Privacy policy

Who we are

Alpha Food & Nutrition is a paediatric nutrition service in India for children aged 11 to 16. A parent or legal guardian holds the account; the child never signs in on their own.

What we collect

Parent details: name, email address, phone number and the sign-in details needed to keep your account secure.

Child details you give us: name, date of birth, sex, height, weight, foods they like and dislike, allergies, health conditions, medicines and the daily routine needed to plan meals.

Records we create while caring for your child: consultation notes, meal charts and their versions, daily menus, meal feedback (ate / partly / refused) and change requests.

Payment records: plan, amount, date and payment reference. We do not store card numbers.

Why we use it

Only to plan, review and deliver your child's nutrition: to build the meal chart, send the next day's menu each evening, review growth, and answer your requests.

We do not sell your data, show advertising, or use your child’s information to train outside AI models.

Who can see it

Your child's assigned nutritionist or dietitian, and the clinic team who run the service. Each person sees only what their role needs, and every view of a child's record that changes something is written to an audit log.

We use trusted service providers to host the app and database. They process data only on our instructions.

What nutritionists never see

Your child's nutritionist does not see your child's name, date of birth, school, or your name, phone number, email or address. They see only an anonymous ID generated by the system from the child's class, age band and sex, plus the health, food and growth information needed to plan meals.

Messages and video consultations with your family are routed through the app, and the nutritionist sees the same anonymous ID. Nutritionist accounts use a clinic email address created for them, never a personal one.

Where your data is stored

Our database is hosted by Supabase on Amazon Web Services in India (ap-south-1, Mumbai). The app itself is served by Vercel. Data is encrypted in transit (HTTPS) and at rest.

Emails are sent through Resend and video consultations run on Daily.co; each receives only what it needs (an email address and message, or a private call room). These providers may process that limited data outside India. Transfer outside India is permitted under the DPDP Act, 2023 except to countries the Government of India restricts. If that changes we will move the data and tell you.

Grievance officer

If you have a concern about how your or your child’s data is handled, write to our grievance officer. Their name and contact are shown in the notice you accepted at sign-up and on the Data privacy page in your account. We reply within 7 days and resolve within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

How long we keep it

For as long as your plan is active, and afterwards for as long as the law requires us to keep clinical and payment records. You can ask us to delete your family’s data at any time (see Data privacy).

Your consent

We ask for your consent as the parent before we collect your child's health information, and you can withdraw it from the Consents page in your account. Withdrawing consent stops new planning; it does not undo care already given.