What they may do · DPDP §6(4)
What HealthifyMe does with your data
HealthifyMe shares cookie and web-beacon data with advertisement partners for targeted ads, re-markets through Facebook and Google, sends your chat text, meal photos and health data to third-party AI providers, and may keep your data even after you ask for deletion.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
HealthifyMe’s own policy says “Some of the examples of where we may sub-contract processing activities to third parties include—record keeping, data analysis, marketing assistance, processing payments, and providing customer service.”
Our summary section 11 discloses sub-contracting of processing to third parties including for data analysis and marketing assistance, and section 11.3 confirms data is shared with third-party AI service providers acting as processors.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
HealthifyMe’s own policy says “Upon receiving your specific consent, we may share the data we collect from cookies or web beacons with our advertisement partners to track your visits, establish your non-personal identity and present you with targeted advertisements about our Services.”
Our summary section 9, headed 'Tracking By Our Advertisement Partners', discloses that cookie and web-beacon data is shared with advertisement partners to track visits and serve targeted advertisements. Section 1 separately states the data is used to show age-appropriate advertisements.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
HealthifyMe’s own policy says “If you submit your details and give us your consent, we may use your data to send you e-mails/newsletters, re-target HealthifyMe advertisements or re-market our Services using services from third-parties like Facebook and Google.”
Our summary section 1 discloses re-targeting and re-marketing through named third-party platforms Facebook and Google. Section 12 adds that HealthifyMe receives the date, time, URL, IP, browser and — if you are logged in — your username whenever you visit a third-party link from its site or app.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
HealthifyMe’s own policy says “We may need to retain your personal data even if you seek deletion thereof, if it is needed to comply with our legal obligations, resolve disputes and enforce our agreements.”
Our summary section 8 states personal data may be retained despite a deletion request, and that data is stored for ancillary business purposes 'without limitation'. Section 3 adds that once information is anonymised and aggregated the company is entitled to use it freely, without restriction other than under applicable law.
-
Trains AI models on your content
Your photos, messages or activity are used to train machine-learning models.
What this costs you. This one has no undo. Once your content is inside a trained model, no erasure request can lift it back out.
Show me where they say that
HealthifyMe’s own policy says “HealthifyMe uses artificial intelligence (“AI”) technologies, including third-party AI service providers, to power certain features within the App, including but not limited to nutrition analysis, meal recognition, health insights, coaching assistance, chat functionality, and personalized recommendations.”
Our summary section 11 discloses that AI technologies and third-party AI providers process user content — text inputs you submit, meal photos, and selected health and fitness data including weight, goals, logged nutrition and CGM data (s.11.1) — with 'Improving feature accuracy and user experience' listed among the stated purposes (s.11.2). The policy does not use the word 'training' for model development.
What the policy does not mention
These are uses HealthifyMe’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Processes your face or other biometrics
HealthifyMe is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does HealthifyMe do with my personal data?
According to HealthifyMe's own privacy policy, read on 2026-08-14, it discloses 5 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps, keeps your records long-term, trains ai models on your content.
Can I withdraw my consent from HealthifyMe?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does HealthifyMe track me for advertising?
Yes — HealthifyMe's published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one HealthifyMe declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy