Privacy Policy

This Privacy Policy explains how KST Infotech Pvt. Ltd., the owner and operator of the Arogita Wellness & Lifestyle Platform ("Arogita", "we", "us", or "our"), collects, uses, stores, shares, protects, and otherwise processes your personal data when you access or use our website, mobile applications, and related services (collectively, the "Services").

By accessing or using the Services, or by creating an account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Services.

This Privacy Policy describes how personal data, including health and wellness information that you choose to provide or authorize us to access, is collected, used, shared, retained, and deleted. It is intended to align with the Digital Personal Data Protection Act, 2023 (DPDP Act), applicable Google Play and Apple App Store requirements for health and fitness applications, and other applicable laws and regulations.

Arogita helps users understand, monitor, and improve overall well-being by combining health data, lifestyle tracking, and personalized wellness recommendations. Depending on permissions, integrations, and settings, the Services may include:

• Activity and Fitness — steps, workouts, movement, distance, calories, and related fitness metrics.
• Nutrition and Weight Management — meal logging, nutrition tracking, weight-related goals, and lifestyle guidance.
• Sleep Management — sleep duration, quality/efficiency indicators, recovery insights, and related recommendations.
• Period Tracking — menstrual cycle logging and related wellness insights, where you choose to use this feature.
• Wellness Insights and Lifestyle Management — Health Score / wellness summaries, personalized recommendations, reminders, wellness challenges, and secure management of the wellness data you provide or sync.

These features are for wellness and informational purposes only. Arogita is not a substitute for professional medical advice, diagnosis, or treatment.

Our application may access health and fitness information through Android Health Connect after receiving the user’s explicit permission. Depending on the features used, this may include activity, steps, distance, calories, heart rate, sleep, and other health information required to provide the application’s health and wellness features.

We request only the Health Connect permissions needed for the features you use. You can review, change, or revoke Health Connect permissions at any time in your Android settings or within Health Connect. If you revoke access, we will stop collecting new data from Health Connect; previously collected data remains subject to this Policy until deleted under Section 12.

• Purpose: displaying your health and fitness information in the app and providing corresponding Arogita functionality (dashboards, Health Score, progress tracking, recommendations, and related wellness features).
• Collection: Health Connect data is read from your device only after you grant permission and connect Health Connect in the app.
• Use: to show your metrics, sync history across your Arogita experience, and improve feature reliability.
• Sharing / transmission: Health Connect and other health data you sync or enter may be transmitted to our secure backend servers so we can store your profile, sync across devices, and provide account-based features. We may also process this data through trusted infrastructure and service providers (for example hosting/cloud) under contractual security obligations. We do not sell Health Connect data. We do not share Health Connect data with unrelated third parties for their own advertising. Connected platforms you choose (and SDKs listed in Section 9) may process limited data as described below.
• Control: you may disconnect Health Connect, revoke permissions, or request deletion of your account and associated health data as described in this Policy.

On iOS, with your permission, Arogita may read health and fitness data from Apple Health / HealthKit and from other supported wearables or platforms you connect (such as Fitbit, Garmin, Samsung Health, or similar).

Purpose, use, backend transmission, and sharing principles for this data are the same as described for Health Connect in Section 3: to display your information and provide app functionality, with storage/processing on our secure servers as needed to operate the Services.

Depending on how you use the Services and which permissions you grant, we may access and collect:

• Account and identity data — name, email address, phone number, password or authentication identifiers, profile photo, age/date of birth, and gender (if provided).
• Contact and support data — messages sent through demo forms, in-app support, or email.
• Activity and fitness data — steps, distance, workouts, activity minutes, calories burned, heart rate (if available), and related fitness trends.
• Nutrition and weight data — food logs, macros/calories, hydration, weight, BMI-related inputs, and nutrition goals.
• Sleep data — sleep times, duration, efficiency/quality indicators, and related recovery metrics.
• Period / cycle data — cycle dates, symptoms, or notes you enter if you use period tracking features.
• Health and wellness summaries — Health Score, lifestyle indicators, personalized recommendations, and engagement with wellness challenges or programs.
• Health platform / wearable data — information synced from Health Connect, Apple Health, and other connected sources you authorize.
• Device and technical data — device model, OS version, app version, IP address, device identifiers, crash logs, diagnostic data, and usage analytics needed to operate and secure the app.
• Permissions-based data — location, motion/fitness sensors, notifications, camera/photos, or storage only when you grant permission and the feature requires it.

We access and collect personal data from:

• You — when you register, enter health or lifestyle information, or contact us.
• Your device — sensors and OS health frameworks you authorize (Android Health Connect, Apple Health / HealthKit).
• Connected wearables and third-party health platforms — when you link them in the app.
• Automatically — cookies or similar technologies on our website, and app analytics/crash tools that help us operate and improve the Services.

