Privacy Policy: moringa lite

moringa lite is a health and wellness mobile app published by GenBioCa Sciences Private Limited, India. For any privacy-related questions, write to [email protected].

We collect the following information, directly from you or through the app’s features you choose to use:

• Account identity: phone number (used for OTP sign-in), name, date of birth, gender, city, country, preferred language.
• Health data: vitals (blood pressure, blood glucose, heart rate, weight, height, oxygen saturation, sleep), symptoms, chronic conditions, medications, allergies, vaccination records, family medical history, and files you upload such as prescriptions and lab reports.
• Fitness data from Health Connect: steps, heart rate, sleep, calories, distance, only after you grant explicit permission in your device settings.
• Location: approximate and precise location, used to find nearby doctors, display local weather and air quality, and (during a Family Alert) to share your position with family members and volunteers you have added.
• Device information: Firebase Cloud Messaging push token, device model, operating system version, and app version.
• App activity: features used and screens visited, used in aggregate form to improve the product.

We do not knowingly collect financial information, government identifier documents (beyond any optional profile fields you choose to fill), or biometric identifiers.

• Deliver the core features: track your health, compute your personalized Moringa Score, generate your HealthPass QR card, run Family Alerts.
• Send push notifications you have opted in to.
• Secure your account and detect abuse.
• Improve the product through aggregated, de-identified analytics.

We share limited data only with service providers who help us run the app:

• Google Firebase: for authentication (phone OTP), push notifications, and crash reporting.
• Google Play Services: for install integrity verification.
• Google Maps: to show the nearby-doctor map.
• MySahayak: to deliver family alerts and match volunteers nearby when you trigger an emergency alert (Family feature only).

We do not sell your personal data. We do not share data with advertisers or ad networks. moringa lite contains no advertising.

Your account data is kept as long as your account is active. If you delete your account, we delete your personal data from active systems within 30 days and from backups within 90 days. Legally required records (such as audit logs) may be retained longer where mandated by law.

At any time you can:

• View and update your personal data from within the app (Profile section).
• Request an export of your data by emailing [email protected].
• Request deletion of your account and associated personal data by emailing [email protected]. We respond within 30 days.
• Withdraw consent for optional data collection (fitness sync, location) by revoking the relevant Android permissions in your device settings. Core features that depend on these permissions will stop working.

moringa lite is intended for adults (18 and over). We do not knowingly collect personal data from children under 18. If you believe a child under 18 has provided us with personal data, please contact us so we can delete it.

Data is transmitted over HTTPS. Access tokens and authentication credentials are stored in your device’s encrypted storage. Server-side data is held in access-controlled databases maintained by our infrastructure providers.

We primarily process data in India. Our service providers (such as Google) may process data in other countries under standard contractual safeguards.

We may update this policy as the app evolves. Material changes will be announced in-app and, where feasible, communicated to registered users by email. The “Last updated” date at the top of this page always reflects the most recent revision.