Privacy Policy

Last updated: 27 October 2026

This policy explains what information DietoAI and excalatech.com collect, why, and the choices you have.

1. What we collect

Account:

• your name, email address and Google account ID when you sign in with Google.

Profile and health-related details you enter:

• age, sex, height, weight, goals, eating style, allergies, health conditions you select, and optional blood sugar and blood pressure readings. This is sensitive information, and we use it only to run the service for you.

Usage:

• meals eaten or skipped, foods you log, weight and water entries, plans generated, sign-in times and basic device and browser information.

Payments:

• we receive the payment ID, plan, amount, currency and status from Razorpay. We do not receive or store your full card, UPI or bank details.

2. How we use it

We use your information to:

• create and adjust your meal plans;
• run your account and process your plan;
• send emails you expect, such as plan emails, renewal reminders and weekly reports;
• keep the service secure, prevent misuse and fix problems;
• improve DietoAI.

We do not sell your personal information.

3. Who we share it with

We use trusted providers to run DietoAI:

• Google, for sign-in;
• OpenAI, which processes the food and profile details needed to create plans and estimates;
• Razorpay, for payments;
• our web hosting and email providers.

They process data for us under their own terms. We may also share information when the law requires it.

4. Storage and security

Your data is stored on our servers and on your own device (browser storage). We use HTTPS and access controls. No system is perfectly secure, so please keep your Google account secure.

5. How long we keep it

We keep your data while your account is active. You can ask us to delete your account and data at any time. We may keep payment records as long as needed for accounting and legal reasons.

6. Your choices and rights

You can ask to see, correct, export or delete your data by emailing business@excalatech.com. You can stop plan and report emails with the unsubscribe or contact option, or by emailing us.

7. Cookies and local storage

We use browser storage to keep you signed in and to save your preferences and plan on your device. We do not use advertising cookies.

Website traffic analytics

We use first-party traffic analytics on Excalatech and DietoAI to understand public page views, daily visitor estimates, coarse device types and referring website domains. Country is determined from server IP geolocation when available; otherwise it may be estimated from the browser timezone or shown as unknown.

The analytics database does not store full IP addresses, full browser user-agent strings, names, email addresses, planner inputs, health data, payment details, URL queries or URL fragments. It uses a daily rotating, site-specific hash derived from the network address and browser information to estimate visitors. This tracker does not set cookies or a persistent browser identifier, and it does not link analytics to your account. Hosting providers may separately retain access logs.

Analytics records use a rolling 90-day retention period, with cleanup when analytics runs. Only authorised administrators can see reports. The tracker skips browsers requesting Do Not Track or Global Privacy Control. Country and visitor figures are estimates, not precise location or identity information.

8. Children

DietoAI is not meant for children under 13, and users under 18 should use it with a parent or guardian.

9. Changes

We may update this policy and will change the date above.

10. Contact

Privacy questions or requests: business@excalatech.com.