Home / Privacy policy

Privacy policy

Ayumitra keeps your family’s health records on your phone, encrypted. They are never sent to us. This page explains what that means for the app and for this website.

Last updated: 30 October 2026

Who is responsible

Full details are in the Impressum.

In short

• There is no Ayumitra account and no Ayumitra server that receives your health records. We can’t see, share or sell them.
• The app stores everything in an encrypted vault on your phone, and its AI runs on the phone.
• The app contacts other companies only for what you choose: downloading its AI model, a cloud AI model or web search with your own key, importing from Health Connect or Apple Health, health advice for a country you travel to, and backups to a place you pick. Each is described below.
• If you share a child’s profile with the other parent, your two phones exchange it directly on your Wi‑Fi. It never reaches us.
• This website sets no cookies, has no analytics and loads nothing from other servers.

The Ayumitra app

Your records stay on your phone

Profiles, reports, scans and photos, conversations, measurements, medicines, vaccines, cycle logs, reminders and everything else you add are stored in an encrypted vault on your phone. The key is kept in the phone’s secure storage. We have no copy of the key and no access to the vault.

The AI runs on your phone

Reading reports and answering questions happens on the phone with an on-device model. It works without a connection.

Downloading the AI model

The first time you set up Ayumitra, it downloads its model files (about 2.6 GB and 165 MB) from Hugging Face, Inc. (USA). Like any download, this shares your phone’s IP address and the request with Hugging Face, which may process it in the USA. No health data, name or other record is sent. The legal basis is Art. 6(1)(b) GDPR: the download is needed for the app to work.

A cloud AI model, only if you turn it on

Cloud AI is off until you agree to it and turn it on. If you do, you add your own key for OpenAI, Anthropic or OpenRouter. Your question, and the parts of your records needed to answer it, are then sent from your phone directly to the provider you chose, under your own account with them and their terms. Before anything is sent, real names are replaced with made-up ones; you can see what is sent. Nothing passes through us. These providers may process data in the USA. The legal basis is your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). You can withdraw it at any time by turning cloud AI off in the app; nothing more is sent from then on.

Web search, only with your own key

If you add a key for Brave Search or Tavily, the app can look up general public information, such as a medicine’s label or a guideline, with that service: Brave Software, Inc. (USA), or AlphaAI Technologies Inc., doing business as Tavily (USA). With both keys saved, each search goes to the one you picked, never to both. The app writes the search words itself and is designed to leave out names, dates and other personal details. The service receives your IP address and the search words; Tavily says it may keep the questions it receives and use them to improve its service. The legal basis is your consent (Art. 6(1)(a) GDPR), given by adding the key; remove the key to stop.

Health Connect and Apple Health

Only when you tap Import and allow it, the app reads the last 30 days of weight, height, blood pressure, oxygen, temperature, heart rate, resting heart rate, blood sugar, daily steps and sleep from Health Connect (Android) or Apple Health (iPhone) into the profile you choose, on the phone. Each reading keeps the name of the app that recorded it.

If you leave “Keep checking for new readings” on, the app then reads new readings into that profile by itself while it is open. On Android, if you also allow Health Connect’s reading in the background, it checks about once an hour while it is closed; this is a separate permission you can withdraw in Health Connect at any time. Turning Keep checking off, deleting that profile or deleting everything stops it.

It is read only: nothing is written back to Health Connect or Apple Health. What is read stays in the encrypted vault on the phone and goes to a cloud model only if you have turned cloud AI on.

Travelling abroad, only if you turn it on

When you turn on Travelling for a country, when you change the country, when you open Travelling a day or more after the last check, and when you tap Check again, the app downloads the World Health Organization’s list of disease outbreak news (WHO, Switzerland) and the U.S. Centers for Disease Control and Prevention’s travel page for that country (CDC, USA). Like any download, this shares your phone’s IP address and the request with them; the CDC address names the country. Nothing about your family is sent. The legal basis is Art. 6(1)(b) GDPR: the download is needed for the feature you turned on. Turn Travelling off to stop.

Sharing a child’s profile, only if you set it up

You can share a child’s profile with one other person you live with, usually the other parent, after you both agree on your phones with a one-time code. The child’s record (reports, measurements, medicines, vaccines, appointments, reminders and health memory, with who added each item) then goes directly between your two phones on the same Wi‑Fi or one phone’s hotspot, encrypted. It never passes through us or any cloud service. Your chats, settings, keys and other profiles stay on your own phone. What has reached the other phone stays there even if you stop sharing, and either of you can stop managing the profile at any time.

Backups

Backups are encrypted with a six-word passphrase that only you have. You choose where they are saved, on the phone or in a cloud drive you use. That provider holds only the encrypted file. Without your six words nobody can open it, including us.

Exports, sharing and emails you send

When you export or share a file, it goes only where you choose, and the file itself isn’t encrypted. If you report an answer to us, the app opens your own email app with a draft you can read and change before you send it.

Permissions

The app asks for each permission only when you use the feature that needs it: the camera and photos to add reports, the microphone for voice input (speech is recognised on the phone), notifications for reminders, and health data for imports. Call buttons open your phone’s own dialler.

No tracking

The app has no advertising, no analytics, no crash reporting and no tracking code from other companies.

Children

A child’s profile is created and managed by a parent or carer on their own phone, and stays on that phone unless they share it with the other parent’s phone (see above).

Deleting your data

You can delete a report, a conversation, a profile or everything from within the app. Uninstalling the app removes its data from the phone. Backups you made stay where you saved them until you delete them.

This website

Hosting and server logs

This website is hosted on GitHub Pages by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you visit, GitHub logs your IP address and stores it for security purposes, along with the usual details of a request (the page and the time), under the GitHub Privacy Statement. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR, our legitimate interest in a working, secure website). GitHub may process it in the USA; for transfers out of the EEA it relies on the EU–U.S. Data Privacy Framework and the EU’s standard contractual clauses. We don’t receive these logs.

No cookies, no analytics, nothing from other servers

The site stores nothing on your device and reads nothing from it, so no consent banner is needed. Fonts and images are served from this site, not loaded from elsewhere.

Email

If you email us, we use your address and message to reply (Art. 6(1)(b) GDPR when it concerns the app you use, otherwise Art. 6(1)(f)). We delete them when they are no longer needed, unless the law requires us to keep them.

App stores

The download links take you to Apple’s App Store or Google Play. Their own privacy policies apply there.

Your rights

Under the GDPR you have the right to access (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21), and to withdraw consent at any time (Art. 7(3)). Write to us at support@ayumitra.app.

Because your health records exist only on your phone, you see, correct, export and delete them yourself in the app. We can’t do it for you, because we never have them.

You can also complain to a data protection authority, for example the one responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.

Changes

If the app or this website starts handling data differently, this page is updated first, with a new date above.