Legal
Privacy Policy
Masala Health is an on-device personal health tracker. The app collects and stores the following categories of information locally on your iPhone:
Almost everything. Health records, visit recordings, lab history, profile data, and AI conversation history stay on your iPhone, where iOS encrypts them at rest through its built-in file protection. None of this is uploaded to our servers or any third-party cloud.
There is no Masala Health account, no sync server, and no backup service. If you lose or erase your device, that data is gone unless you maintain an encrypted local iPhone backup through iTunes/Finder.
Two things may leave your device, both only when you initiate them:
When you use the Ask feature, the app constructs a prompt from the relevant context in your records. Before that prompt leaves your device, an on-device redaction step replaces names with neutral aliases (for example, "Person A"), converts specific dates into relative references (for example, "about 3 months ago"), and removes identifiers such as Social Security, medical record, and account numbers, email addresses, phone numbers, street addresses, and ZIP codes. Clinical values, units, and lab codes are preserved so the answer is useful. This redaction meaningfully reduces the risk of re-identification, but it is a best-effort safeguard rather than a formal de-identification — some health context still leaves your device.
The redacted prompt is sent over HTTPS through our relay to Gemini Enterprise — Google's HIPAA-eligible enterprise AI platform, hosted on Google Cloud in a US region. Under our Gemini Enterprise terms, Google processes the redacted prompt to generate a response and does not use your prompts or the model's responses to train its models. Google may retain the redacted prompt for a limited period for abuse and misuse monitoring before deleting it, as described in Google Cloud's service terms. Our relay forwards the request without storing it and keeps only operational metadata — timestamp, status, latency, and model name — never the contents of your prompts or responses. The response is returned to your device and stored locally.
The redacted prompt may include the following categories of information, with names aliased, dates relativized, and SSN/MRN/account numbers, email addresses, phone numbers, street addresses, and ZIP codes stripped before sending:
We do not send full record exports or unredacted personal health information to any AI service.
If you choose to share a visit recap, pre-visit brief, or other summary — via iMessage, Mail, or any other app — that content leaves your device through the iOS share sheet, exactly as you'd expect when sharing any document. You control what is shared, with whom, and when.
Masala Health integrates with Apple HealthKit to read health records you have authorized. We use this data solely to power the features you see in the app — tracking, trending, and the Ask layer.
These restrictions are required by Apple and reflect our actual practice.
Recording indicator. Whenever the app is actively recording audio, a red microphone indicator is visible in the app interface and in the iOS status bar. Recording never begins without a deliberate tap.
If you are in a jurisdiction that requires all-party consent for recording conversations, you are responsible for obtaining that consent before recording a medical visit.
Masala Health is designed to be used by an adult managing health records for themselves and their family, which may include minors. The app is not directed at children under 13 as independent users, and we do not knowingly collect personal information directly from children under 13. Pediatric health records managed within a family profile are subject to the same on-device storage and protections described above.
Your data lives on your device for as long as the app is installed. You can delete individual records, profiles, recordings, and conversations from within the app at any time. Deleting the app removes all locally stored data.
Because we do not operate a cloud backend for your health data, we cannot recover it once deleted.
If we make material changes to this policy, we will update the effective date above and post a notice in the app at next launch. Continued use of the app after the updated effective date constitutes acceptance of the revised policy.
Questions about this policy or your data:
Masala Health
privacy@masalahealth.co
Terms of Use
Masala Health is not a medical device and is not a substitute for clinical care. Nothing in the app — including AI-generated responses, calibrated thresholds, screening prompts, or any other output — constitutes medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider with questions about your health.
The thresholds, reference ranges, and screening prompts in the app are drawn from published guidelines and studies, calibrated for South Asian populations where evidence supports it. They are informational tools, not clinical determinations.
Masala Health grants you a limited, non-exclusive, non-transferable, revocable license to use the app on Apple devices you own or control, for personal, non-commercial use, subject to these terms and Apple's App Store terms.
You may not copy, modify, distribute, sell, or reverse-engineer any part of the app.
You own your health data. We claim no rights to the records, recordings, notes, or any other content you store in the app. The app is a tool; the data is yours.
Masala Health is currently in private beta. Beta software may contain bugs, change significantly, or be discontinued. Features, thresholds, and workflows may change without notice. We make no guarantee of availability, continuity, or fitness for any particular purpose during the beta period.
By participating in the beta, you acknowledge that you are testing pre-release software and agree not to distribute the app or share beta access without our permission.
To the maximum extent permitted by applicable law, Masala Health and its developers are not liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the app, including any clinical decisions made in reliance on app output.
The app is provided "as is" and "as available" without warranty of any kind, express or implied.
These terms are governed by the laws of the State of California, without regard to conflict of law principles. Any disputes will be resolved in the courts of Santa Clara County, California.
If any provision of these terms is found unenforceable, the remaining provisions remain in full effect.