Privacy Policy

1. Introduction

Zestful ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we store and use it, who it is shared with, and your rights when you use the Zestful application ("App").

By creating an account or using Zestful, you consent to the practices described here. If you do not agree, please discontinue use. Zestful is intended for users located in India.

2. Information We Collect

2.1 Account & profile information you provide

• Full name
• Phone number (used for login and verification)
• Date of birth and gender
• Optional profile photo

2.2 Health information you add

• Prescriptions (scanned images and extracted details)
• Medical/lab reports and documents
• Daily vitals (e.g., blood sugar, blood pressure, weight, exercise, medication logs)
• Medications and reminders
• Records you create on behalf of family members you add (see Section 6)

2.3 Automatically collected information

Basic device and diagnostic information necessary to operate the App and its background sync.

Important: Your health information is stored both on your device and in secure cloud storage so you can back it up, restore it on a new device, and share it with family members you choose to link.

3. How We Store Your Data

Your account and health information are stored:

• Locally on your device, and
• In the cloud using Google Firebase (Cloud Firestore, Cloud Storage, Authentication, and Cloud Functions).

Cloud data is encrypted in transit and at rest. We use application-managed encryption for sensitive records. This is not end-to-end / zero-knowledge encryption — our systems are technically capable of processing your data to provide the service, and we restrict such access to what is necessary to operate Zestful.

4. How We Use Your Information

• Create and authenticate your account (via phone-number verification)
• Provide core features: scanning and parsing prescriptions/reports, tracking vitals and medications, and generating summaries and insights
• Back up your records and restore them across your devices
• Enable sharing with family members you link
• Maintain, secure, and improve the App

We do not use your health data for advertising, ad profiling, or sale to third parties.

5. AI-Powered Features

Zestful uses AI to read and structure your prescriptions and reports. To do this, the relevant document content (which may include health information and identifiers such as a patient name) is sent to Google's Gemini models via Google/Firebase AI services for real-time processing.

We use these AI services on a paid tier. Under Google's terms for paid usage, your data is not used to train Google's or any third party's AI or machine-learning models, and inputs are processed to fulfil your request and are not retained beyond what is necessary to provide the service.

6. Family Sharing

• When you invite and link a family member, health records associated with that person may be shared between the linked accounts.
• You may add records for dependants (including children who do not have their own account) that you manage on their behalf and with appropriate authority/consent.
• Either linked user can remove the link at any time. After unlinking, no new data is shared. However, records already downloaded to a family member's device may remain stored locally on that device.

7. Data Sharing and Sub-Processors

We do not sell, rent, or trade your personal information, and we do not share it with advertising networks or data brokers. We use the following service providers strictly to operate the App:

Data may also be shared with family members you explicitly link (Section 6).

8. PDF Report Sharing

You can generate health summary PDFs. When you share a PDF, sharing is initiated solely by you through your device; the recipients and delivery method are chosen by you.

9. Data Retention

We retain your account and health data for as long as your account is active. When you delete your account, your cloud data is deleted immediately (see Section 11). Copies previously synced to a linked family member's device remain on their device and are outside our control after sharing.

10. Your Rights

As a user of Zestful, you have the following rights:

• Access the personal data we hold about you
• Correct your account and profile information (available in-app)
• Delete your account and associated cloud data (see Section 11)
• Withdraw consent and export your records (e.g., as PDF)
• Raise a grievance with us (Section 13)

11. Account & Data Deletion

In-app: Profile → Delete account. This immediately and permanently deletes your account and the data you uploaded (reports, prescriptions, vitals, medications), your stored files, and your login, from our servers.

By request: email care@zestful.in from your registered details.

What deletion does not cover: records that a family member independently added about you (which belong to their account), and copies already synced to a linked member's device. Local data on your own device is removed when you delete the account or uninstall the App.

12. Children's Privacy

Zestful is intended for users 18 and older, and we do not knowingly allow minors to create their own accounts. An adult may store and manage a minor dependant's records on the minor's behalf with appropriate authority. If you believe a minor has created an account, contact us and we will address it.

13. Security & Grievance Contact

We apply industry-standard safeguards including encryption in transit and at rest and access controls. No method of transmission or storage is 100% secure; please protect your device with a strong screen lock.

For any privacy questions, requests, or grievances, contact us at care@zestful.in.

14. Changes to This Policy

We may update this Policy. For significant changes we will notify you in-app or via your registered phone number. Continued use after changes constitutes acceptance.

15. Contact Us

Email: care@zestful.in