Version 1.1 · Effective 11 October 2026 · Last updated 11 October 2026
In short
We do not sell, rent or trade your data, and we do not show ads.
Your health information is something you enter yourself. We use it to run the app for you.
Docsy and the other AI features send your question and the relevant parts of your logs to an AI provider outside India.
Companions you connect (a partner, family member, friend or caregiver) see your name, your life stage and how you are connected. Nothing else about your health reaches them unless you switch that category on for them.
You can delete your account, and the data in it, from inside the app at any time.
Blushy is not a medical service
Blushy is a health and wellness app. It is not a medical device and does not diagnose, treat, cure or prevent
any condition. Always consult a doctor or other qualified healthcare professional for medical advice, diagnosis
or treatment. See our Terms and the Medical Disclaimer in the app.
1. Who we are
The Blushy mobile app (Android package life.Blushy.flutter), the Blushy web app and this website are operated by
Blushy Healthcare Private Limited, a company incorporated in India with its registered office at
KH No. 621, Silver Oak, Farms Ghitorni, Gadaipur, New Delhi 110030, India
(“Blushy”, “we”, “us”). For the purposes of India’s Digital Personal Data
Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described here.
Sign-in details: your email address and a password, or your identity from Google Sign-In (email address, name and an account identifier). Passwords are stored only as a one-way
bcrypt hash; we cannot read them.
Profile: the name you choose, your date of birth, and whether you use Blushy for yourself or as a
companion. The app no longer asks for a phone number. If you gave one in an earlier version, it stays on your
account, is not used by the app, and is deleted with your account; email us to remove it sooner.
Health and wellness information
Everything in this group is entered by you. Most of it is optional, and the app only asks for what fits the life
stage you choose.
Period dates, cycle and period length, flow, and the cycle predictions calculated from them.
Symptoms, pain, mood, energy, stress, sleep, focus, cravings, hydration, activity and exercise, weight and basal body temperature, and how your cycle affects your work or day.
Answers to wellbeing check-ins, including questions about low mood and anxiety.
Lifestyle details you choose to give, such as whether you smoke or vape, contraception, supplements and medicines.
Your life stage and stage-specific entries:
Trying to conceive: ovulation tests, cervical signs, sexual activity and intercourse timing, and supplements.
Pregnancy: due date, weekly check-ins, symptoms, appointments, a checklist, questions for your doctor and memories you save.
After birth: your recovery, and your baby’s feeds, nappies and sleep.
Perimenopause and menopause: check-ins, symptoms, treatments and questions.
Health conditions you choose to tell us about (for example PCOS, endometriosis, PMDD or thyroid), screenings,
care-plan steps, and your Medical Vault: treatments you are on and health records or lab results you type in.
Nutrition preferences and onboarding answers.
Other people’s details you add
Support circle: if you add people to your support circle, we keep the names, roles and phone
numbers or other details you type in, so the app can show them to you and let you message them from your phone.
Blushy never contacts them and never reads your phone’s address book. Only add people who are happy for you to.
Invitations: if you invite someone by email who does not have a Blushy account, we keep their
email address to deliver the invitation. It is deleted automatically once the invitation expires, 48 hours after it is sent.
Things you write, say or upload
Journal entries, written or spoken, including any photos and voice recordings you add to
them. Entries are kept on your phone and saved in our database with their photos and recordings inside them,
so they survive a reinstall. Photos are shrunk before they are saved.
Voice recordings: when you use the microphone (only with your permission), the audio is sent
for transcription, held in memory for that request only, and discarded; we keep only the text. The one
exception is a voice recording you add to a journal entry, which is saved with that entry.
Conversations with Docsy, our AI assistant, short daily summaries of them, and the
“memory” notes Docsy keeps about the preferences and details you tell it about yourself (for example
your goals, work or hobbies).
Medical reports and photos you send Docsy (PDFs and images such as lab results or scans). The
file is read for that request and not kept. We keep its name and type, and what was read from it: a short
description and any medication names listed in it.
