Privacy Policy

1. Who we are

DAIT is a diet-planning and grocery-price-comparison service, operated by Thinkforge LLP. DAIT works out your calorie and protein targets, builds a week of Indian meals around them, and shows you where each ingredient is cheapest across grocery platforms. DAIT is a nutrition and budgeting tool, not a medical service — see our in-app health disclaimer.

2. Scope

This policy covers two things run by Thinkforge LLP:

• the DAIT mobile app, where you create a profile, get plans, log meals and generate shopping lists;
• the dait.in website, including the early-access waitlist form.

When you order groceries through a link DAIT gives you, you leave DAIT and place that order directly with the grocery platform (Zepto, Blinkit, BigBasket, JioMart, etc.) under their own privacy policy and terms — DAIT never sees or handles that transaction.

3. Data we collect

Account information

Your email address and/or phone number, used to create and secure your account (via our authentication provider, Supabase) and a system-generated user ID.

Health & fitness profile

Age, gender, height, weight, activity level, fitness goal and, optionally, body-fat percentage. This is health-related personal data under the DPDP Act. We use it for one purpose only: to calculate your calorie and macro targets and build your meal plan.

Plans, preferences & shopping lists

The meal plans and weekly shopping lists you generate or save; your diet preference (vegetarian / egg / non-vegetarian and which days), weekly grocery budget, allergies and disliked foods, and any meals you log.

Delivery area (PIN code)

The PIN code or area you type in, used to fetch grocery prices that are accurate for your area. The app does not request or read your device's GPS/precise location — we only use the area you enter yourself.

Reminder preferences

If you turn on weigh-in or meal-log reminders, the on/off setting and schedule are stored on your device only (via local notifications) — we don't operate a push notification server and don't collect a device push token.

Website waitlist

If you join the early-access waitlist on dait.in, we collect the email address you submit. The form is processed by our form provider, Formspree, solely so we can email you when DAIT opens in your city.

What we do not collect

• No payment or card data. Grocery orders are placed by you, directly with the grocery platform, on your own account and payment method. DAIT never sees or stores card, UPI or bank details.
• No precise/GPS location — only the area/PIN code you type in.
• No biometric or government-ID data.

4. How we use it

We process your data to: create and secure your account; calculate your targets and build your plan; generate accurate, area-specific shopping lists and price comparisons; let you save, edit and log meals; send you reminders you've opted into; respond to support and grievance requests; and meet our legal obligations. We do not use your data to serve you third-party advertising, and we do not build cross-app tracking profiles.

5. Consent & legal basis

We rely on your consent, given when you create an account and at specific points where we ask for more (for example, your delivery area). You can withdraw consent at any time from Settings → Privacy in the app, or by emailing us (Section 14); withdrawing consent doesn't affect processing we already lawfully carried out, and may mean some features (like an area-priced shopping list) stop working until you provide it again.

6. Who we share it with

We don't sell your personal data. We share the minimum necessary with service providers who process it on our behalf, under contract, to run DAIT:

• Supabase — database and authentication (stores your account and profile data).
• Render — hosts the DAIT API.
• Grocery/price-sourcing platforms (e.g. Zepto, and over time Blinkit, BigBasket, JioMart, ONDC network participants) — we send the ingredient names and the area/PIN code you provide to fetch live prices for your shopping list.
• Affiliate networks (Cuelinks, Amazon Associates) — if you tap a "buy" link for a supported merchant, it may route through an affiliate tracking redirect so we can earn a referral commission. This tells the network which merchant link was clicked; it does not share your DAIT profile, health data or account details with the affiliate network or the merchant.
• Formspree — processes the waitlist sign-up form on dait.in.

We do not currently use any third-party analytics or crash-reporting SDK in the app. If we add one in future, we will update this policy first and, where the DPDP Act requires it, ask for your consent.

We may also disclose data where required by law, court order, or to protect the rights, safety or property of DAIT, our users or the public.

7. Cookies & local storage

dait.in loads webfonts from Google Fonts, which may receive your IP address as part of that request; it does not set advertising or tracking cookies. The DAIT app stores your reminder preferences locally on your device and does not use third-party advertising or tracking SDKs.

8. How long we keep it

We keep your profile, plans and account data for as long as your account is active, and delete them within 30 days of you deleting your account, except where we're required to retain something for longer to meet a legal obligation, resolve a dispute, or enforce our agreements. Waitlist email addresses are kept until you unsubscribe or ask us to remove them.

9. Children & users under 18

DAIT's onboarding currently accepts users from age 13. Under the DPDP Act, anyone under 18 is legally a "child," and processing a child's personal data requires verifiable consent from a parent or lawful guardian. If you are between 13 and 17, please have a parent or guardian create the account and provide that consent on your behalf, including by contacting us at admin@dait.in before or shortly after signup so we can record it. We do not knowingly serve targeted advertising to children, do not track them for behavioural purposes, and a parent/guardian may ask us to access, correct or delete a child's data at any time.

10. Your rights under the DPDP Act

As a data principal you can:

• Access a summary of the personal data we hold and how it's processed;
• Correct, complete or update your data (Settings → edit profile);
• Erase your data by deleting your account, or on request;
• Withdraw consent at any time;
• Nominate another individual to exercise your rights on your behalf (e.g. in the event of death or incapacity); and
• Raise a grievance with us and, if unresolved, escalate it to the Data Protection Board of India.

To exercise any of these, email our Grievance Officer at admin@dait.in. We will respond within the timelines required by the DPDP Act.

11. Security

We use access controls (per-user row-level security in our database), encryption in transit (HTTPS/TLS) and the security safeguards provided by our hosting and database providers. No system is perfectly secure; if a personal-data breach occurs, we will notify the Data Protection Board of India and affected users as required by law.

12. International transfer

Our service providers (Supabase, Render) may process or store data on servers outside India. The DPDP Act permits transferring personal data outside India except to countries the Central Government restricts by notification; we do not transfer data to any such restricted destination.

13. Changes to this policy

We may update this policy as DAIT's features change or the law requires. We'll post the revised version here with a new "Last updated" date, and for material changes we'll also notify you in-app or by email.

14. Contact us

Thinkforge LLP
Grievance Officer / Privacy contact: admin@dait.in

For account or data-deletion requests, you can also delete your account directly from Settings → Privacy inside the app.