Privacy Policy
NAVA AI Wellness Companion — Vital Links Pvt. Ltd.
Version 1.0 | Effective: 7 July 2026
1. Who We Are
Vital Links Pvt. Ltd. is the Data Fiduciary under the DPDP Act, 2023.
| Detail | Information |
|---|---|
| Company | Vital Links Pvt. Ltd. |
| CIN | U62099DL2025PTC454795 |
| Data Protection Officer | Mahima Sharma |
| DPO Email | dpo@vitallinks.co.in |
2. What We Collect and Why
Account & Identity
Phone, name, age, gender, email (optional) — to create your account and personalise. Shared with nobody.
Health Vitals
Heart rate, HRV, SpO2, respiration, BP estimates, stress — to show wellness signals (estimates, not clinical). Never sold.
Family Health
Family names, relationships, shared vitals (with consent only) — to let you monitor family wellness. Shared only with members you choose.
Nutrition
Meal photos, food preferences, allergies — to estimate nutrition. Photos deleted after analysis. Never shared.
AI Processing
De-identified data (no name/phone) sent to Google Gemini for wellness insights. Your identity is never sent to the AI.
3. Your Rights (DPDP Act 2023)
- Access all your data
- Correct inaccurate data
- Export in machine-readable format
- Delete with 30-day notice
- Withdraw consent for any purpose anytime
- Complain to the Data Protection Board of India
4. Data Residency
All data stored in India (Mumbai). Encrypted at rest (AES-256) and in transit (TLS 1.3). Row Level Security on all tables.
5. Third Parties
| Service | Data | Location |
|---|---|---|
| Supabase | All data (encrypted) | India |
| Google Gemini | De-identified only (no name/phone/identity) | US |
| HeyGen | Anonymous coach script text only (no name/phone/identity) | US |
| MSG91 | Phone number | India |
| Expo | Push token only | US |
6. Non-Diagnostic
NAVA is a wellness companion, NOT a medical device. All values are estimates. Always consult a healthcare professional.
7. Children
Under 18 requires verifiable parental consent (DPDP Section 9). No behavioural targeting of children.
8. Contact
DPO: Mahima Sharma — dpo@vitallinks.co.in
Grievance resolution: 48-hour acknowledgement, 30-day resolution.
Complaint: Data Protection Board of India
Vital Links Pvt. Ltd. · CIN: U62099DL2025PTC454795 · DPDP Act 2023 + Rules 2025