Companion features: invitations, how each companion is related to you, which sharing
permissions you have switched on for each one, chat messages (text only — photos and voice notes cannot be
sent in companion chat), care requests, nudges, letters, shared activities and the shared garden, and journal
entries you choose to share.
Reports on Docsy’s answers: if you report an answer, we keep the answer, the question
before it, the reason you chose and any details you add, so our team can review it.
Reports and blocks in companion chat: if you report a message, we keep its text, the reason and
any details, so our team can review it. If you block someone, we keep a
record that stops the two of you connecting again.
M Studio: digital bouquets you send, time capsules and reflections you write.
Feedback: whether you found an insight helpful.
Settings and in-app notifications: your notification preferences, other app settings, and the
reminders and alerts shown in your in-app inbox.
Collected automatically
Session tokens and sign-in times; your IP address and device or browser user-agent when you sign in, verify
your email, change your password, or give or withdraw consent, and with your consent record also the app version
and platform (kept as a security and consent record). When your password is changed, the security email we send
you includes the IP address the change came from.
Your device’s time zone, so dates and reminders fall on the right day.
Safety warnings: if something you log or ask matches one of our safety warning signs, we record
which warning was shown and when (not your words), so our team can check the safety rules work.
Whether you are online in Blushy and when you are typing in companion chat, shown live to your connected
companions. This is passed on as it happens and not stored.
Records of which features you use (for example, that a period was logged or a feature was opened), stored in
our own database linked to your account but without the health content behind them, and counts of AI usage (for
example, how long a reply was). They are deleted with your account.
What we do not collect
No location. Blushy never requests location permission.
No address book, camera or call data. Blushy never reads your phone’s contacts. Photos are attached only through the system picker, one file you choose at a time.
No advertising. No ads, no ad networks and no advertising identifier.
No third-party analytics or crash-reporting SDKs.
No payments. No card, bank or UPI details.
No device or wearable health data. Blushy does not connect to Health Connect, Google Fit, Apple Health or trackers.
3. How we use it
To create and secure your account, and to keep you signed in.
To run the features you use: cycle predictions, logging, patterns and insights, stage dashboards, your journal,
the doctor summary, Docsy, the AI checkers and companion features.
To send you verification codes, password resets, security notices and invitations you ask us to send, by email.
To keep the service safe: preventing abuse, investigating problems and enforcing our Terms.
To understand which features are used so we can improve them, using these usage records, never the content of your logs.
To keep a record of your consent, as the DPDP Act requires.
We do not use your data for advertising, sell it, or share it with insurers, employers, data
brokers or marketers. We do not use your data to train AI models of our own.
4. Docsy and other AI features
These features send the AI provider what they need to give an answer about you. They run only after you have
accepted this policy, and stop if you withdraw your consent.
Docsy chat: your message with relevant entries from your logs, your cycle and life-stage
information, recent journal summaries, saved memory notes and, if you ask about one, the content of an uploaded
medical report (the text of a PDF, or the image itself).
Daily notes and insights: your name, life stage, cycle day and phase, goals, health conditions,
the symptoms and signals you have logged recently, your due date or baby’s birth date, recent mood and the
topics of your recent Docsy questions.
Discover feed: your life stage, recent Docsy questions and journal summaries, to pick articles for you.
Checkers: the pregnancy symptom checker and food and medicine checker receive what you type and
your pregnancy week; the breastfeeding checker receives what you type, how many days since birth and how you feed.
Plans and follow-ups: your onboarding answers, nutrition answers and check-ins.
Companion features: when a companion uses an AI feature (such as suggested replies, the message
explainer, relationship advice or ideas for how to support you), the AI receives the recent chat between you and
only the categories you have switched on for that companion. Your messages are explained or used for suggestions only
if you have switched on General AI insights for them, and your cycle phase only if you share your cycle.