We use personal and health data for the following purposes:

• Displaying your health and fitness information and providing the corresponding app functionality.
• Operating dashboards, Health Score, reminders, and wellness challenges.
• Supporting Activity and Fitness, Nutrition and Weight Management, Sleep Management, Period Tracking, and Wellness Insights and Lifestyle Management features you use.
• Syncing and storing data you authorize so it is available when you sign in on supported devices.
• Responding to support requests, demo inquiries, and account-related communications.
• Maintaining security, preventing fraud/abuse, troubleshooting, and improving performance and reliability.
• Complying with legal obligations under the DPDP Act 2023 and other applicable laws.
• Sending service notices and, where you consent, product updates or promotional messages (you may opt out of marketing).

Under the DPDP Act 2023, we process personal data based on your consent and/or other lawful grounds permitted by law, including performance of a contract and compliance with legal obligations.

Sensitive health and wellness data (including Health Connect, Apple Health, activity, nutrition, sleep, period, and related wellness information) is processed based on your consent and the permissions you grant on your device. You may withdraw consent or revoke permissions at any time through the app settings, Health Connect / Apple Health settings, your device settings, or by contacting us. Withdrawal does not affect processing already completed lawfully before withdrawal.

We do not sell your personal data or Health Connect data. We do not share health data with third parties for their independent advertising or marketing.

However, providing cloud-based and account-based features means some data is transmitted and processed as follows:

• Our backend / servers — account data and health/fitness data you enter or sync (including Health Connect data, where authorized) may be sent to our secure servers operated by or for KST Infotech Pvt. Ltd. so we can store your information, sync across devices, and deliver the Services.
• Service providers / processors — hosting and cloud infrastructure, analytics, crash reporting, customer support, and email delivery partners may process data on our behalf under contractual confidentiality and security obligations. They are not permitted to use your health data for their own purposes.
• Connected platforms you choose — when you sync with Health Connect, Apple Health, or other wearables/platforms, data moves according to your settings and those platforms’ policies.
• Legal and safety — when required by law, regulation, court order, or to protect rights, safety, and integrity of users or the Services.
• Business transfers — in a merger, acquisition, or reorganization, subject to continued protection consistent with this Policy.

If our Google Play Data Safety form lists specific SDKs or data types, those disclosures are intended to match this Policy. If you have questions about a specific SDK, contact us at the email below.

The Services may use or integrate with third-party health platforms, wearable providers, and technical SDKs (for example analytics or crash reporting). Their processing of your data is governed by their own privacy policies in addition to this Policy.

Google Play and Apple may also collect certain information related to app distribution under their respective policies.

Please review permissions carefully before connecting third-party services. We are not responsible for the privacy practices of third parties we do not control.

We use technical and organizational measures designed to protect personal and health data, including encryption in transit and at rest where appropriate, role-based access controls, audit logging, secure authentication, and ongoing monitoring of our systems.

Access to health data on our systems is limited to personnel and processors who need it to operate the Services. No system is 100% secure. Please use a strong password, keep your device updated, and notify us promptly if you suspect unauthorized access to your account.

We retain personal and health data only as long as needed to provide the Services, fulfill the purposes in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer required, we delete or anonymize it according to our retention practices.

Account deletion: If you create an account, you may delete your account and request deletion of associated personal and health data by:

• Using in-app account settings / delete-account controls where available; or
• Emailing support@kstinfotech.com with the subject “Delete Arogita Account” from the email address registered to your account.

After we verify your request, we will delete or anonymize your account data and associated health data within a reasonable period (typically within 30 days), except where we must retain limited information for legal, security, fraud-prevention, or accounting purposes. Revoking Health Connect or Apple Health permission stops new syncing but does not by itself delete data already stored in your Arogita account—use account deletion or a privacy request for that.

As a Data Principal, you may have the right to:

• Access a summary of your personal data.
• Correct inaccurate or incomplete personal data.
• Request erasure of personal data, subject to legal exceptions.
• Withdraw consent where processing is based on consent.
• Nominate another person to exercise rights on your behalf in case of death or incapacity, as provided under applicable law.
• Raise a grievance regarding our handling of your personal data.

To exercise these rights, email support@kstinfotech.com with the subject “Privacy Request — Arogita”. We will respond in accordance with applicable timelines under the DPDP Act 2023.

The Services are intended for users aged 18 and above (or the age of digital consent under applicable law). We do not knowingly collect personal data from children without verifiable parental or guardian consent where required. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.

Your data may be processed on servers or by service providers located in India or other countries. Where data is transferred across borders, we take steps designed to ensure an appropriate level of protection consistent with applicable law.

Our website may use cookies and similar technologies to remember preferences, measure performance, and improve user experience. You can control cookies through your browser settings. Disabling certain cookies may affect how the website functions.

Arogita provides wellness tracking, insights, and educational information. It does not provide medical care and is not intended to diagnose, treat, cure, or prevent any disease. Decisions about your health should be made with a licensed healthcare professional. In an emergency, contact local emergency services immediately.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date on this page and, where appropriate, notify you in the app or by email. Continued use of the Services after an update becomes effective means you accept the revised Policy.

For privacy questions, Data Safety / Health Connect questions, data rights requests, account deletion, or grievances related to Arogita:

• Company: KST Infotech Pvt. Ltd.
• Product: Arogita (Google Play & Apple App Store)
• Email: support@kstinfotech.com
• Website: https://kstinfotech.com/
• Location: Chennai, India