What is Syntro Health?

Syntro Health is an AI-powered precision clinical nutrition platform that translates medical nutrition therapy (MNT), the Harvard Healthy Eating Plate, and ICMR/NIN guidelines into personalized 7-day cellular diet protocols based on individual biomarkers.

How does cellular nutrition differ from traditional calorie counting?

Cellular nutrition goes beyond caloric intake by optimizing macronutrient ratios, essential amino acid thresholds (leucine trigger for mTORC1), glycemic load, and micronutrient bioavailability, mitigating cellular stress and inflammation.

Which clinical consensus and nutrition guidelines does Syntro Health use?

Syntro Health incorporates peer-reviewed standards from the Harvard Healthy Eating Plate, Shils Modern Nutrition in Health and Disease, Krause's Diet Therapy, ICMR 2020 RDA, and the Indian Food Composition Tables (IFCT 2017).

How does Syntro Health check for drug-nutrient interactions?

Syntro Health cross-references user medications against a database of 25+ pharmacology rules, safeguarding against critical contraindications like statins with grapefruit, warfarin with fluctuating Vitamin K, and levothyroxine with calcium or iron.

Privacy Policy

Last updated: September 27, 2026

1. Data Controller

Syntro Health operates as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act), India. We are committed to protecting your personal data through consent-first design and data minimisation principles.

2. Data We Collect

Category	Data	Purpose
Account	Name, email, hashed password	Authentication & profile
Health Profile	Age, gender, height, weight, activity level, medical conditions, food preferences	Personalised diet plan generation
Usage	Food diary entries, progress tracking, voice/photo food logs	Nutritional tracking & insights
Technical	IP address, browser user-agent, timestamps	Security, rate limiting, abuse prevention

3. How We Use Your Data

Diet Plan Generation: Your health profile is processed by our AI system to create personalised meal plans.
Food Analysis: Images and voice transcripts are sent to Google Gemini API for nutritional analysis.
Progress Tracking: Weight and health metrics are stored to show your progress over time.
Security: IP addresses and login patterns are monitored to prevent brute-force attacks and abuse.

4. Third-Party Data Processing

ℹ️ AI Processing Disclosure: Your health data is processed by Google Gemini (our AI processor) to generate personalised diet plans. This data is transmitted securely and is not stored by the AI service beyond the immediate processing session.

Google Gemini API: Processes health profile data and food images/voice for diet generation and nutritional analysis. Covered by Google's AI data processing terms.
Google OAuth: If you sign in with Google, we receive your name, email, and Google ID. We do not access your Google contacts, calendar, or other data.
Render.com: Our hosting provider. All data is stored on Render's secure infrastructure with SSL encryption.

5. Data Security

All passwords are hashed using industry-standard Werkzeug/PBKDF2 hashing (never stored in plaintext).
All communications are encrypted via HTTPS/TLS.
PostgreSQL connections use SSL (sslmode=require).
CSRF protection is enabled on all forms.
Session cookies are HttpOnly, Secure, and SameSite=Lax.
Rate limiting and brute-force protection are active on all endpoints.

6. Your Rights (DPDP Act)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

Access: Request a summary of your personal data being processed.
Correction: Request correction of inaccurate personal data.
Erasure: Request deletion of your personal data (account deletion).
Withdraw Consent: Withdraw your consent for data processing at any time.
Grievance Redressal: Raise concerns about data processing with our grievance officer.
Nominate: Nominate a person to exercise your rights in case of death or incapacity.

To exercise any of these rights, please contact us via the email provided in Section 9.

7. Data Retention

Account data is retained until you delete your account.
Health profiles and diet plans are retained for the lifetime of your account.
Login attempt records are automatically purged after 24 hours.
Password reset tokens expire after 1 hour and are marked as used.

8. Data Breach Notification

In the event of a personal data breach, we will:

Notify the Data Protection Board of India as required by the DPDP Act.
Notify affected users within 72 hours of discovering the breach.
Take immediate corrective actions to contain and remediate the breach.

9. Contact

For privacy-related questions, data access requests, or grievances, contact the Data Protection/Grievance Officer:

Email: privacy@syntrohealth.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

← Back to Home

Syntro Health Member