Mind Your Food
Privacy
Last updated 24 August 2026
This is a health service, so most of what we hold about you is health information. This page says what is kept, why, who can see it, and how to get it back or have it deleted.
What we hold
- Who you are — the email address you signed in with, your name, and your phone number.
- Your assessment — what you told us about your health, goals, allergies, medication and lifestyle.
- Your plan and your log — the meals, movement and supplements Khadija sets, and what you record against them.
- Your consultations — when they were booked, when they happened, how long they ran, and the notes Khadija takes.
- Your payments — the amount, the date, and the reference our payment provider gives us. We never see or store your card or UPI details.
What we do not do
Consultations are not recorded — no video, no audio, no transcript. We do not sell your data, we do not share it for advertising, and we do not use your health records to train anybody's models.
Why we hold it
To give you nutrition care: to write a plan that fits you, to see whether it is working, to keep appointments, and to keep the financial records a business is required to keep. We rely on your consent for the health information you give us, and on the necessity of performing our agreement with you for the rest.
Who can see it
Khadija, and nobody else on the practice side. Beyond that, only the suppliers who make the service run, and only the part each one needs:
| Who | What they handle | Where |
|---|---|---|
| Supabase | the database holding your records | Mumbai, India |
| Razorpay | taking your payment | India |
| Daily | carrying the video call, not storing it | Mumbai region |
| Resend | sending your sign-in codes and emails | outside India |
Your records are stored in India. Sign-in emails pass through a provider outside India, which is why those emails carry a code and never your health information.
How long
Health records are kept while you are a client and for three years afterwards, so that care can be picked up again and so past advice can be accounted for. Financial records are kept for 8 years, as tax law requires. Ask us to delete your account and we delete what we are not required to keep, and tell you plainly what is left and why.
Your rights
Under India's Digital Personal Data Protection Act you may ask for a copy of what we hold, ask for it to be corrected, withdraw consent, or ask for it to be erased. Write to khadija@mindyourfood.co.in from your registered address and we will answer within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.
Keeping it safe
Records travel over HTTPS and are stored with per-client isolation enforced by the database itself, not only by the application. Access is by signed-in session; there are no shared passwords and no unguessable links standing in for a login.
Children
This service is for adults. We do not knowingly take bookings from anybody under 18 without a parent or guardian arranging it.
Contact
Khadija Khatri (also Khadija Junaid), Below Dawood Nursing Home, opposite Sarvi Restaurant, Nagpada, Mumbai 400008, Maharashtra, India. khadija@mindyourfood.co.in