Effective date: 1 July 2025 · Governed under the Digital Personal Data Protection Act, 2023 (India)
Zadok Ventures India Pvt Ltd
No:83, 4th Cross, 4th Main, New Rajanna Layout, Horamavu Agra, Bangalore 560113, India
Email: hello@healthnessplus.com
Phone: +91 88803 88804
We collect only the personal data necessary for the specific purpose for which it is collected. We do not collect sensitive financial data, government IDs, or biometric data.
| Category | What we collect |
|---|---|
| Identity data | Name, age, gender |
| Contact data | Email address, phone number |
| Health data | Responses to the Health Risk Assessment (HRA), lifestyle information, dietary habits, physical activity levels, and self-reported health metrics |
| Usage data | Pages visited, time spent, device type, and browser type — collected via server logs only; no third-party tracking |
Your personal data is processed solely for the following purposes, for which you provide explicit consent at the time of collection:
We will not process your personal data for any purpose beyond what is stated above without obtaining fresh consent from you.
We process personal data on the basis of explicit, informed, and freely given consent as required under the DPDP Act, 2023. You may withdraw consent at any time (see Section 8). Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.
HRA responses and health reports are retained for a maximum of 3 years from the date of your last interaction, after which they are permanently deleted. If you request deletion before 3 years, we will action it within 72 hours (see Section 8). Anonymised, aggregated data with no personally identifiable information may be retained indefinitely for research and product improvement.
We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances: with your assigned health coach or doctor to deliver the service; with third-party sub-processors bound by data processing agreements; or when required by law or court order.
Third-party sub-processors we currently use:
| Provider | Purpose | Data Involved | Agreement |
|---|---|---|---|
| OpenRouter, Inc. (USA) | AI model routing layer — routes queries to downstream LLM providers on our behalf | Coaching queries passed through for routing; actual inference performed by the downstream provider | Data Processing Agreement (GDPR/CCPA). Current DPA covers general personal data; Sensitive Data (incl. health data) routed to downstream providers under their own DPAs. |
| OpenAI, L.L.C. (USA) Current AI inference provider |
Powers Freya clinical coaching assistant and blood work analysis | Health coaching queries; blood work data (only with your explicit consent) | Data Processing Agreement — data not used for model training; deleted after inference. We may switch to any market LLM provider meeting these same criteria. |
| Razorpay Software Pvt Ltd (India) | Payment processing | Transaction amount, order reference; card/UPI details handled directly by Razorpay — we never see them | Razorpay Data Processing Agreement; PCI-DSS compliant |
| Meta Platforms (WhatsApp Business API) | Optional food log image intake via WhatsApp | Meal photos and associated chat messages you choose to send | Meta Business Data Processing Terms |
| BigRock / Endurance International | Transactional email delivery (HRA reports, booking confirmations, reminders) | Your name, email address, and report content | Standard SMTP provider terms |
| Google (reCAPTCHA v2) | Bot prevention on the HRA submission form | Your IP address and browser/device signals | Google Terms of Service & Privacy Policy; not used for advertising profiling by us |
Any cross-border transfer of personal data will only occur with your explicit consent or where permitted under the DPDP Act and applicable rules.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:
In the event of a personal data breach that is likely to result in high risk to your rights, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of it.
Under the DPDP Act, 2023, you have the following rights. Exercise any of them by contacting our Grievance Officer (Section 10). We respond to all valid requests within 30 days.
| Right | What it means | How to exercise |
|---|---|---|
| Right to Access | Obtain a summary of personal data we hold about you and the purposes for which it is processed | Email our Grievance Officer |
| Right to Correction | Have inaccurate or incomplete personal data corrected or completed | Email our Grievance Officer |
| Right to Erasure | Have your personal data erased where it is no longer necessary for the original purpose, subject to legal retention obligations | Use the Data Deletion page or email our Grievance Officer |
| Right to Grievance Redressal | Have your grievances addressed promptly; escalate to the Data Protection Board of India if unresolved | Email our Grievance Officer; escalate to the DPBI if needed |
| Right to Nomination | Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity | Email our Grievance Officer with nominee details |
| Right to Withdraw Consent | Withdraw consent at any time; withdrawal does not affect the lawfulness of prior processing | Email our Grievance Officer or use the unsubscribe link in any communication |
We use only strictly necessary session cookies to maintain your login state. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics platforms.
The following third-party services are embedded in our platform and may receive your IP address or device information as a result of loading their assets. Neither is used for advertising or behavioural profiling by us.
| Service | Where used | Data received by the provider |
|---|---|---|
| Google reCAPTCHA v2 | Health Risk Assessment submission form — prevents automated submissions | Your IP address and browser signals, used to assess whether you are human |
| Google Fonts | Typography across all pages | Your IP address may be logged by Google's font servers when the page loads |
You may disable cookies in your browser settings; doing so will prevent you from accessing authenticated sections of the platform.
In accordance with the DPDP Act, 2023, and applicable rules, the details of our Grievance Officer are:
Grievance Officer: J.Amritraj, Founder
Zadok Ventures India Pvt Ltd
No:83, 4th Cross, 4th Main, New Rajanna Layout, Horamavu Agra, Bangalore 560113
Email: hello@healthnessplus.com
Phone: +91 88803 88804
You may also lodge a complaint with the Data Protection Board of India if your grievance is not resolved to your satisfaction.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any material changes will be communicated to you via email or a prominent notice on our platform before they take effect. The effective date at the top of this document will always reflect the latest version.