The short version: Saumya keeps your health data on your device. Anything backed up is encrypted first, with a key that never leaves your phone — so even we can’t read it. We never show ads or sell your data, and you can delete everything at any time. Saumya is a wellness & education companion — not a medical device and never a diagnosis.
Saumya (“Saumya”, “we”, “us”) is a private wellness and education app that helps people understand PCOS (polycystic ovary syndrome). This policy explains what we collect, how we protect it, and the choices you have. Questions? Email hello@mrbooz.com.
What we collect
- What you log — the wellness details you choose to enter: mood, energy, symptoms, bleeding/cycle days, private notes, medications, and (optionally) progress photos. This is sensitive personal health data, and we treat it that way.
- Basic app data — an anonymous account identifier created automatically, your settings (language, reminders, lock), and your subscription/purchase status.
- What we never ask for — your name, email, phone number, or date of birth. Your account is anonymous by default.
How your data is stored and protected
- On your device first. Your logs live on your phone. The app works fully even with no account and no connection.
- Encrypted before any backup. If cloud backup is available, your health data is encrypted on your device using AES‑256 with a key generated on your phone and stored only in the operating system’s secure keystore (iOS Keychain / Android Keystore). That key never leaves your device, so the backup we store is ciphertext that we cannot read.
- Progress photos stay local. Any photos you add are kept on your device and are never uploaded.
AI-generated insights
Your daily reads and pattern explanations are written by an AI service (OpenAI) through our secure server. We send it only anonymous, coarse signals — for example your approximate cycle phase, a few recent symptom categories, a mood/energy level, and the focus areas you picked. We never send your name, dates, free‑text notes, photos, or anything that could identify you.
What we do not do
- No ads. Saumya contains no advertising.
- No selling or sharing. We do not sell, rent, or share your personal data with advertisers or data brokers — ever.
- We use a small set of processors solely to run the app (secure cloud hosting and the AI service above), bound to protect your data and use it only to provide the service.
Your choices and controls
- Delete everything, anytime. “Delete my data” in Settings wipes your data from your device and from our servers.
- Lock the app behind your fingerprint or face.
- Access & rights. Under laws such as India’s DPDP Act and the EU GDPR you may request access to or deletion of your data. Because we hold only encrypted, anonymous data with no contact details, the fastest route is the in‑app delete; you can also email us.
Children
Saumya is intended for adults and is not directed to children under 16. We do not knowingly collect data from children.
Not medical advice
Saumya is a wellness and education tool. It is not a medical device, does not provide a diagnosis, and is not a substitute for professional medical care. Always talk to a qualified clinician about your health, and seek emergency care for urgent symptoms.
Changes
We’ll update this page if our practices change and revise the date above.