1. Who we are
Assistentia Labs Private Limited ("Shatavi," "we," "us," or "our") provides a mobile application offering doctor-built strength training guidance for women in perimenopause and menopause (the "App"). This Privacy Policy explains what information we collect through the App and this website, how we use it, and the choices you have.
For the purposes of India's Digital Personal Data Protection Act, 2023, Assistentia Labs Private Limited is the Data Fiduciary for the personal data described in this policy. Where the GDPR applies, we act as the data controller.
2. Information we collect
Information you provide directly:
- Account details, such as your name and email address.
- Profile and quiz responses, such as your menopause stage, training history, and stated preferences.
- Self-reported wellbeing information you choose to share, such as how a session felt or your energy level that week.
- Messages you send us for support or feedback.
Information collected automatically:
- Usage data, such as which sessions you complete and how you interact with the App.
- Device information, such as device type, operating system, and app version, used for crash reporting and compatibility.
Payment information: subscriptions are purchased and billed through the Apple App Store or Google Play. We never receive or store your card or bank details. We receive only the subscription status and transaction identifiers those stores share with us so we can unlock your plan.
We don't knowingly collect more health information than is necessary to personalise your training plan, and we don't collect information intended to diagnose or treat a medical condition.
3. How we use your information
- To build and continually adjust your personalised training plan.
- To maintain your training history so you can pause and resume without losing progress.
- To operate, maintain, and improve the App.
- To respond to support requests.
- To send you service-related communications, and, only with your consent, product updates or newsletters.
- To meet legal obligations.
We don't sell your personal information.
4. How we share information
We share information only in these circumstances:
- Service providers who help us run the App, for example cloud hosting, analytics, and crash-reporting providers, under agreements that limit their use of your data to providing services to us.
- Legal reasons, if required by law, regulation, or valid legal process, or to protect the rights, safety, or property of Shatavi or our users.
- Business transfers, if Shatavi is involved in a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
5. Your choices and rights
- You can access or correct your account information in the App, or by contacting us at the email below.
- You can delete your account and its data at any time. See Delete your account for the in-app steps and the email request route.
- You can opt out of non-essential communications at any time using the unsubscribe link in any such message, or by emailing us.
- Depending on where you live, you may have additional rights under laws such as the GDPR, the CCPA, or India's Digital Personal Data Protection Act, 2023, including the right to request a copy of your data, withdraw consent, nominate another person to exercise your rights, or object to certain processing. Write to [email protected] and we'll respond within 30 days.
- If you're in India and aren't satisfied with our response, you may escalate to the Data Protection Board of India. If you're in the EEA or UK, you may complain to your local supervisory authority.
6. Data retention
We keep your information for as long as your account is active, or as needed to provide the App. When you delete your account, we delete your personal information from our production systems within 30 days and from our encrypted backups within 90 days. We may retain a limited record where we're required to for legal, tax, security, or fraud-prevention reasons, and we may keep aggregated or de-identified data that can no longer be linked to you.
7. Data security
We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, and we can't guarantee absolute security.
8. International data transfers
We operate from India and use service providers that may store or process data in other countries, including the United States and the European Union. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can ask us for details of the safeguards that apply to you.
9. This website and the early-access list
This website uses no advertising, analytics, or tracking cookies, and it stores nothing on your device. We don't build advertising profiles and we don't use cross-site tracking.
Our hosting provider, Railway, keeps a log of each request made to this website, including your IP address and browser type, for 30 days. It's used to keep the site secure and running.
The early-access list
If you join the early-access list on this website, we collect your email address, your first name if you give it, and which emails you agreed to receive. We also record the wording you agreed to, when you agreed, the page you signed up on, and the campaign tag in the link you arrived from (for example, a particular social media post). That record shows your consent, and tells us which channels bring people to Shatavi. The form doesn't ask about your health.
- We use your email to tell you when Shatavi launches, and, only if you ticked the separate box, to send occasional updates before launch: at most one email every two weeks.
- The legal basis is your consent. You can withdraw it at any time with the unsubscribe link in any email, or by writing to [email protected].
- Our email service provider stores and sends these emails for us, and uses your details only on our instructions.
- We never share your email with advertisers or upload it to an advertising platform.
- We keep your details until you unsubscribe, and delete them no later than 12 months after launch if you haven't created a Shatavi account.
10. Children's privacy
The App is intended for adults and isn't directed at children. We don't knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, email us and we'll delete it.
11. Not a medical service
Shatavi is an educational, fitness-guidance app. It's not a medical device, and using the App doesn't create a doctor-patient relationship. Information you share in the App is used to personalise your training plan, not to diagnose or treat any condition.
12. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you through the App or by email before the changes take effect, and we'll update the "last updated" date above.
13. Contact us
If you have questions about this Privacy Policy or your information, contact our privacy team at [email protected].
Assistentia Labs Private Limited
Attn: Privacy, Shatavi
[email protected]