Legal
Privacy Policy
Masala Health is an on-device personal health tracker. The app collects and stores the following categories of information locally on your iPhone:
Almost everything. Health records, lab history, visit notes, any audio recorded by an earlier build, profile data, and AI conversation history stay on your iPhone, where iOS encrypts them at rest through its built-in file protection. None of this is uploaded to our servers or any third-party cloud.
There is no Masala Health account, no sync server, and no backup service. If you lose or erase your device, that data is gone unless you maintain an encrypted local iPhone backup through iTunes/Finder.
Three things may leave your device, all only when you initiate them:
When you use the Ask feature, the app constructs a prompt from the relevant context in your records. Before that prompt leaves your device, an on-device redaction step replaces names with neutral aliases (for example, "Person A"), converts specific dates into relative references (for example, "about 3 months ago"), and removes identifiers such as Social Security, medical record, and account numbers, email addresses, phone numbers, street addresses, and ZIP codes. Clinical values, units, and lab codes are preserved so the answer is useful. This redaction meaningfully reduces the risk of re-identification, but it is a best-effort safeguard rather than a formal de-identification — some health context still leaves your device.
The redacted prompt is sent over HTTPS through our relay to Gemini Enterprise — Google's HIPAA-eligible enterprise AI platform, hosted on Google Cloud in a US region. Under our Gemini Enterprise terms, Google processes the redacted prompt to generate a response and does not use your prompts or the model's responses to train its models. Google may retain the redacted prompt for a limited period for abuse and misuse monitoring before deleting it, as described in Google Cloud's service terms. Our relay forwards the request without storing it and keeps only operational metadata — timestamp, status, latency, and model name — never the contents of your prompts or responses. The response is returned to your device and stored locally.
The redacted prompt may include the following categories of information, with names aliased, dates relativized, and SSN/MRN/account numbers, email addresses, phone numbers, street addresses, and ZIP codes stripped before sending:
We do not send full record exports or unredacted personal health information to any AI service.
If you choose to share a person summary, a doctor checklist, pre-visit questions, or an export of your data — via iMessage, Mail, or any other app — that content leaves your device through the iOS share sheet, exactly as you'd expect when sharing any document. You control what is shared, with whom, and when.
If you connect a health system through MyChart, the app signs you in to that system and downloads your records over HTTPS directly from your provider to your iPhone. The sign-in step passes the authorization code through our relay so that the client secret never has to sit on your phone; no health data travels that path. If you connect a wearable training service using an access token you supply, the app reads your recovery figures — heart-rate variability, resting heart rate, and sleep — along with your workouts, measured training capacity, and planned training schedule from that service.
These connections pull data in. We do not push your records out to them, and you can disconnect either one at any time in Settings.
Masala Health integrates with Apple HealthKit to read the health data you have authorized. We use this data solely to power the features you see in the app — tracking, trending, your daily rings, and the Ask layer. The app also writes strength-training sessions you log back to Apple Health, so they count toward your activity and are available to your other health apps; it writes nothing else.
These restrictions are required by Apple and reflect our actual practice.
The app no longer records medical appointments. Visit recording, transcription into visit notes, and AI visit summaries have been removed. The only remaining use of the microphone is speaking a question instead of typing it.
If you recorded a medical visit in an earlier beta build, that audio is still on your device so you do not lose access to it. It stays stored locally and encrypted at rest by iOS, and nothing is added to it. You can play it back and delete it from the visit it belongs to, or delete every remaining recording at once in Settings under Privacy & data.
Masala Health is designed to be used by an adult managing health records for themselves and their family, which may include minors. The app is not directed at children under 13 as independent users, and we do not knowingly collect personal information directly from children under 13. Pediatric health records managed within a family profile are subject to the same on-device storage and protections described above.
Your data lives on your device for as long as the app is installed. You can delete individual records, profiles, conversations, and any remaining recordings from within the app at any time, and Settings has controls that delete all remaining audio or all AI-generated summaries at once. Deleting the app removes all locally stored data.
Because we do not operate a cloud backend for your health data, we cannot recover it once deleted.
If we make material changes to this policy, we will update the effective date above and post a notice in the app at next launch. Continued use of the app after the updated effective date constitutes acceptance of the revised policy.
Questions about this policy or your data:
Masala Health
privacy@masalahealth.co
Terms of Use
Masala Health is not a medical device and is not a substitute for clinical care. Nothing in the app — including AI-generated responses, calibrated thresholds, screening prompts, or any other output — constitutes medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider with questions about your health.
The thresholds, reference ranges, and screening prompts in the app are drawn from published guidelines and studies, calibrated for South Asian populations where evidence supports it. They are informational tools, not clinical determinations.
Masala Health grants you a limited, non-exclusive, non-transferable, revocable license to use the app on Apple devices you own or control, for personal, non-commercial use, subject to these terms and Apple's App Store terms.
You may not copy, modify, distribute, sell, or reverse-engineer any part of the app.
You own your health data. We claim no rights to the records, recordings, notes, or any other content you store in the app. The app is a tool; the data is yours.
Masala Health is currently in private beta. Beta software may contain bugs, change significantly, or be discontinued. Features, thresholds, and workflows may change without notice. We make no guarantee of availability, continuity, or fitness for any particular purpose during the beta period.
By participating in the beta, you acknowledge that you are testing pre-release software and agree not to distribute the app or share beta access without our permission.
To the maximum extent permitted by applicable law, Masala Health and its developers are not liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the app, including any clinical decisions made in reliance on app output.
The app is provided "as is" and "as available" without warranty of any kind, express or implied.
These terms are governed by the laws of the State of California, without regard to conflict of law principles. Any disputes will be resolved in the courts of Santa Clara County, California.
If any provision of these terms is found unenforceable, the remaining provisions remain in full effect.