Upavāsa

Privacy Policy

Last Updated: September 9, 2026

At Kriyacode Technologies LLC, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information when you use Upavāsa: Yoga Fasting Tracker and its related services.

1. Information We Collect

A. Information You Provide Directly

  • Account & Profile: Email address, display name, date of birth, gender, and fasting experience level.
  • Physical Metrics: Weight, goal weight, and height, used to calculate BMI and personalized fasting recommendations.
  • Onboarding Survey: Answers about your wellness persona, self-reported health conditions/contraindications (e.g. diabetes, pregnancy, eating disorder history), and fasting goals — used to gate unsafe fasting recommendations and personalize your plan.
  • Fasting Activity: Fast start/end times, chosen protocol (16:8, 18:6, 20:4, OMAD, Extended, or custom), break-fast entries, hunger/craving check-ins, and optional Challenge Plan progress.

B. Device-Level Sensitive Data

  • Voice Check-Ins: With your explicit permission, we access your device's microphone to record short voice reflections during a fast (e.g. hunger/energy notes). The recording is transmitted securely to our backend for transcription into text and is not retained as an audio file by our servers once transcribed; the resulting text becomes part of your check-in history.
  • HealthKit (iOS) / Health Connect (Android): With your permission, we read wearable/health data — heart rate variability, sleep stages, active energy, and resting heart rate — to compute fasting-related biomarker insights. We only write fasting session events back to Health Connect/HealthKit; we do not read data unrelated to fasting.
  • Biometrics: The app supports Face ID / Touch ID / Android biometric login as a convenience for signing back in. We do not collect, store, or transmit your raw fingerprint or facial-scan data — biometric verification happens entirely on your device via the operating system's native APIs.

C. Automatically Collected Data

  • Usage Statistics: Session durations, feature interactions, streak/consistency data, crash logs, and diagnostics.

2. How We Use Your Information

We process your personal data for the following purposes:

  • To recommend a safe fasting protocol and duration based on your profile and self-reported health conditions.
  • To track your fasting history, streaks, and metabolic-stage progress (e.g. ketosis, autophagy).
  • To generate optional Ayurvedic/yogic guidance ("Ancient Wisdom") alongside your fasting plan, when that feature is enabled.
  • To transcribe and store your voice check-ins as text.
  • To sync fasting-relevant biomarkers with Apple Health / Health Connect.
  • To process subscription purchases and manage your Plus/Pro entitlements.
  • To send push notifications for fasting milestones and reminders (which you can disable in Settings).
  • To verify your identity using biometric authentication keys.

3. Data Storage & Security

  • Local Storage: Authentication tokens and biometric login keys are stored securely on your device using the operating system's keychain/keystore.
  • Backend Databases: Profile data, fasting history, and check-ins are stored on secure servers using PostgreSQL/TimescaleDB.
  • Encryption: All data transmitted between the app and our APIs is encrypted using Transport Layer Security (TLS).

4. Sharing Your Information

We do not sell, rent, or lease your personal or health data to third parties, and we do not use it for third-party advertising. We share data only with service providers strictly necessary to operate the app — cloud hosting, voice transcription, push notification delivery (Firebase Cloud Messaging), and app-store payment processors (Apple/Google) — under confidentiality obligations, and solely to provide the service.

5. Your Rights and Choices

Depending on your location, you may have rights under privacy laws (such as GDPR or CCPA) to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your account and fasting history at any time via Settings → Account → Delete Account in the app, or via our web deletion request form.
  • Revoke permissions for HealthKit/Health Connect, biometrics, or microphone access at any time in your device's system settings.

6. Children's Privacy

Our Services are not designed for or targeted to children under the age of 18. We do not knowingly collect personal data from anyone under 18.

7. Contact Us

For any questions regarding this Privacy Policy or our data practices, please contact us at [email protected].