Privacy Policy

Last updated: 23 July 2026

Vitalign helps you turn blood test results into a practical food and lifestyle plan. To do that, we handle health information — so we take how we collect, use, and protect it seriously. This policy explains what we do in plain language.

Who this policy covers

Vitalign is operated by Rishabh Gupta, sole proprietor trading as Vitalign. This policy applies to anyone who visits vitalign.in or uses the app.

What we collect

• Contact details you give us: name, email, mobile number.
• Health information you choose to enter: blood test values, health goals, dietary preferences, age, and related details.
• Basic usage information needed to run the service, such as which pages you visit, stored locally in your browser.
• Payment confirmation — we never see or store your card, UPI, or bank details. Payments are handled directly by Razorpay, a PCI-DSS compliant payment processor; we only receive confirmation that a payment succeeded.
• Google account details, if you sign in with Google: your name, email address, profile picture and Google account ID. Nothing else from your Google account is requested or received.

How we use it

We use your information to build your personalised plan, to contact you about your account and membership, to process payment through Razorpay, and to improve how Vitalign works. That's the full list — we don't use it for anything else, including advertising.

AI-assisted features

Some features, such as the in-app coach, use a third-party AI provider to generate responses. When you use these features, the relevant details you've entered may be sent to that provider solely to produce your answer. This information is used to respond to you — it is not used to train external models on your identifiable data, and it is not sold. If you'd prefer not to use AI-assisted features, you can simply not use them; the rest of your plan does not depend on them.

Who we share data with

• Razorpay — to process payments. Razorpay's own privacy policy governs the payment data it handles directly.
• Google — only if you choose to sign in with a Google account. Google tells us your name, email address, profile picture, and a Google account identifier, so we can create or recognise your Vitalign account. We do not receive your Google password, and we request no access to Gmail, Drive, Contacts, or any other Google service. Your health data is never sent to Google.
• Our hosting provider — to store and run the application securely.
• We never sell, rent, or share your health data with advertisers, data brokers, or insurers.

Google sign-in

Signing in with Google is optional — you can always use an email address and password instead. If you do use it, Vitalign receives only your basic profile: name, email address, profile picture and a Google account identifier. We use these solely to create your account, sign you in, and contact you about your account.

We do not use Google account data for advertising, we do not sell or transfer it to third parties, and we do not use it to train any AI model. If you later delete your Vitalign account, the Google identifier stored against it is deleted with it. You can also revoke Vitalign's access at any time from your Google Account security settings.

Legal basis and the DPDP Act

For users in India, Vitalign processes personal data in line with the Digital Personal Data Protection Act, 2023 (DPDP Act). We rely on your consent, given when you create an account or enter information into the app. You can withdraw consent at any time by emailing us — see Contact, below.

What we never do

• We never sell your personal or health information.
• We never share it with advertisers or data brokers.
• We never post about your health without your say-so.

How it's stored

Data in transit is protected with SSL/TLS encryption, and stored on secured servers. We limit who can access it to what's needed to run the service. No system is perfectly secure, but we take reasonable technical and organisational steps appropriate to the sensitivity of health data.

How long we keep it

We keep your data for as long as your account is active, or as needed to provide the service. If you ask us to delete your account, we delete your personal and health data within 30 days, except where we're required to keep records (for example, payment records) by law.

Your choices and rights

You can ask us to:

• Show you what we hold about you.
• Correct anything that's inaccurate.
• Delete your account and data.
• Withdraw consent to further processing.
• Nominate someone to act on your behalf if something happens to you, as provided under the DPDP Act.

To do any of these, email privacy@vitalign.in and we'll help. We aim to respond within 30 days.

Grievance Officer

In line with applicable Indian law, our Grievance Officer is:

Not medical advice

Vitalign provides food and lifestyle suggestions based on your numbers. It does not diagnose conditions or replace your doctor. For anything clinical, or before changing medication, always speak to a qualified professional. Data you enter is used to generate wellness guidance, not to create or store a medical record.

Children's data

Vitalign is not directed at anyone under 18. We do not knowingly collect data from minors.

Changes to this policy

If we update this policy, we'll change the date at the top. For significant changes, we'll aim to let you know directly.

Contact

Questions about your privacy? Email privacy@vitalign.in.