Legal
Privacy Policy
Who we are
AloyFit’s website, web application, mobile application, and related services are owned and operated by YSTEM AI Health Solutions Private Limited (“AloyFit,” “we,” “us,” or “our”). YSTEM AI Health Solutions Private Limited acts as the data controller for personal data processed through AloyFit, except where otherwise stated.
Personal information we collect
When you visit AloyFit, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically collected information as “Device Information.”
We may also collect personal data you provide to us (including but not limited to name, surname, and address information) during registration so that we can provide the service.
Health Connect (Android) and Apple Health (iOS)
If you turn on step sync in the AloyFit app, we read your daily step count only.
On Android, AloyFit requests read access to Steps through Health Connect (READ_STEPS). We do not write any data to Health Connect. We do not read other Health Connect data types, such as heart rate, sleep, location, distance, or exercise sessions.
On iOS, AloyFit reads step count through Apple Health on the same terms: steps only, and only after you allow access.
How we use step data
Step counts are uploaded to AloyFit servers and stored with your account so we can show them in your activity log. If you are linked with a dietitian, nutritionist, or other practitioner on AloyFit, they can see this step count as part of your activity log, together with other activity-log information you share through the app.
We use this information only to provide AloyFit’s activity tracking and care features. We do not sell step data. We do not use Health Connect or Apple Health data for advertising, marketing, or user profiling. We do not use this health data to develop, improve, or train generalised or non-personalised artificial intelligence or machine-learning models.
How to turn off health-data access
You can stop AloyFit from syncing steps at any time:
- In the AloyFit app: open Permissions and turn off Health Connect (Android) or Apple Health (iOS) step sync. This stops AloyFit from reading new step totals.
- On Android: open Health Connect → App permissions → AloyFit, and remove Steps access. This is the only way to revoke the system grant. Turning the in-app toggle off does not by itself remove Health Connect permission.
- On iOS: open Settings → Health → Data Access & Devices → AloyFit, and turn off Steps.
After you revoke access, AloyFit will no longer read new step data from Health Connect or Apple Health. Step totals already saved in your AloyFit activity log remain until you change or delete them, or until your account is deleted, subject to the retention rules below.
Why we process your data
Our top priority is customer data security. We process only the user data that is necessary to maintain the website and provide AloyFit. Information collected automatically is used to identify potential cases of abuse and to establish statistical information about website usage. This statistical information is not aggregated in a way that identifies any particular user.
You can visit the website without telling us who you are. If you wish to use some of AloyFit’s features, receive our newsletter, or contact us through a form, you may provide personal data such as your email, first name, last name, city of residence, organization, and telephone number. You can choose not to provide this data, but then you may not be able to use some features. Users who are uncertain about what information is mandatory are welcome to contact us at hello@aloyfit.com.
Information security
We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and disclosure of personal data in our control and custody.
Legal disclosure
We will disclose any information we collect, use, or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Google user data and Google Calendar integration
AloyFit allows dietitians, nutritionists, and other practitioners to connect their Google Calendar to manage consultation appointments.
Google data we access
When a practitioner chooses to connect Google Calendar, AloyFit may access:
- The practitioner’s Google Account email address and basic account information
- Google Calendar identifiers and calendar settings required for integration
- Calendar event information, including event titles, dates, times, attendees, availability, and event identifiers
- OAuth access and refresh tokens required to maintain the authorised connection
How we use Google user data
AloyFit uses this information only to provide appointment scheduling and calendar synchronisation. This includes:
- Creating a Google Calendar event when an AloyFit appointment is scheduled
- Updating the event when an appointment is rescheduled
- Removing or cancelling the corresponding event when an appointment is cancelled
- Checking calendar availability to help prevent scheduling conflicts
- Maintaining calendar synchronisation when appointments are booked while the practitioner is not actively using AloyFit
Google user data is not used for advertising, marketing, user profiling, or purposes unrelated to the calendar integration. We do not sell Google user data.
AloyFit’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and retention of Google user data
OAuth tokens and Google Calendar event identifiers are stored securely only while the practitioner’s Google Calendar integration remains active and for as long as they are required to provide calendar synchronisation.
AloyFit does not retain Google Calendar data indefinitely. When a practitioner disconnects Google Calendar, deletes their AloyFit account, revokes AloyFit’s access through their Google Account, or submits a deletion request:
- AloyFit stops accessing and synchronising Google Calendar data
- Active OAuth credentials and stored Google Calendar data are deleted from our active systems within 5 working days
- Any residual copies contained in routine encrypted backups are removed according to our backup-retention cycle and no later than 90 days after deletion from active systems
Data may be retained for a longer period only where required by applicable law. Any data retained for legal purposes will be isolated from active use and deleted once the applicable retention obligation ends.
Disconnecting access and requesting deletion
Practitioners can stop AloyFit’s access to Google Calendar by:
- Disconnecting Google Calendar from the Integrations section of their AloyFit account
- Revoking AloyFit’s access from their Google Account permissions page
- Deleting their AloyFit account
- Sending a deletion request to hello@aloyfit.com
Requests will be acknowledged and processed within 5 working days.
Disconnecting the integration stops future access and synchronisation. Calendar events already created in the practitioner’s Google Calendar may remain in their Google Calendar account and can be managed or deleted directly by the practitioner.
Sharing and transfer of Google user data
AloyFit does not sell, rent, or transfer Google user data to advertisers, data brokers, or other third parties. Google user data may be processed by authorised infrastructure and service providers only where necessary to operate, secure, and maintain the Google Calendar integration. Such providers process data on our behalf and are subject to appropriate confidentiality and security obligations. Google user data may also be disclosed where required by applicable law.
AI and machine-learning use
Google Workspace API data obtained through the Google Calendar integration is not used to develop, improve, or train generalised or non-personalised artificial intelligence or machine-learning models.
Contact
If you would like to understand more about this policy, or to contact us about your privacy rights and personal information, email hello@aloyfit.com.