Our AI provider is OpenRouter, which currently routes requests to xAI’s Grok
model. Voice is transcribed by Groq using the Whisper model. Both are outside India. How long
they keep requests, and whether they may use them, is governed by their own terms; we send only what a request
needs and we do not authorise them to use your data for anything else.
AI answers can be wrong. They are general information, not medical advice.
5. Who we share it with
People you choose
Your companions, as described in section 8.
Anyone you send a doctor summary or a message to using your phone’s share sheet. We do not send
anything to doctors, clinics, insurers or your support circle ourselves.
Service providers who process data for us
Provider
What for
Data involved
Hostinger (Mumbai, India)
Hosting our servers
All data you send to Blushy passes through it
MongoDB Atlas
Database
Account, health and content data
OpenRouter / xAI (Grok)
Docsy and the AI features in section 4
Your messages and the context described in section 4
Groq
Speech-to-text
Voice audio, discarded after transcription
Brevo (EU)
Sending email
Email address, verification codes, message content, and the name of the person who sent an invitation
Vercel
Hosting the Blushy web app, this policy and invitation links
Your IP address and browser information when you open them; invitation codes stay in your browser and are not sent to Vercel
Have I Been Pwned (Pwned Passwords)
Warning you if a new password is known to be leaked
The first five characters of a one-way hash of the password; never the password, your email or your name
Google
Sign-in, only if you choose it
Sign-in token, email, name
Google (fonts, audio files and web engine)
The app downloads its typefaces and some journal ambient sounds from Google servers; the web app also loads its graphics engine from Google
Your IP address and device information, as with any download; no account or health data
Other cases
Legal requirements: when required by a valid court order or binding direction from an Indian
authority, or to protect someone’s safety.
Business transfer: if Blushy is merged or acquired, your data would move only under this policy
or one at least as protective, and we would tell you first.
6. Data processed outside India
Our servers are in India (Mumbai). Your data is also processed outside India by the services we rely on:
our database provider (MongoDB Atlas), email delivery from the EU, web hosting (Vercel), and AI requests to
providers in other countries, including the United States. We do not transfer data to
any country the Government of India has restricted under the DPDP Act.
7. How we protect it
All traffic between the app and our servers is encrypted with TLS (HTTPS).
Our database provider encrypts stored data at rest. Passwords are bcrypt-hashed.
Access to production systems is limited to the people and services that need it. Our logs do not record
your health entries or messages.
Not end-to-end encrypted. Our servers can read what you log. They have to: predictions,
patterns and Docsy all run on the server.
No separate file storage. Blushy does not keep your photos or recordings as files. The only
ones kept are those inside your journal entries, which are stored in the database with the entry.
On your phone. The app keeps a copy of your recent data and your sign-in session in its private
storage so it works offline. That storage is protected by your phone’s app isolation and screen lock; Blushy
does not add its own encryption on top. Signing out, or deleting your account, removes it from the phone.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data
Protection Board of India as the DPDP Act requires.
8. Companions (partner mode)
Companions are optional. A companion can be a partner, a family member, a friend, a co-parent, a doula or a
caregiver, and you can connect more than one. A connection is made only when you send or accept an invitation
(by link, code or email); invitations expire after 48 hours.
Always visible to a connected companion: your name, your current life stage, how they are
related to you, whether you are online in Blushy or typing in companion chat, and the messages, nudges, letters, bouquets
and shared activities you send them.
Only if you switch it on: every one of the thirteen sharing permissions starts off
for each companion: general AI insights, cycle, fertility, pregnancy updates, postpartum updates, energy, symptoms,
mood, sleep, appointments, care requests (such as letting them know you need a pad or are having a high-pain day),
journal and Docsy conversations. Fertility details are never shown to family members or friends. If you share your
cycle, your companion can show your name and today’s phase on a widget on their phone’s home screen; it is
removed the next time their app refreshes after you stop sharing or disconnect.
