Privacy & data protection
How we handle your data, in plain language.
How AamoAI collects and uses personal data across the public site, clinic workspaces, client assessments, meal plans, and member accounts — under the Digital Personal Data Protection Act, 2023.
Viewing terminology for
Overview
AamoAI is the Nutrition Operating System for dieticians, nutrition clinics, and wellness teams. We also serve individuals (members) who use AamoAI directly. This policy explains what personal data we process, why, how long we keep it, and the rights you can exercise under India’s Digital Personal Data Protection Act, 2023 (DPDP) and, where they apply, GDPR / UK GDPR.
Your selected jurisdiction: India · Digital Personal Data Protection Act, 2023. For platform accounts, website visitors, and direct members, AamoAI acts as the data fiduciary. For a clinic’s own clients, the clinic (tenant) is typically the data fiduciary and AamoAI processes that client data as a data processor on the clinic’s instructions.
Who this covers
- Visitors to aamoai.com / aamoai.in — including early-access and contact enquiries.
- Clinic teams — tenant admins, dieticians, and staff who log into a workspace.
- Clients of a clinic — people invited to a client assessment or whose meal plans are managed in that workspace.
- Members — people who subscribe to AamoAI as consumers (member tier plans, meal generation, recipe explorer).
- Platform administrators who operate the AamoAI control panel.
Data we collect
- Identity and contact: name, email, phone, organisation, role, and country.
- Account and billing: login identifiers, workspace membership, member-tier plan, invoices and payment status (card data is handled by the payment processor, not stored in full on AamoAI).
- Client assessment / intake: answers you or a dietician record — goals, activity, dietary preferences, allergies, medical conditions you disclose, life stage, and related notes. This is health-related personal data and is treated as sensitive.
- Nutrition outputs: generated meal plans, swaps, check-ins, weight logs (if enabled), and recipe / ingredient interactions. Nutrient values are computed primarily from ICMR–NIN / IFCT and FSSAI tables; USDA or other foreign databases are used only as labelled gap-fill.
- Usage and device: pages viewed, approximate region, browser, and security logs. IP address and user-agent on intake sessions are retained only for a limited period (see Retention).
- Consent records: essential, health-data, and marketing consent, with timestamps, version, and (where collected) source surface.
How we use it
We process personal data only for specified purposes:
- Provide the product — workspace access, client assessments, meal-plan generation, recipe search, and member features you enable.
- Health-data consent — assessment answers and plan personalisation that depend on health or medical information you choose to share.
- Support and operations — respond to enquiries, rights requests, grievances, and security incidents.
- Billing and contracts — membership and tenant plans, invoices, and usage limits.
- Improve the service — aggregated, de-identified analytics. We do not sell personal data or share it with advertising networks.
- Legal duty — retain records required by tax, accounting, or data-protection law.
Lawful basis (India): consent for optional and health processing; legitimate use / contract for operating the account you asked us to create. Withdrawal of consent does not undo processing already completed.
Retention
- Website / early-access enquiries: up to 12 months from last interaction, then deleted or anonymised — earlier on a valid erasure request.
- Active workspace and member accounts: for the life of the account, then as required to wind down billing and legal holds.
- Client assessment and plan data: held in the tenant workspace until the clinic deletes it or a valid erasure / retention instruction is applied.
- Consent records: kept for the account lifetime and a limited archive period so we can demonstrate what was agreed (default up to 7 years).
- Intake session IP / user-agent: scrubbed after 90 days by automated retention.
Your rights
As a data principal under DPDP, you may:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure (unless we must keep a record by law or for a competing legitimate purpose).
- Ask us to hide your personal details in the product while a request is pending (name/phone masked; login email kept until irreversible anonymisation).
- Withdraw consent (including health or marketing consent) without affecting prior lawful processing.
- Receive a portable copy of data you provided, where technically feasible.
- Nominate another person to exercise rights on your behalf, where the law allows.
- Lodge a complaint with the Data Protection Board of India.
If outstanding invoices or past-due subscriptions exist, you may still request erasure and we will soft-hide your details. Irreversible anonymisation waits until dues are cleared (or an authorised override is recorded). Billing and tax records are retained as required by law. If your data lives in a clinic workspace, we may need to involve that clinic (the data fiduciary) to complete the request. Use the forms at the bottom of this page, Account → Privacy, or email privacy@aamoai.com. We respond within 30 days.
International transfers
Infrastructure may process data outside your country. When that happens we apply appropriate safeguards — Standard Contractual Clauses for EU/EEA and UK transfers, and equivalent contractual protections for data moving to or from India and other regions.
Nutrition is not medical diagnosis
AamoAI helps dieticians and members plan meals using Indian composition tables (ICMR–NIN / IFCT) and FSSAI labelling context. It is not a substitute for a physician’s diagnosis, prescription, or emergency care. Always follow advice from your qualified clinician for medical conditions.
Contact
Privacy questions: privacy@aamoai.com. General contact: hello@aamoai.com. Use the rights-request and grievance forms below to open a tracked ticket.
Submit a data rights request
Ask for access, correction, erasure, portability, consent withdrawal, or nomination. This is optional — you only need it when you want us to act on your data. We respond within 30 days.
DPDP · data principal
Open a rights request
A short form slides in from the right. You can also email hello@aamoai.com.
Lodge a grievance
If you are unhappy with how we handled your data or a rights request, lodge a grievance. Acknowledgement is stamped when we move it to In Progress.
Grievance Officer · hello@aamoai.com
Formal complaint
Lodge a grievance
Tell us what happened and what you expect. We will reply to the email you provide.