Privacy Policy
Last updated: 29 April 2026 · Effective: 29 April 2026
This Privacy Policy explains how Heybobo Private Limited ("HeyBobo", "we", "us", "our") collects, uses, shares, retains, and lets you delete personal data when you use the HeyBobo mobile app and the heybobo.ai website (together, the "Service"). HeyBobo is an AI wellness companion for fitness, nutrition, sleep, skincare, symptoms, and daily habits.
1. Who we are
Data controller: Heybobo Private Limited
Country of operation: India
Privacy contact: privacy@heybobo.ai
Support contact: support@heybobo.ai
2. Data we collect
The table below lists every category of personal data HeyBobo collects, why we collect it, and whether collection is required or optional.
| Data type | Why we collect it | Required? |
|---|---|---|
| Name | Personalisation, account creation | Required |
| Email address | Account creation, password recovery, important notices | Required |
| Phone number | Optional SMS one-time-password sign-in | Optional |
| User ID | Internal account identifier | Required |
| Approximate & precise location | Local weather, UV index, severe-weather and earthquake alerts. Used at the moment you open the relevant feature; not stored on our servers. | Optional |
| Photos | Camera-based food scans, face scans, and the workout Form Mirror. Photos are sent to our server for AI analysis and are not retained after the analysis returns. They are never used to train models. | Optional |
| Health information — vitals you log (BP, heart rate, weight, SpO2, temperature), sleep, mood, symptom checks, medical-vault entries, medications, allergies, conditions | Powering the dashboard and the symptom checker; tailoring nutrition and habit suggestions to your profile | Optional |
| Fitness information — workouts, habits, activity, daily steps and exercise sessions read from Health Connect | Showing your activity in the Fitness dashboard; calculating goal progress | Optional |
| Crash logs & diagnostics | Detecting and fixing app crashes, ANRs, and slow performance | Required |
| Device or other identifiers — installation ID, device model, OS version | Authentication tokens, app stability investigations, anti-abuse | Required |
2.1 Health data — special category
HeyBobo handles health and fitness data, which is a sensitive category under most privacy laws (including India's Digital Personal Data Protection Act, the EU GDPR, and the UK GDPR). This includes:
- Vitals you manually log (blood pressure, heart rate, body weight, SpO2, body temperature)
- Sleep duration and quality you log or read from Health Connect
- Mood entries and journaling
- Symptom checker inputs (body area, symptoms, severity, duration, free-text notes)
- Medical vault entries (medications, allergies, conditions, medical records you choose to add)
- Activity from Health Connect: steps, distance, exercise sessions, active calories, heart rate, sleep, weight
Where it lives: Health and fitness data are stored on your device by default. They are only sent to our server when you explicitly enable cloud backup. Cloud backup is encrypted in transit (HTTPS / TLS 1.2+) and tied to your account.
What we do with it: Display it inside the app; calculate streaks, totals and trends; pass relevant context to our AI assistant when you ask Bobo for advice. The AI assistant runs on our own server (api.heybobo.ai) and the inputs are processed only to generate the requested response. No health data is used to train models.
What we do NOT do with it: We never sell health data. We never share it with advertisers, data brokers, insurers, or your employer. We do not analyse it across users for any commercial purpose.
3. How we use data
We use your data only to:
- Provide app functionality — show your dashboard, run scans, generate plans, send reminders.
- Personalise the experience — tailor nutrition, fitness, skincare and symptom advice to your profile.
- Manage your account — sign-in, password recovery, account deletion.
- Operate the Service securely — fraud prevention, abuse detection, debugging crashes and performance issues.
- Respect legal obligations — when we are legally required to keep records or respond to lawful requests.
4. Sharing
We do not sell your personal data, and we do not share it with third parties for their own purposes. The only places your data leaves your device are:
- Our server at
api.heybobo.ai, operated by us for app functionality. - Public APIs we call to power features, with no user identifier attached: Open-Meteo (weather), USGS (earthquake feed), and (only if you enable it) IP-based geolocation as a fallback when GPS is denied.
- Authentication providers if you choose to sign in with Google or Apple — only the basic profile data those providers return to us during sign-in (your name, email, a stable user ID).
- Government or legal authorities, only when compelled by valid legal process.
5. Encryption and security
All data transmitted between the HeyBobo app and our server is encrypted in transit using HTTPS / TLS 1.2 or higher. Account passwords are stored hashed; we never store them in plain text. On-device data is stored in the operating system's app-private storage; only HeyBobo can read it.
6. Data retention
We retain personal data only as long as needed to provide the Service and meet legal obligations.
| Data | Retention |
|---|---|
| Account record (name, email, phone, profile) | Kept while your account is active. Deleted within 7 days after you request account deletion. |
| Health and fitness data, habit and goal logs (cloud backup) | Kept while your account is active. Deleted within 7 days after account deletion. On-device data is removed when you uninstall the app. |
| Photos sent for AI analysis (food scan, face scan, Form Mirror) | Processed ephemerally and deleted from our server within 24 hours of analysis. Not retained, not used for training. |
| Crash logs and diagnostics | 90 days, then deleted automatically. |
| Bug reports you submit voluntarily | 180 days, then deleted automatically. |
| A minimal record of the deletion event (timestamp, hashed user ID) | 30 days for fraud prevention and audit, then permanently purged. |
| Backups of our server database | Encrypted, kept for up to 30 days for disaster recovery, then rotated out. |
7. Your rights and choices
You can:
- Access all the data tied to your account by emailing privacy@heybobo.ai. We will respond within 30 days.
- Correct inaccurate profile data inside the app, or by emailing us.
- Delete your account and all associated data — open the app, go to Settings → Delete account, or email privacy@heybobo.ai. Full instructions are at heybobo.ai/delete-account. Deletion is completed within 7 days; we permanently purge backups within 30 days.
- Withdraw consent for optional data (location, photos, phone number) by revoking the relevant Android or iOS permission at any time. The app continues to work without the affected feature.
- Opt out of cloud backup — you can disable cloud backup in Settings; your data then lives only on your device.
- Lodge a complaint with your local data-protection authority if you believe we have violated your rights.
8. Account deletion
You can delete your HeyBobo account and all associated data at any time. Two routes:
- Inside the app: Profile → Settings → Delete account.
- By email: privacy@heybobo.ai with subject "Account deletion request" sent from the email tied to your account.
Full step-by-step instructions, including what gets deleted and what we keep (and for how long), are on our delete-account page.
9. Children's privacy
HeyBobo is intended for users 18 and over. We do not knowingly collect personal data from children under 18. If you believe a minor has created an account, contact privacy@heybobo.ai and we will delete the account.
10. International transfers
HeyBobo is operated from India. If you use the app outside India, your data may be processed on servers in India under safeguards required by your local law. We use HTTPS / TLS for all transfers, and we do not transfer your data to third parties in jurisdictions that lack adequate protection.
11. Changes to this policy
We may update this policy as the Service evolves. When we make material changes, we will notify you in-app and update the "Last updated" date at the top. Continuing to use HeyBobo after the change means you accept the updated policy.
12. Contact
Questions, requests, or complaints?
Email: privacy@heybobo.ai
Mailing address: Heybobo Private Limited (please email first; we will share a postal address on request)