Who we are
B2Brand Media Private Limited is the data fiduciary for the Service under the DPDP Act: we decide what personal data is collected and why, and we are responsible for keeping it safe. We are registered in India at Saideep Apartment, Lakshmi Nagar, Amrutdham, Panchavati, Nashik, Maharashtra 422003, India. For any privacy question, write to us at help@indcals.com or call +91 7996033357.
What we collect and why
Each category below is paired with the purpose for collecting it, so you can see the data and the reason side by side.
Profile and body metrics
Age, sex, height, weight, fitness goal and activity level you enter at onboarding and keep current from Settings.
To calculate your personalised calorie and macro targets and to keep your plan accurate as your goal or measurements change.
Weight history
Your logged weigh-ins with dates.
To track progress against your goal and to recalibrate your daily calorie and macro targets (adaptive TDEE).
Meal logs
Every meal you log (by photo, barcode or manually): dish name, the detected or entered items, portion photo where used, and the calorie and macro breakdown attributed to it.
To show you your daily nutrition and to drive the adaptive TDEE and macro-target recommendations.
Medications
Medications you tell us you take (name, strength, dose cadence) and the dates you tick them as taken.
To help you stay consistent with your medication routine and to give context-aware guidance (the AI assistant can reference them when you ask).
Health conditions
Medical conditions or diseases you disclose (optionally with notes), used as context for your health journey.
To keep your calorie and macro advice and AI guidance safe and relevant to the conditions you have told us about.
Blood reports and markers
Uploaded blood-test reports (date, lab, file) and the individual marker readings you track, whether entered from a report or standalone.
To show your lab-metric trends in the Health tab and to let the AI assistant summarise and explain changes over time.
Wearable and daily health metrics
Daily readings from your devices or manual entry: steps, sleep minutes and score, HRV and resting heart rate.
To give you a fuller picture of your daily activity, recovery and sleep alongside your nutrition.
Health-app integrations
Which health platforms (Apple Health, Google Fit, Whoop, Fitbit, Oura) you have connected and when.
To let you control which external devices and health services are linked to your account; connection state only, no health data is pulled through yet.
Account, phone and device basics
Your registered phone number (your login identifier), the platform you use the app on, and push-notification device tokens so we can reach you.
To run your account (phone sign-in), deliver the app to your device and send you the reminders and nudges you opt into.
Consent and your choices
Lawful basis and consent
We process most of your personal data on the basis of your consent, which you give when you create an account, when you use a feature, or when you affirm a specific consent in the app. For limited purposes we rely on other lawful bases the DPDP Act allows, such as complying with a legal obligation or responding to a medical emergency.
Consent is asked for clearly, in plain language, and for a specific purpose. We never use pre-checked boxes, and we do not bundle consent for unrelated purposes.
Health data (blood markers, medications, supplements and conditions) is a sensitive category. We ask for a separate, explicit health-data consent before you store it, and you can use the calorie-logging and weight features without giving that consent.
You can give, refuse or withdraw consent at any time. Refusing or withdrawing consent is as easy as giving it, though it may mean some features stop working.
How consent works
Where we rely on consent, we record what you agreed to and the version of the document you saw. This gives you and us a clear record of your choice.
Some consents are captured when you sign up (the Terms of Use and this Privacy Policy). The health-data consent is separate and is captured before you store health information. The AI guidance consent is captured before the assistant gives health-related guidance.
We only use your data for the purpose you consented to. If we want to use it for a new purpose, we will ask for fresh consent before we do.
How to withdraw consent
You can withdraw any consent at any time from Settings, or by writing to our Grievance Officer at help@indcals.com, +91 7996033357. Withdrawal is as easy as giving consent.
Withdrawing consent stops future processing that relied on it, but it does not affect processing that already happened lawfully. It also does not, by itself, delete data we must keep for a legal reason or data needed for a service you still use.
To remove specific data, use the delete controls where the data lives (for example, delete a meal, a report or a marker). To remove everything, delete your account from Settings > Delete account.
