Privacy Policy

This Privacy Policy explains how NUTRITIONELDO PRIVATE LIMITED ("ÈLDO", "we", "us", or "our"), which operates the ÈLDO platform, mobile application, and website at eldohealth.com (together, the "Platform"), collects, uses, shares, and protects your personal data.

ÈLDO is a preventive-health and wellness platform. We help you discover quality-verified wellness venues, understand your health signals, and follow expert-verified plans. ÈLDO does not provide medical diagnosis or treatment and is not a substitute for professional medical advice (see our Terms of Use & Medical Disclaimer).

We are the Data Fiduciary responsible for your personal data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules. By using the Platform, you agree to the practices described here.

1. Who this policy applies to

This policy applies to everyone who uses the Platform, including individuals who create an account, upload health information, book consultations, or otherwise interact with ÈLDO. Separate terms may apply to health experts and venues who access ÈLDO through the Health Expert login.

2. The data we collect

We collect the following categories of personal data:

Account and identity data — your name, phone number, email address, date of birth, gender, and the delivery addresses you save. We do not use passwords: you sign in with a one-time code sent to your phone by SMS, or with your Google or Apple account, in which case we receive the name and email address that service shares with us.

Health and sensitive data — information you choose to provide or generate on the Platform, including:

• •Blood reports, lab results, and other medical records you upload, and the biomarkers extracted from them;
• •Diagnosed conditions, medications and supplements, allergies and intolerances, and health goals you tell us about;
• •Height, weight, and other measurements you log;
• •Meals you log, including meal photos you take or choose;
• •Your ÈLDO Score and the inputs used to calculate it;
• •Lifestyle inputs such as diet, sleep, activity, and routine;
• •Your answers to the Prakriti (Ayurvedic constitution) quiz and its result;
• •Expert-verified plans, notes, and recommendations associated with your account.

Wearable and device data — if you connect Apple Health (on iPhone) or Health Connect (on Android), we read your steps, distance, workouts and exercise minutes, active calories burned, sleep and sleep stages, heart rate, resting heart rate, heart rate variability, blood oxygen, breathing rate, weight, height, body fat, water, and calories eaten (logged in food apps). We only read this data; we never write to Apple Health or Health Connect. See Section 7.

Consultation and chat data — messages and files you exchange with a doctor through the Platform, details of voice and video calls with a doctor (such as time and duration), and your conversations with Veda, our AI health guide, including questions you speak instead of type. We do not record the audio or video of calls.

My Circle data — the people you invite or who invite you, whether you have let each of them help manage your profile, and the nudges you send each other. People in your circle can see how your day is going (such as whether you have met your daily goals). If you allow someone to help, they can also see and fill in your health profile and take the Prakriti quiz for you. You can turn that off or remove someone from your circle at any time.

Community data — the communities you follow; posts, stories, comments, recipes and workouts you publish; your likes; accounts you block and content you report; and a summary of the workouts you do along with (such as duration and estimated calories). What you publish in a community is visible to other members.

Booking and order data — the treatments, consultations, and products you book or order, the venue involved, and the address you choose. Where you make a payment, our third-party payment processor handles your card or payment details; we do not store full card numbers.

Technical and usage data — device type, operating system, IP address, app version, time zone, your push-notification token, crash reports, and how you use the Platform. On the website this is collected through cookies and similar technologies (see Section 10).

You are not required to provide health data to browse the Platform, but some features (such as your ÈLDO Score, plans, and doctor consultations) will not work without it.

Device permissions — the app asks for your camera (to photograph reports and meals, for video calls, and to measure how much you move during a do-along workout — that video is analysed on your phone and is never recorded or sent to us), microphone (for calls, and to speak your questions to Veda), speech recognition (to turn what you say to Veda into text), photo library (to upload reports, meals, and a profile photo), and notifications. Each is requested only when you use the feature that needs it, and you can turn it off in your device settings at any time.

3. How we use your data

We use your personal data to:

• •Create and manage your account and authenticate you;
• •Calculate and update your ÈLDO Score and show what your biomarkers mean;
• •Help you discover verified venues and book treatments or consultations;
• •Share your chosen information with the venue doctor you select, so they can advise you;
• •Power our AI features: Veda, our AI guide; reading the reports you upload; estimating the nutrition in meals you log; and drafting diet plans (see Section 6);
• •Personalise plans and reminders and measure your progress over time;
• •Connect you with doctors by chat and by voice or video call;
• •Run Communities: show what you publish to other members, suggest workouts and recipes that suit you, and act on reports and blocks;
• •Contact you by phone or WhatsApp to help you get started;
• •Send one-time sign-in codes, reminders, and service-related notifications and emails;
• •Process bookings and orders, and payments where applicable;
• •Maintain the security, integrity, and proper functioning of the Platform;
• •Comply with legal, regulatory, and record-keeping obligations;
• •With your separate consent, send you marketing updates (you can opt out at any time).

We do not use your health data for advertising, we do not track you across other companies' apps or websites, and we do not sell your personal data to anyone.

4. Consent and legal basis

We process your personal data on the basis of your consent, and for certain limited purposes permitted by law (such as complying with a legal obligation or protecting the Platform's security).

When we ask for your consent, we tell you what data we need and why. Your health data is processed only for the purposes described in this policy. You can withdraw your consent at any time (see Section 10); withdrawing consent does not affect processing already carried out, and may limit or end your ability to use certain features.

5. How we share your data

We share your personal data only as described below.

With the venue doctor you choose — when you book a consultation and give consent, the specific information you agree to share is made available to that doctor and their venue only. It is not shared with other venues or doctors on the Platform.

