Privacy Policy

1. Who is responsible for your data

The data fiduciary is [Registered business name], [registered address] ("we"). Email: [privacy email].

Grievance Officer: [name], [email], [phone]. We reply to every request within [number of] days.

2. What we collect

• Account details: your name and email address, and how you signed in (Google or an email link).
• Your test answers: your answers in the Root Analysis Test (gut symptoms, food and daily habits, energy, emotional needs and nervous system). This is information about your health, so we treat it as sensitive. We only collect it when you choose to take the test.
• Your results and report: the scores and the report we make from your answers.
• Payments: payments are handled by Razorpay. We receive the payment status, amount, order number and type of payment method. We do not see or store your card number, UPI PIN or bank login.
• Messages and bookings: what you send us (email, WhatsApp, forms), and what you share in a consultation.
• Testimonials: your name, photo, words, video or screenshots, only with your written consent.
• Technical data: device and browser type, pages visited and IP address, through cookies and similar tools (see the Cookie Policy). Analytics run only if you accept them.

3. Why we use it

• To create your account, run the test and give you your results and report.
• To take payment and deliver what you bought.
• To book and run consultations and to support you afterwards.
• To send you service messages (receipts, access links, reminders about your saved test).
• To send you tips and offers by email or WhatsApp, only if you have said yes. You can say no at any time.
• To keep the service secure, prevent fraud and fix problems.
• To keep records that tax, accounting and other laws require.

4. Your consent

We ask for your consent before you take the test, in plain words, and you can see what you agreed to. You can withdraw your consent at any time by writing to us. Withdrawing does not undo what we did before, and it may mean we can no longer give you the test or report. When you withdraw, we stop using your data and delete it, unless a law requires us to keep some of it.

5. Who we share it with

We use trusted service providers who handle data for us under contract. We share only what they need.

• Supabase: accounts and the database that stores your answers.
• Vercel: hosting of this website.
• Razorpay: payments.
• Email and messaging: [email service provider].
• Analytics: [analytics provider, only if you accept analytics].
• YouTube: when you play a video on this site, YouTube may set its own cookies. We use YouTube's privacy-enhanced mode.
• Our practitioners: the people who run your consultation, plan or program.

We do not sell your personal data. We may share data with authorities if a law or a court order requires it.

6. Where your data is stored

Your data is stored in [region, to be confirmed]. Some of our service providers may process data outside India. When this happens we rely on their contracts and security practices, and we follow the rules that apply to transfers under Indian law.

7. How long we keep it

• Account and test answers: until you delete your account, or [period] after you last used it.
• Payment and invoice records: as long as tax and accounting laws require.
• Consultation notes: [period].
• After that we delete the data or make it anonymous.

8. How we protect it

We use HTTPS, limit who can see your data, and choose providers with proper security. No system is perfectly safe. If a breach affects your data, we will tell you and the authorities as the law requires.

9. Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the data we hold about you and who we share it with;
• ask us to correct, complete or update it;
• ask us to delete it;
• withdraw your consent;
• make a complaint to us, and if we do not solve it, to the Data Protection Board of India;
• name another person to use these rights for you if you cannot.

To use any of these rights, email [privacy email]. We may ask you to confirm who you are.

10. Children

Our services are for people aged 18 and above. We do not knowingly collect data from anyone under 18 without a parent or guardian's verifiable consent. If you think a child has given us data, please contact us and we will delete it.

11. This is not medical advice

What you read and receive here is for learning and general wellness. It does not diagnose, treat or replace medical care. Please read the Health Disclaimer.

12. Changes to this policy

If we change this policy, we will post the new version here with its date. If the change is important, we will tell you by email.

13. Contact us

Email [privacy email] or see the Contact page.