Privacy Policy & Data Rights.

FOR THE AVOIDANCE OF ANY DOUBT, WE SHOULD CLARIFY THAT IN THE EVENT WE ANONYMIZE AND AGGREGATE INFORMATION COLLECTED FROM YOU, WE WILL BE ENTITLED TO USE SUCH ANONYMIZED DATA FREELY, WITHOUT ANY RESTRICTIONS OTHER THAN THOSE SET OUT UNDER APPLICABLE LAW.

We may use your data in aggregate form for research purposes, based on our legitimate interest in generating non-personally identifiable insights to enhance our services, provide reports to third parties, and promote our business. All such research utilizes data that is de-identified, ensuring no individual user can be identified. This may include analysis of trends, user behavior, and other patterns for inclusion in scientific publications, presentations, or reports, while maintaining user anonymity.

Any success stories, comments, messages, blogs, scribbles etc. posted/ uploaded/ conveyed/ communicated by you on the public sections of the Website/App becomes published content. We may publish such published content on our Website/App so long as you consent. You may request that such published content be taken down at any time and we shall remove such published content. However, we are not responsible for any actions taken by third-parties with respect to such published content.

We may receive data about you from other sources i.e., expert calls, smart watch, surveys, and such data may be added to our Website/App from time to time. Such data may include your behavior towards various content posted on our Website/App from other sources. We use the data collected from other sources to prepare specific insights on ingredients, allergens, personalized nutrition for you. This helps you make smarter, faster food choices that fit well with your ethnicity, dietary needs, lifestyle and health goals. We also use this data for providing, testing, improving, or recommending the Services.

We will store any personal data we collect from you as long as it is necessary in order to facilitate your use of the Services and for ancillary legitimate and essential business purposes – these include, without limitation, for improving our Services, attending to technical issues, and dealing with disputes.

Your personal data will primarily be stored in electronic form. We may enter into agreement with third parties to collect, store, process your personal data but under full compliance with applicable laws. In the event, you have any telephonic interactions with our customer representatives, the call data is recorded and stored on the Amazon Web Services (AWS) for training and quality purposes.

We may need to retain your personal data even if you seek deletion thereof, if it is needed to comply with our legal obligations, resolve disputes and enforce our agreements.

If you are a Registered User, please be advised that after you terminate your usage of a Service, we may, unless legally prohibited, delete all data provided or collected by you from our servers.

Upon receiving your specific consent, we may share the data we collect from cookies or web beacons with our advertisement partners to track your visits, establish your non-personal identity and present you with targeted advertisements about our Services.

Our Services are intended exclusively for adult users. We do not knowingly collect, store, or process personal data from children under 18 years of age. Individuals under the age of 18 are not permitted to register for an account or submit personal information through our Website or App without verified parental or legal guardian consent. If we become aware that we have collected personal data from a minor without verified authorization, we will take immediate steps to delete such information.

In the ordinary course of business, we may employ other companies and people to assist us in providing certain components of our Services in compliance with the provisions of this Policy. To do so, we may need to share your data with them.

Where applicable – if the entities to which these transfers are effected are not situated in countries deemed ‘adequate’ by the European Commission or are not registered under the EU-US Privacy Shield framework, we shall enter into appropriate Data Protection Addendums with the transferee parties that comprehensively protect your data. We shall also put in place industry-standard technical and organizational measures (including robust data handling policies) to ensure that such transfers are completed in accordance with applicable laws.

Some of the examples of where we may sub-contract processing activities to third parties include—record keeping, data analysis, marketing assistance, processing payments, and providing customer service.

ELLARA uses artificial intelligence (“AI”) technologies, including third-party AI service providers, to power certain features within the App, including but not limited to nutrition analysis, food (meal/snacks) recognition, recommendation of healthier food alternatives, health tips, health insights, chat functionality, and personalized recommendations.

We may display links to third-party websites or applications on our Website or App for advertising or providing you with relevant content. We will not be responsible for such third-party websites or applications if you choose to access them. If you provide any data to such website/application, please ensure you read their policies given that you will no longer be bound by this Policy in doing so.

We may receive data whenever you visit a third-party link through our Website/App which includes the date and time of your visit to the third-party website, the web address or URL, technical information about the IP address, browser and the operating system you use and, if you are logged into ELLARA, your username.

We have integrated the App with services provided by Google to: (a) enable you to sign in to the App using your existing Gmail ID; and/or (b) provide insights and analysis of your health. To this end, please note that any collection, storage, use and/or transfer of your data that is received from:

1. Google API will, at all times, adhere to Google API Services User DataPolicy, including the limited use requirements prescribed therein; and

To summarize, ELLARA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the concerned Limited Use requirements.

We have integrated the App with services provided by Apple to: (a) enable you to sign in to the App using your existing Apple Account. To this end, please note that any collection, storage, use and/or transfer of your data that is received from Apple services will be handled in accordance with the applicable Apple Developer policies and guidelines.

1. Sign in with Apple will always adhere to Apple’s applicable requirements for user authentication, privacy and data handling, including the requirements prescribed for Sign in with Apple; and

To summarize, ELLARA’s use and transfer to any other app of information received from Apple services will adhere to Apple’s applicable policies and guidelines, including the requirements governing the use of Sign in with Apple data.

For more information, please refer to the Apple Developer Documentation.

In addition to the purposes set out in the Policy, we may disclose any data we collected or processed from you if it is required:

We implement industry-standard technical and organizational measures by using a variety of security technologies and procedures to help protect your data from unauthorized access, use, loss, destruction or disclosure. When we collect particularly sensitive data (such as a credit card number or your geo-location), it is encrypted using industry-standard cryptographic techniques including but not limited to PBKDF2, AES256, TLS1.2 & SHA256.

The collection, storage, usage, and sharing of your data by the Company shall be in compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and other applicable laws.

Your password is your first line of defense once you set up a ELLARA account, we recommend that you set a strong password which you never share with anyone.

We have taken appropriate steps for the security and protection of all our digital platforms including internal applications, however, we shall not be responsible for any breach of security or the disclosure of personal data for reasons outside our control, such as hacking, social engineering, cyber terrorism, espionage by third parties, or any events by way of force majeure such as sabotage, fire, flood, explosion, acts of God, civil commotion, strikes or industrial action of any kind, riots, insurrection, war or acts of government.

You may request access, correction or updation, and deletion of the data by contacting contactus@ELLARA.ai You may note that deletion of certain data or withdrawal of consent may lead to cancellation of your registration with us or your access to our Services.

Based on technical feasibility, we will provide you with access to all your personal and sensitive personal data that we maintain about you. We will perform verification before providing you access to this data.

You may opt out of our marketing emails by clicking on the ‘opt-out’ link provided in the emails. However, we may still send you non-marketing emails about your accounts or any other transactions with you.