HattaKatta
LEGAL

Privacy Policy

Last updated: 30 September 2026

This policy explains how we collect, store and use your data.

What we collect

Photos — important

Assessment photos are cropped on your phone itself. The app asks you to keep your face out of the frame, and the photo is re-created so that any hidden location and date information is removed. Meal photos uploaded to the diet log are used only to make the estimate and are not stored. Assessment photos are kept in private storage — only you and your own trainer can see them, and the viewing link expires automatically after a short time. You can delete them at any time.

Use of AI

To create your plan, your assessment information (photos, body measurements and goal) is sent to an AI service (Google Vertex AI). We use a paid plan under which Google does not train its models on this data. An AI-generated plan does not go directly to you — your trainer first reviews and edits it.

Google Vertex AI is also used to check that a profile photo shows a real face, and (Gemini) to estimate calories and protein from a meal photo that you upload to your diet log.

What we do not do

We do not sell your data. We do not share it with anyone for advertising.

Who can see your data

How long we keep it

For as long as your account exists. If you delete your account or photos, we remove them, except for records that the law (for example, tax law) requires us to keep.

Your rights (DPDP Act 2023)

You can access, correct or delete your data — in the app through Profile → Edit, or by writing to us. You can withdraw your consent for health/body data and for offers at any time. Your account is deleted from within the app (Profile → Delete account). For any complaint about your data, contact the Grievance Officer — we respond within 48 hours.

Data security

Your data is stored in encrypted form on servers (Supabase, AWS Mumbai); each user can read only their own data (database-level rules). In the event of a data breach, we will notify affected users and the relevant authorities as required by law.

Children

The Platform is for users aged 18 and over; we do not knowingly collect data from anyone under 18.

Business details

Legal entity: Karan Gupta (sole proprietor)
Operating address: Noida, Uttar Pradesh, India
Email: karangupta.bizz@gmail.com
Phone: +91 99222 76345
GST: N/A (not GST-registered)