With service providers (Data Processors) — we use trusted third parties to operate the Platform. They act on our instructions under contractual and confidentiality obligations, and may only use your data to provide services to us:

• •Google Cloud and MongoDB Atlas — hosting, database, and file storage;
• •OpenAI — processing for our AI features (see Section 6);
• •Daily — voice and video call connections;
• •Twilio — delivering one-time sign-in codes by SMS;
• •Resend — sending email;
• •Expo, Apple, and Google — delivering push notifications;
• •Google and Apple — sign-in, if you choose to use them;
• •Sentry — crash and error reports, which are filtered so they do not contain your health data or messages;
• •PostHog — app usage analytics: which screens are opened and when the app is opened or closed, linked to your account ID. It does not receive your health data, messages, or profile details.

For legal and safety reasons — we may disclose data where required by law, court order, or a lawful request from a public authority, or to protect the rights, safety, and security of users, the public, or ÈLDO.

In a business transfer — if ÈLDO is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this policy.

We do not sell, rent, or trade your personal data.

6. AI features, Veda, and human oversight

ÈLDO uses AI to power Veda, our AI guide, to read the lab reports and records you upload, to estimate the nutrition in meals you log, and to draft diet plans and daily actions. To do this, the information needed for that task (for example your question, the report or meal photo, and relevant health details such as your conditions, medications, allergies, goals, and calorie target) is sent to our AI provider, OpenAI. OpenAI processes it only to return a result to us and does not use it to train its models. We ask for your permission before you first use Veda and before you share sensitive health details.

Veda is a support tool, not a clinician, and AI can be wrong. Any medical guidance comes from a real doctor, not from AI alone. We do not use your identifiable health data to train AI models.

7. Apple Health and Google Health Connect

Connecting Apple Health or Health Connect is optional, and you choose which data types to allow. We read your steps, distance, workouts and exercise minutes, active calories burned, sleep and sleep stages, heart rate, resting heart rate, heart rate variability, blood oxygen, breathing rate, weight, height, body fat, water, and calories eaten (logged in food apps), and use them only to show your activity in the app, set your daily calorie target, and keep your diet plan and ÈLDO Score in step with your activity. We never write data to Apple Health or Health Connect.

Data from Apple Health and Health Connect is never used for advertising or marketing, never sold, never used to build profiles for anyone else, and never shared with third parties except the service providers in Section 5 that we need to provide these features to you. It is not stored in iCloud. You can disconnect at any time in the app (Connect device) or in your phone's Health or Health Connect settings.

The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.

8. Data storage, location, and security

We store your data on secure cloud infrastructure provided by Google Cloud and MongoDB Atlas; uploaded files are stored in India (Google Cloud – Mumbai region). We use technical and organisational safeguards — including encryption in transit, access controls, and restricted internal access — to protect your data against unauthorised access, loss, or misuse.

Where data is processed outside India (for example by our AI provider or other global service providers), we take steps to ensure it is protected in a manner consistent with this policy and applicable law.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by law.

9. How long we keep your data

We keep your personal data for as long as your account is active and for as long as needed to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it. You can ask us to delete your account and data at any time (see Section 11), subject to any records we are legally required to retain.

Deleting your account: open the app and go to Account → Delete account, or follow the steps on our account deletion page. When you delete your account you are signed out immediately, and your account and the data associated with it — profile, health details, uploaded records, logs, plans, chats, and community content — are permanently deleted within 14 days. We may keep limited records (such as invoices for completed bookings) where the law requires, and only for as long as it requires.

10. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used. You can manage cookies through your browser or device settings. Some features may not work correctly if you disable certain cookies. We do not use your health data for advertising or cross-site tracking. The ÈLDO mobile app does not use advertising identifiers or third-party advertising or tracking tools.

11. Your rights

Subject to the DPDP Act, you have the right to:

• •Access — request a summary of the personal data we hold about you and how we process it;
• •Correction and updating — correct inaccurate or incomplete data;
• •Erasure — request deletion of your personal data;
• •Withdraw consent — withdraw consent for any processing based on consent, at any time;
• •Nominate — nominate another individual to exercise your rights in the event of your death or incapacity;
• •Grievance redressal — raise a complaint about how we handle your data.

To exercise any of these rights, contact us at help@eldohealth.com or use Account → Privacy & consent and Account → Delete account in the app. We may need to verify your identity before acting on a request. We will respond within the timelines required by law.

12. Children's data

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from children (individuals under 18) without verifiable parental or guardian consent as required by law, and we do not use children's data for tracking, behavioural monitoring, or targeted advertising. If you believe a child has provided us data without appropriate consent, contact us and we will delete it.

13. Third-party links and services

The Platform may link to or integrate with third-party services (such as Apple Health, Health Connect, Google or Apple sign-in, or payment gateways). Those services have their own privacy policies, and we are not responsible for their practices. Please review their policies before using them.

14. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the Platform. Your continued use after an update means you accept the revised policy.

15. Grievance Officer and contact

In accordance with the DPDP Act and the Information Technology Act, 2000, you can contact our Grievance Officer with any question or complaint about your personal data:

Grievance Officer: Shalvin Beni

Email: help@eldohealth.com

Phone: +91 7075007970

Address: NUTRITIONELDO PRIVATE LIMITED, P-32-70/71, First Floor, Khass Tower, Ramakrishna Puram, Tirumalagiri, Hyderabad, Telangana 500056

For general privacy queries: help@eldohealth.com

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

16. Governing law

This policy is governed by the laws of India. Any disputes relating to it are subject to the exclusive jurisdiction of the courts at HYDERABAD.