You can switch any permission off, or disconnect, at any time. What a companion has already read, or written
down themselves, we cannot take back.
9. Your consent
We process your health data because you agreed to it. Before you enter any health information, the app asks
you to accept this policy, the Terms and the Medical Disclaimer, and we record which versions you accepted and
when. If we change this policy materially, we will ask again.
You can withdraw consent at any time in My Health (companions: Profile). After that we stop saving new health entries, stop
sending your data to AI providers (including through your companions’ AI features), and stop showing your shared
health categories to companions, and the health features stop working. You can still see and delete what you logged
before. Withdrawing does not delete anything; to remove your data, delete your account.
10. How long we keep it
Data
Kept
Account, profile, health logs, journal, Medical Vault, support circle, medical report records, companion data, in-app notifications, safety warning records and usage records
Until you delete them or your account
Docsy conversations, their daily summaries and memory notes
Until you clear your chat history in the app, or delete your account
Voice audio for transcription, and files sent to Docsy
Not stored; held in memory for the request, then discarded
Invitations, including the email address of someone without an account
Deleted automatically once they expire, 48 hours after they are sent
Accounts that were never set up (sign-up started but onboarding not finished, and nothing logged)
Deleted automatically after 7 days
Email verification codes
Deleted automatically after 30 minutes
Password reset requests
Deleted when used, or within a day
Reports on Docsy’s answers, reports on companion messages, and blocks
Until you (or the other person, for companion reports and blocks) delete the account
Consent records
For as long as your account exists
Server and security logs
For a limited period by our hosting provider, then overwritten
Database backups
Deleted data can remain in encrypted backups for up to 8 days, until those backups expire
11. Deleting your account
In the app, open My Health (companions: Profile) and choose Delete Account Permanently. You can also use the
account deletion page or email info@blushy.life
from the address on your account.
Deletion immediately and permanently removes your profile, period and symptom history, check-ins, stage
entries, Medical Vault and support circle, journal, medical report records, Docsy conversations, summaries and
memory, the reports you made, M Studio items, companion connections, messages, care requests, shared activities
and invitations, the alerts and nudges you sent to companions, reports and blocks, any community posts from
earlier versions of the app, notifications, safety warning records, consent records and the usage records linked to you, including those
kept under your email address or phone number, and the photos and recordings inside your journal entries. The
app also removes your data from the phone you delete from. Nothing about you is kept in our database. It cannot
be undone.
The only copies that can outlast deletion are in our encrypted database backups, which are kept for 8 days,
then overwritten, and are never used to restore a deleted account.
12. Your rights
Under the DPDP Act and other applicable law you can:
Access: ask for a summary of the personal data we hold about you and who we have shared it
with. Most of it you can already see in the app; for a copy of the rest, email us.
Correct: edit your logs and profile in the app, or ask us to correct anything else.
Erase: delete your data or your account (section 11).
Withdraw consent: in My Health, or Profile for companions (section 9).
Nominate someone to exercise these rights for you if you die or become unable to.
Complain: write to us first. If you are not satisfied, you can complain to the Data
Protection Board of India.
People whose details someone else added (for example to a support circle or an invitation) can also email us to
have them removed.
Email info@blushy.life. We acknowledge requests within 48 hours and
resolve them within 30 days.
13. Age
Blushy is for adults aged 18 and over. Sign-up asks for your date of birth, and Blushy cannot be set
up by anyone younger; this applies to companions as well. We do not knowingly process the personal data of anyone under 18; if we learn that
we have, we will delete it. A parent or guardian who believes a child has used Blushy can contact
info@blushy.life.
14. Changes to this policy
When we update this policy we change the date and version above. For material changes we tell you in the app
before they take effect and ask for your consent again.
15. Contact and grievances
Blushy Healthcare Private Limited
KH No. 621, Silver Oak, Farms Ghitorni, Gadaipur, New Delhi 110030, India
Privacy and grievance contact: info@blushy.life