Privacy Policy

We collect only what we need to provide the Service:

• Account and contact information: your name, mobile number (verified by OTP), and, if you provide them, email address, date of birth, gender, city and preferred language.
• Health information you enter or share: vitals and trackers (such as blood pressure, blood sugar, weight and activity), lab values, medical history, symptoms, medications, lifestyle and diet details, reports or documents you upload, survey answers, and notes created by our experts during your consultations and programs.
• IRA conversations: the questions you ask IRA and its answers.
• Appointments and communications: consultation and appointment bookings, and your messages with our care team (in the App, on WhatsApp or by phone).
• Purchase information: the plan you bought, amount, date, transaction ID and payment status, and your billing state for tax. Card, UPI and bank details are handled by our payment partners — we do not receive or store them.
• Location (optional, App only): if you allow it, your device location is used once, while the App is open, only to determine your state for GST on a subscription. You can decline and enter your billing address instead. We do not track your location in the background.
• Device and usage information: IP address, device and browser type, operating system, app version, and basic logs of how the Service is used, for security and troubleshooting.
• Website storage: the Website stores a random visitor ID and, after you verify your number, a session token in your browser's local storage so that IRA's free-question limits work. We do not use advertising cookies.

• Directly from you: when you sign up, fill in trackers or surveys, upload reports, book consultations, chat with IRA or our team, or make a purchase.
• Automatically: device, usage and log information when you use the Website or App.
• From our experts: notes and summaries of your consultations, recorded to provide continuity of care.
• From service providers: payment status from our payment partners, Google Play or the Apple App Store, and phone-number verification from Firebase Authentication.

We use your information only for the following purposes:

• Providing the Service: creating your account and JFH registration number, running your trackers, programs and consultations, and letting our doctors, dietitians and coaches guide you.
• Personalised health guidance: showing your trends, reminders and recommendations, and letting IRA answer with your health records as context when you are signed in to the App.
• Account security and verification: verifying your mobile number with an OTP and protecting against fraud and abuse.
• Payments and tax: processing purchases and renewals, issuing receipts and invoices, and applying the correct GST.
• Communication: appointment and program reminders, service updates and replies to your queries, by in-app notification, SMS, WhatsApp, email or phone. Promotional messages are sent only with your consent, and you can opt out at any time.
• Improving the Service: understanding how features are used and improving the quality of our programs and consultations, using aggregated or de-identified data wherever possible.
• Legal compliance: meeting our obligations under tax, medical-record and other applicable laws.

• We do not sell or rent your personal or health information to anyone.
• We do not use your health information for advertising or marketing, and we do not show third-party advertisements in the App.
• Health information is used only to provide and improve the health features you use, and is shared only as described in Section 5.
• We collect only the data needed for the features you use, and ask for device permissions (such as location) only when a feature needs them — you can refuse and still use the rest of the Service.
• We do not knowingly collect data from children under 18.

We share information only with the following recipients, and only as much as needed for the purpose:

• Our care team: the doctors, dietitians, physiotherapists and coaches who provide your consultations and programs.
• Service providers acting on our behalf: cloud hosting and databases; Firebase Authentication (Google) for OTP verification; our AI provider (OpenAI), which processes IRA questions and any health context needed to answer them under API terms that do not permit use of this data to train its models; payment processors (Razorpay, Google Play, Apple App Store); and messaging providers for SMS, WhatsApp and email. They are bound to keep your information confidential and to use it only to provide their services to us.
• Legal and safety reasons: government or law-enforcement authorities where required by law, or where necessary to protect the rights, property or safety of our users, the public or Just For Hearts.
• Business transfers: a successor entity in the event of a merger, acquisition or sale of assets, subject to this Privacy Policy.
• With your consent: anyone else, only if you ask us to or explicitly agree.

We may publish aggregated statistics that cannot identify you.

• All data is encrypted in transit using HTTPS/TLS.
• Data is stored on secured servers with access restricted to authorised staff who need it for their role.
• Access is protected by authentication and logging, and we review our systems for vulnerabilities.

No method of transmission or storage is completely secure, but we work continuously to protect your information and will notify you and the authorities of a personal data breach as required by law.

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymise your personal and health information as described in Section 8, except records we must keep by law — for example, payment and tax invoices under GST law, and medical records for the period required by applicable regulations. Anonymous website visitor IDs used for IRA limits are kept only as daily counters.

• In the App: open the Profile tab and tap Delete Account. Your account is deactivated immediately. If you do not log in again within 30 days, your profile, health records, appointments and chat history are permanently erased. Logging in within those 30 days restores your account.
• Without the App: send a deletion request from your registered mobile number via WhatsApp to +91 92097 42597 or call +91 94229 91576. We will verify your identity and complete the request within 30 days.
• Partial deletion: you can also ask us to delete specific information (such as an uploaded report) without deleting your account.

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed;
• Correct or update inaccurate or incomplete information (most details can be edited in the App);
• Erase your data, as described in Section 8;
• Withdraw consent at any time — for example, turn off location access or unsubscribe from promotional messages — without affecting processing already carried out;
• Nominate another person to exercise your rights in the event of your death or incapacity;
• Raise a grievance with us and, if unresolved, with the Data Protection Board of India.

To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.

The Service is intended for users aged 18 and above. We do not knowingly collect personal data from children. A parent or guardian may manage health information for a child in their care. If you believe a child has provided us with personal data, contact us and we will delete it.

The Service may link to websites and services we do not operate, such as YouTube, social media or our enquiry forms hosted on partner tools. Their privacy practices are governed by their own policies.

We may update this Privacy Policy from time to time. We will post the updated policy on this page, update the date above and, for material changes, notify you in the App or by other reasonable means. Continued use of the Service after the changes take effect means you accept the updated policy.