We collect what the app needs to build your record, and nothing beyond it. That falls into six groups: who you are, what you say at onboarding, what you tell us day to day, what your devices report, what you photograph, and what you connect.
A recording is uploaded, transcribed, and reduced to structured facts — alcohol, pain score, water, training, mood. The audio and the transcript stay in your account. They are visible to you and to nobody else, including your coach and including us in the ordinary course of running the service.
Transcription and the analysis that follows it run on Google's Gemini API, under our agreement with Google. What we send to that API is text, images — meal photos, menu photos, face photos and body progress photos — and audio. Under that agreement your inputs are not used to train Google's models. You can delete any recording individually, and deleting it removes the transcript with it.
If you invite a coach, they see scores and trends. The line between the two is fixed, and you cannot be talked out of it by a coach asking.
Every connection is optional, and each one can be revoked from inside the app without losing the rest of your record.
Blood markers, skin scores and everything derived from your body are treated as sensitive personal data. They are encrypted at rest, isolated per account, and never used for advertising or shared with insurers, employers or data brokers. Where Indian law requires explicit consent for processing sensitive data, we ask for it separately rather than folding it into these terms.
Deleting your account removes your record from our live systems immediately. Encrypted database backups may still hold a copy for up to 35 days, after which they rotate out permanently. Nothing survives that window.
AAYU is only for adults aged 18 or older. We ask every new account to confirm this before health data is processed. If you believe a minor has created an account, write to the address below and we will investigate and delete it promptly.
You can access and correct your record, download a portable copy, withdraw optional consent, object to or restrict processing, and delete your account. These controls are in Profile → Privacy & data. EU and UK users may also complain to their local data-protection authority. Withdrawing consent does not make earlier lawful processing unlawful.
AAYU processes account and core service data to perform our agreement with you. We process health data and optional AI analysis only with your explicit consent. Security logs are processed for our legitimate interest in protecting the service and meeting legal duties. Where Google Gemini processes content for an insight, it acts as a service provider under our instructions; AAYU does not use health data for advertising.
Data may be processed outside your country. For EEA or UK transfers, AAYU uses an adequacy decision or approved contractual safeguards such as the European Commission Standard Contractual Clauses, as applicable. Ask the contact below for information about the safeguard covering a particular transfer.
Privacy questions and rights requests go to our privacy contact. We aim to answer without undue delay and within the period required by applicable law.
Access, correct, download, restrict, object, withdraw optional consent or delete from Profile → Privacy & data. You may also complain to your local data-protection authority. Health and optional AI processing rely on explicit consent; core account service relies on our agreement with you.