Privacy Policy

VitalNadi is built on a simple principle: your family's health data belongs to your family. We do not require accounts, we do not sync your health data to our servers, and we do not sell or share health information with any third party. This principle is not a policy that can change — it is the architecture of the product.

This policy covers the limited data we do collect when you visit our website or interact with us, and how that data is used.

• Account data: None. VitalNadi does not require an account on the website or the Android app. You can read every blog article, browse every feature page, and download the app without signing up.
• Comments data: If you leave a comment on a blog post, we store your name, email address, the comment text, and your IP address (for spam detection). Your email is never displayed publicly.
• Contact form data: When you use the contact form, we receive your name, email, subject, and message. This data is used only to respond to your inquiry and is deleted after 90 days unless follow-up is required.
• Analytics data: We use privacy-respecting analytics to understand aggregate traffic patterns (page views, country, referrer, device type). We do not track individual users across sessions or build user profiles.
• AdSense data: If we display Google AdSense ads, Google may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising via Google Ads Settings.
• App usage data (in Android app only, opt-in): If you opt in inside the Android app, we collect anonymous usage statistics (which screens you visit, which features you tap). This data cannot be traced back to you or your family's health records.
• Health data: None. VitalNadi never transmits your health readings, prescriptions, lab reports, or insurance documents to our servers. All health data stays on your device.

• To respond to your contact-form messages and bug reports.
• To publish comments you leave on blog posts (after spam and moderation review).
• To understand aggregate traffic patterns via analytics (e.g., which blog posts are popular, which countries readers come from) so we can improve content.
• To display relevant ads via Google AdSense (if AdSense is enabled) — Google controls ad personalization based on its own policies.
• To send you emails if you explicitly subscribe to a newsletter (currently, we do not operate a newsletter, but this section will apply if we add one).
• To comply with legal obligations and prevent fraud or abuse.

We do not use your data to build health profiles, sell to insurers, share with advertisers directly, or train AI models on personal data.

We use a minimal set of cookies: a WordPress session cookie if you leave a comment, and analytics cookies if analytics is enabled. Google AdSense, when active, may set its own cookies — see our Cookie Policy for details. We do not use cookies for cross-site tracking or behavioral profiling.

We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. We may share data only in these limited cases:

• Service providers: We use hosting (a WordPress hosting provider), email delivery (for contact form forwarding), and analytics — each under their own privacy policies and data processing agreements.
• Legal compliance: If required by law, court order, or to protect our rights and the safety of others.
• Business transition: In the event of a merger, acquisition, or asset sale, we would transfer data to the successor entity — but only consistent with this policy.

Comments remain on the site for the lifetime of the article unless you request deletion. Contact form submissions are deleted after 90 days. Analytics data is aggregated and retained for up to 24 months. Server access logs are rotated every 30 days.

Depending on your jurisdiction (GDPR for EU/UK residents, DPDP Act 2023 for Indian residents, CCPA for California residents), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict certain processing
• Withdraw consent to processing that relied on consent
• Receive a portable copy of your data

To exercise any of these rights, contact us with the subject "Privacy Request". We respond within 30 days.

VitalNadi is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

Our website contains links to external sites (Google Play, Google AdSense policies, social media, etc.). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies when you visit them.

We use industry-standard security measures to protect the limited data we hold: HTTPS for all traffic, secure hosting, limited admin access, and regular updates. However, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach affecting your personal data, we will notify affected users and relevant authorities within 72 hours as required by applicable law.

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page whenever we make changes. For material changes (changes to what we collect or how we use it), we will post a prominent notice on the homepage for at least 30 days.

If you have any questions about this Privacy Policy, please contact us. We will respond within 30 days.