Your data, your choices.

Who we are

SwastriCare is operated by Onwords, Coimbatore, India. This policy describes the SwastriCare mobile app and its connected services. Contact ceo@onwords.in with privacy questions or requests.

Information we handle

We handle account and profile details, health information you add or import, and information needed to operate the app. This can include family profiles, medical documents and prescriptions, vitals, medicines, meals, activity and workout records, reminders, AI conversations and the files you submit for analysis.

With your device permissions, the app can access supported Apple Health or Health Connect readings, selected photos, and location for features such as recorded workout routes. We also handle device, session, notification and app-usage information for delivery, troubleshooting and security.

The app uses our own usage records for analytics and Firebase for crash and performance diagnostics, including app interactions, installation and session identifiers, and device and app information. Earlier app versions also use Firebase Analytics; some Android medication events included medication names. Version 1.3.2 disables Firebase Analytics collection. Optional voice input uses the device speech-recognition service, which may process audio remotely; SwastriCare receives the recognized text.

How we use information

We use information to provide your account, health records, activity summaries, reminders and AI features; synchronize the information you choose to store; provide the sharing features you select; and maintain the reliability and safety of SwastriCare. We do not sell personal or health data or use health data to target advertising.

Apple Health and Health Connect

Access to platform health readings depends on the permissions you grant. You can change these permissions in your device settings. Imported readings can remain in your SwastriCare account after permission is withdrawn; remove the relevant records or request account deletion to remove our stored copies. Deleting SwastriCare data does not delete the original readings held by Apple Health, Health Connect or another connected service.

Sharing and service providers

Family health access and optional Crews activity sharing are separate controls. Crews shares the activity information you choose through its sharing settings; it does not grant access to your family medical vault. Information may be shared with people or care providers through the features and permissions you select.

We use service providers for hosting, authentication, storage, notifications and AI processing. When you use AI or document-analysis features, relevant prompts, conversation context, health information or submitted files may be sent to MiniMax or Google services to provide a response. Their processing and retention terms also apply. We may disclose information where required by law or necessary to investigate abuse and protect the service.

Weather features can send coordinates to OpenWeather. Medicine search can send the search query to the US Food and Drug Administration openFDA service. Firebase, speech-recognition, weather and search providers apply their own processing and retention terms. We do not promise that their copies are deleted immediately when a SwastriCare account is deleted.

Daily and workout photo cards

Photos selected for a share card are processed on your device. Creating a card does not upload that selected photo to the SwastriCare server. The rendered card is handed to the destination you select through the device share sheet. Temporary card images can remain in app storage or cache until removed by the app, the operating system or clearing the app data; they do not have a guaranteed 24-hour expiry.

A card you save or send, and any copy held by its recipient or another app, is outside SwastriCare account deletion. Manage those copies in the destination app or ask the recipient to remove them.

How long we retain data

Account, profile, health, medical-vault and conversation information stored in SwastriCare is retained while your account exists so we can provide your records and the features you use, unless you delete it sooner through a supported record-deletion feature. There is no automatic inactivity-based expiry for these account records.

Some individual workout deletions hide the record and retain a deletion marker or stored row for synchronization. Those retained activity records are removed when their owning profile or account is deleted.

Temporary device caches and exported cards follow the device and app cleanup behavior described above. Uninstalling the app or withdrawing a health permission alone does not delete data already stored in your SwastriCare account.

Support and privacy-request correspondence is retained to handle the request, record its outcome and resolve related disputes or legal obligations. Contact ceo@onwords.in if you want us to review that correspondence for deletion.

Request account and data deletion

In the app, open Profile or Settings, choose Delete Account and confirm. You can also request deletion without installing the app by emailing ceo@onwords.in with the subject SwastriCare account deletion and the email address or phone number linked to your account. Do not send your password or medical documents. We may ask you to verify that the account is yours.

Completed account deletion removes your sign-in account, the health profiles and records owned by that account, and its owned medical-vault files from the active service. The app confirms completion only after the deletion service reports success. If it reports a failure, deletion may be incomplete; retry or contact ceo@onwords.in so we can finish the request.

Records owned by another family member, clinic or other account are not deleted merely because they refer to you. Your attribution or access links are removed where supported. Contact us to request review of personal information in someone else's record.

Open account deletion instructions

Information that can remain after deletion

Moderation and abuse reports can remain for safety investigations after direct account links are removed. Report text and older usage records whose account link was previously cleared may still contain personal information; removal of an account link does not make every retained record anonymous. These residual records have no fixed automatic expiry. We review deletion requests for them against ongoing safety, dispute-resolution and legal needs, and remove information when those needs no longer apply.

Our current Supabase Pro configuration retains daily database backups for 7 days and project infrastructure logs for 7 days. Deleting an account does not erase an individual record immediately from an existing backup or log. Those copies expire through the normal retention cycle and are kept for recovery, diagnostics and security rather than as an active user account.

Copies already sent to recipients, independent care providers, platform health stores or AI providers follow those services' retention and deletion rules. Contact us for help with a request involving a provider we use.

Storage, security and AI provider retention

Our primary Supabase database is hosted in Singapore. Other service providers may process information in other countries. We use authenticated access, restricted storage access and encrypted network connections to protect information; no service can guarantee absolute security.

We do not claim that AI providers store no data. Google states that Gemini API prompts, context and responses can be retained for 55 days for abuse monitoring. MiniMax states that it retains information for the purposes of providing and securing its service and meeting legal requirements, without one fixed duration for every category. These provider rules are separate from deleting your SwastriCare account.

Your choices and privacy requests

You can review and correct information using available app controls, change device permissions, manage family or Crews sharing, and request access or deletion by emailing ceo@onwords.in. We will explain any identity checks, records requiring separate handling, or lawful reason that affects a request. Material changes to these practices will be reflected in this policy and the in-app policy date.

Service provider information

• Supabase privacy information
• Supabase database backup schedule
• Google privacy policy
• Gemini API abuse-monitoring retention
• MiniMax API privacy policy

Privacy contact: ceo@onwords.in.