: devendermahto@gmail.com
- Developer: Devender Mahto
- Country: India