Privacy Policy

1.Who we are

Intelbrook Systems Private Limited (“Astit”, “we”, “us”), Ruby Park, Park Street, Wakad, Pune 411057, Maharashtra, India, is the data fiduciary (the party that decides how personal data is used) for the Service. This policy follows the Digital Personal Data Protection Act, 2023 and the rules made under it, and other applicable Indian law.

2.Who this is about

• Parent users: the older adult who uses the Astit parent app.
• Family members (guardians): the adult children or relatives who set Astit up and see the family dashboard.
• Website visitors and waitlist sign-ups.

The parent’s information belongs to the parent. A family member may only set up Astit for an adult who has agreed to it.

3.What we collect and why

Deletion requests: your email, the time of the request and an optional note, used only to process your request.

Technical data when you request a code: IP address and device or browser type, used for security and to limit abuse.

Health readings (blood pressure, blood sugar, medicines, mood) are sensitive. We collect them only because the family has chosen those check-ins for the parent, and we use them only to run the Daily Pulse and show them to the parent’s linked family members.

When you check a photo, it is sent securely to our AI provider to produce a verdict and is not stored by us. When you speak a question or a Daily Pulse answer, your voice is turned into text by our speech provider; we keep the text, not the recording. A profile photo that a family member adds for the parent is stored until it is replaced or the account is deleted. The spoken verdict is saved as an audio file so the app can play it; it can be reached only through a link that expires within hours.

Back to top

4.How we use it

To give you the Service; to understand and answer what the parent shows or says; to produce the family’s daily summary and alerts; to keep the Service safe, secure and working; to answer your questions and requests; and to meet legal obligations. We do not sell personal data. We do not use data from the Astit app (voice-derived text, photos, health answers, family details) for advertising. Our website uses Meta Pixel to measure our own advertising; you can control this through the cookie banner.

5.Consent

We rely on your consent, and on the permitted purposes the law allows (for example, security and legal obligations). The parent’s consent matters most: the family member must explain Astit to the parent before setup, and the parent agrees in the app. When a family member pairs the app with the parent’s phone, the parent sees a short screen explaining what Astit does and what it saves, and taps ‘I agree’ before anything is recorded or sent. We save the date and time, the version of the screen they agreed to, and their language. If we change the text in a meaningful way, the parent is asked again. The parent can withdraw by telling their family member or writing to reach@astit.ai. You can withdraw consent at any time by contacting us or asking your family member to remove Astit; withdrawing does not undo what we lawfully did before, and some features will stop working.

6.Who else handles your data (our providers)

We use trusted providers to run Astit. They process data only on our instructions.

• Microsoft Azure: cloud hosting, storage, speech-to-text and text-to-speech, and AI language models.
• Sarvam AI: speech recognition for Indian languages.
• Email delivery: Azure Communication Services, to send sign-in and verification codes, account-deletion request emails (the confirmation we send you and the notification to our support mailbox), and summaries.
• Expo: push notifications. The notification text includes the parent’s first name.
• Open-Meteo: weather, using the parent’s city and state.
• Microsoft Azure Front Door: delivers audio, and may keep temporary copies at its edge.
• We do not use any payment or SMS provider at the moment.

We may also disclose data when the law requires it, or to protect someone’s safety. We do not share data from the Astit app with advertisers or data brokers. If you accept marketing cookies, information about your visits to our website may be shared with Meta through Meta Pixel (see section 12). If Astit is ever sold or merged, we will tell you first and your data stays protected by this policy.

Back to top

7.Where data is stored and sent abroad

Your data is stored in Microsoft Azure data centres. Some processing, including AI processing, push notifications and weather lookups, may happen outside India, under the providers’ contractual terms.

8.How long we keep it

We keep your account information and Daily Pulse answers for as long as your account exists. Ask Astit results are kept for 12 months and then deleted automatically. The spoken audio of an Ask Astit verdict is deleted automatically about 7 days after it is created. The written result is kept for 12 months. Our server logs are kept for 90 days. Sign-in and verification codes, including codes that confirm an account-deletion request, expire after 10 minutes. We store only a keyed hash of the code, together with your email address, IP address, device or browser type, and the time. These records are removed automatically about a day after the code expires. You can ask us to delete your family’s data by writing to reach@astit.ai or on our Delete your account page; we will delete it and confirm when it is done. When you ask us to delete your account from our website, we keep your email address and any note you add until we have handled the request (within 30 days). After that we keep only a one-way keyed fingerprint of the email, the status and the dates. Emails you send us, and our own notification emails about deletion requests, are kept in our support mailbox until we delete them.

9.How we protect it

We use reasonable security measures, including access controls so only people who need access can see data, and separate environments for testing, using test data. Data travelling between the app, our servers and our service providers is encrypted in transit (HTTPS). Stored audio and photos are kept in private storage and are shared only through time-limited links. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

10.Your rights

You can ask us to: tell you what personal data we hold and how it is used; correct or complete it; erase it; and give you a way to raise a grievance. You can also nominate another person to exercise these rights if you cannot. A parent can ask for their own data directly, even though a family member set Astit up. To use any right, write to reach@astit.ai or our Grievance Officer below. We will reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India once it is operational under the Act.

Back to top

11.Children

Astit is not for anyone under 18, and we do not knowingly collect children’s data. If you believe a child’s data has been collected, contact us and we will delete it.

12.Website cookies

This website uses a cookie consent tool (Turtle Shield, from Ardent Privacy). Essential cookies keep the site working. If you accept marketing cookies, Meta Pixel (Facebook) records visits to this site and actions such as joining the waitlist, so we can measure and improve our advertising. We do not send your name, email address or phone number to Meta. You can change your choice at any time using “Cookie settings” in the footer.

13.Changes to this policy

We may update this policy. If a change is important, we will tell you in the app or by email before it applies, and update the date at the top.

14.Contact and Grievance Officer

Privacy questions and requests: reach@astit.ai.
Grievance Officer: Kiran Puranik, Director, reach@astit.ai, +91 84590 14611.
Intelbrook Systems Private Limited, Ruby Park, Park Street, Wakad, Pune 411057, Maharashtra, India.

Back to top