निजता नीति

Last updated: 10 October 2026

GRP Aura (“we”) is a free habit and wellness app for people in India. This policy explains what personal data we collect, why, and the choices you have. It follows India’s Digital Personal Data Protection Act, 2023.

What we collect

• Account: your mobile number (for sign-in by one-time code), or your email and password. We email a one-time code to confirm a new email account and to reset a forgotten password; passwords are stored only in scrambled (hashed) form.
• Using the app without an account: you can start without giving a phone number or email. Your app data is then kept under an anonymous ID linked to your phone. If you later save your progress, it moves to your account; if the app isn’t opened for 180 days, the anonymous data is deleted.
• Profile: name, date of birth, gender, height, weight, activity level, goals, diet, allergies and language — to personalise habits, meal plans and workouts.
• Activity: your habits, check-ins, streaks, points, meals you log, workout sets and session history.
• Optional health details: if you use them — the pregnancy tracker (due date, checkups, notes), and the quit-tobacco tracker.
• Community: your nickname, posts, comments and reports. Anonymous posts are shown without your nickname.
• Gift claims: the delivery name, address and phone number you give us for a gift.
• Device: a notification token, app version and time zone.
• Optional usage data: only if you allow it in Settings — which features you open, in aggregated, pseudonymised form.

Photos

• Check-in photos stay on your phone. If you turn on photo sharing (adults only), spot-check photos are sent to our review team to confirm rewards, kept for 30 days and then deleted — or straight away when you turn sharing off.
• “Scan your fridge” photos are sent, after you agree, to our AI provider only to recognise ingredients. We don’t store them.
• Community photos you post are visible to other members and checked before they appear.

Why we use it

To run the app and your account; to personalise plans and recipes; to award points and deliver gifts; to keep the community safe (moderation, fraud checks); to send reminders you asked for; and, with your permission, to improve recommendations. We do not sell your data or show you third-party advertising based on it.

Who we share it with

• Service providers who host and run the app for us: cloud hosting in India (Mumbai region), SMS and email one-time codes (MSG91), push notifications, and delivery partners for gifts (only the delivery details).
• AI provider (OpenAI): to write recipes, read fridge photos you choose to scan, and check community posts for harmful content. We send only what’s needed for that request.
• Authorities, only where the law requires it.

Where it’s stored and for how long

Your data is stored in India (Mumbai region). We keep it while you have an account. When you delete your account, your profile, habits and history are erased from our servers; some records may be kept for a limited time where the law requires (for example, gift delivery records).

Children

GRP Aura is for people aged 13 and over. Members under 18 can read the community but not post, and can’t share check-in photos.

Your rights

You can see and correct your profile in the app, withdraw optional permissions in Settings, and delete your account at any time (how). You can also ask us for a summary of your data or raise a complaint with our grievance officer, and then with the Data Protection Board of India.

Security

Data is encrypted in transit, access is limited to people who need it, and admin access is protected by two-step verification.

Contact and grievance officer

Questions: support@grpaura.com or +91 62327 25200. Grievance officer: [Name of grievance officer], support@grpaura.com. We reply within 30 days.

Changes

If we change this policy in a way that matters, we’ll tell you in the app before it takes effect.