Your data rights
Under the DPDP Act you have the right to access a summary of the personal data we hold about you, to correct it, to ask for it to be erased, to withdraw consent, and to nominate another person to exercise your rights if you die or become unable to act.
You also have the right to a clear, plain-language notice of what we collect and why, and the right to grievance redressal. You should not be subject to a decision based solely on automated processing that significantly affects you, without a way to request human review.
You can exercise most rights directly in the app: edit your profile, correct or delete a meal, weight entry, report, marker, medication, supplement or condition, and delete your whole account from Settings > Delete account.
To make an access, correction, erasure or nomination request, or to ask a question about your rights, contact our Grievance Officer at help@indcals.com, +91 7996033357. We will respond within the time required by the DPDP Act and its rules.
How we share your data
How we share your data
We do not sell your personal data, and we do not share it for advertising. We share personal data only as needed to run the Service, and only with parties who process it on our instructions.
Those parties include our cloud hosting and storage providers, our SMS and notification providers, our payment providers and app stores (for subscription billing), and the health platforms you choose to connect. They may process your data only for the purpose we set and under a contract that requires confidentiality and security.
We may also disclose personal data where the law requires it, for example to respond to a valid legal request, to enforce our Terms, or to protect the safety and rights of our users or the public.
If we are involved in a merger, acquisition or sale of assets, we may transfer personal data as part of that transaction. We will tell you before your data is transferred and becomes subject to a different privacy policy.
How we protect your data
How we protect your data
We use technical and organisational measures to protect your personal data, including encryption in transit, access controls that limit who can reach your data, and logging of administrative access.
No system is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and the affected users in the manner and within the time required by the DPDP Act and its rules.
How long we keep it
How long we keep your data
We keep your personal data only for as long as it is needed for the purpose you consented to, or for as long as the law requires. When you delete a data entry in the app, we remove it from the live system, and it ages out of backups.
When you delete your account, we erase your personal data, including your profile, meals, weight history, health data and consent records, except where we are required by law to keep something for longer.
Records of the AI health responses you were shown are kept in an audit log for a limited period (currently 90 days) so we can review how the assistant behaved, and are then deleted. You can also purge your own AI audit history at any time from Settings > About the assistant & your health data.
We may keep limited records where the law requires it, for example to comply with a legal obligation, resolve a dispute or prevent fraud. Those records are kept only as long as necessary for that purpose.
Health disclaimer
Health disclaimer
IndCals is an informational nutrition and health-tracking tool. It is not a medical device, a clinic or a healthcare provider, and it does not provide medical advice, diagnosis or treatment.
Calorie, nutrient and other estimates produced by the app, including those from a meal photo, are approximations and may be wrong. Reference ranges for blood markers are general information only and may not match the range your lab or doctor uses.
Always talk to a qualified doctor, dietitian or other health professional before acting on anything the app shows, and never delay or ignore professional advice because of it. In an emergency, call 112 in India or go to the nearest hospital.
Complaints and contact
Complaints to the Data Protection Board of India
If you believe we have not handled your personal data in line with the DPDP Act, please raise it with our Grievance Officer at help@indcals.com, +91 7996033357 first so we can try to put it right.
If you are not satisfied with our response, or you prefer to complain directly, you may file a complaint with the Data Protection Board of India (DPB), the body set up under the DPDP Act to hear data-protection complaints.
Complaints to the DPB are made in the manner the Board prescribes, including through its online portal once it is available. We will cooperate with any inquiry and give you the information you need to make a complaint.
Questions, requests and complaints
We have a designated Grievance Officer for data-protection questions and requests. Write to them and we will respond within the time required by the DPDP Act and its rules.
You can also reach our support team at help@indcals.com or +91 7996033357.
Changes to this policy
We will update this policy as the Service or the law changes. Each published version carries a version label and the date it was last updated, and we record which version you accepted.
If a change needs fresh consent, we will ask for it before the change applies to data collected after that point. If you do not agree, you can withdraw consent or delete your account.
Last updated 14 September 2026.