Privacy policy
Last updated 14 November 2026
Bodhi Health is an iPhone app by Monastic Media, a venture of ECOMFIRST VENTURES, 3rd Floor, Stalwart Insignia, University Airport Road, beside Shantiniketan, Piplod, Surat, Gujarat 395007, India (GSTIN 24DIFPP5850R1ZI). This policy explains what the app collects, why, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act). For this app, ECOMFIRST VENTURES is the Data Fiduciary.
The short version
We collect only what the app needs to work out your daily targets and show your progress. Your health data is yours: we never sell it, never use it for advertising, and never share it with advertisers or data brokers. Data from Apple Health is never used for ads or marketing and never leaves our service except to the providers listed below that run the app for you. You can export or delete everything from inside the app at any time.
What we collect and why
Your account
Your e-mail address (or the private relay address Apple gives us when you use Sign in with Apple) and a user ID. If you use Sign in with Google, Google shares your name, e-mail address and a link to your Google profile picture; we use the e-mail to sign you in and your first name only to suggest the name the app uses, and we never show or use the picture. Why: to sign you in and keep your data together. We never ask for or store a password.
Your age and consent
Your confirmation that you are 18 or older, and the date, time and version of the consent you gave. Why: the app is for adults only, and the DPDP Act asks us to keep a record of your consent.
Your profile and health details you enter
The name you want the app to use, height, weight, sex, year (and optionally month) of birth, activity level, your goal weight and date, your weigh-ins, whether you trained or ate out on a day, and any health conditions you choose to declare (pregnancy, breastfeeding, a history of an eating disorder, kidney disease or diabetes). Why: to calculate safe daily calorie and protein targets, your weekly outlook and your plan. Declaring pregnancy, breastfeeding or an eating disorder history switches off any calorie deficit.
Meals
What you type that you ate, and meal photos you choose to take, with the calories, protein, carbs and fat worked out for them. Why: to count your day against your targets. Reading a photo or a typed meal with AI needs a separate permission you can say no to; without it you enter meals by hand. With it, the photo or text is sent to our AI provider to read the food, and the result comes back to the app. Photos are stored privately for your account only.
Apple Health
Only if you allow it: steps, active energy, resting energy, exercise minutes, workouts and body weight read from Apple Health, and your weigh-ins written back to it. Why: to adjust your targets to how active you really are. You can turn each permission off in the iPhone Settings app at any time.
Reminders
Your reminder times, your time zone and a push token for your device, only if you turn reminders on. Why: to send the reminders you asked for, and never at night.
Subscription
Whether you are on the free trial or a paid plan, and when it renews or ends, as reported to us by Apple. Why: to unlock the paid features. Apple handles the payment: we never see your card or bank details.
Usage limits
A count of AI requests per day per account. Why: to keep the service fair and its costs in check.
We do not collect your contacts, your location, your microphone, or advertising identifiers, and the app has no advertising or third party tracking.
Who processes your data for us
Only these providers, each only to run the app for you and under a contract that keeps your data confidential:
Supabase (our database, sign-in and private file storage, on Amazon Web Services servers in Mumbai, India). Anthropic (reads meal photos and typed meals and writes short tips, only if you allow AI; processed in the United States; under its commercial terms your data is not used to train its AI). Apple (Sign in with Apple, in-app purchases and push notifications). Google (Sign in with Google, only if you choose it; the app keeps no Google password or token and drops Google's permission right after you sign in).
Your account data is stored in India. A meal you send for AI reading is processed in the United States. The DPDP Act allows this except to countries the Government of India restricts, and we will stop if that list ever includes a country we use.
We share data with nobody else, unless the law requires it (for example a valid order from a court or government body).
How long we keep it
We keep your data for as long as your account exists. When you delete your account, every row and every photo is deleted from our systems at once, your Sign in with Apple link is revoked, your Sign in with Google link is removed, and any backup copy is gone within 30 days. We keep only a minimal record that an account was deleted and when, so we can show we did it. Purchase records that Apple keeps are governed by Apple's own policy.
Your rights under the DPDP Act
Access and export: Settings, Export my data, gives you a copy of everything we hold about you.
Correction: edit your details in the app, or write to us.
Withdraw consent and erase: Settings, Delete account, removes your account and all its data. Withdrawing consent is as easy as giving it; the app cannot work for you without it, so withdrawing it closes your account.
Nominate: you may nominate a person to exercise these rights for you if you die or cannot act; write to us.
Grievance: write to our Grievance Officer at support@monastic.media. We reply within 7 days and resolve within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
Children
Bodhi Health is only for people aged 18 or over. We do not knowingly collect data from anyone under 18; if we learn of it, we delete the account.
Security
Data travels encrypted (TLS) and is stored encrypted. Every record is locked to its own account, so no other user can read it. Access by our team is limited to what is needed to fix a problem you report.
Changes
If we change this policy in a way that matters, we will tell you in the app before it applies. The date at the top shows the latest version.
Contact
Grievance Officer, Monastic Media (ECOMFIRST VENTURES), Surat, Gujarat 395007, India. E-mail support@monastic.media.
