Privacy Policy

Last updated: July 13, 2026 · Grounded in the Digital Personal Data Protection Act, 2023 & Rules (2025)

This Privacy Policy explains how Techfist (“we,” “us,” “our”) collects, uses, and protects your information when you use Grayd (the “App”) or visit grayd.in (the “Site”). We built Grayd to help you understand packaged food labels — this policy is written in plain language on purpose, because a privacy policy nobody can read isn't much of a policy.

1. Who we are

Grayd is operated by Techfist. We're a pre-registration operation based in India — we're in the process of incorporating a formal entity, and this policy will be updated with those details once that's complete. Until then, Techfist is the name under which Grayd operates.

2. What we collect

• Account information — if you sign in, we collect your email address (or the minimal profile info provided by a sign-in method like Google).
• Scans and labels — photos or text you capture of food labels, and the product/ingredient/nutrition data we extract from them.
• Health-relevant preferences — if you set up a profile (e.g. “Family/kids,” “Diabetes-aware,” allergen preferences), we store what's needed to personalize your verdicts. If a profile is set up for a child in your household, we store only what's needed for that purpose — e.g. an age range or dietary need — never anything used to target advertising to a child, and never anything a child enters directly without you.
• Usage data — basic app-usage information (crash logs, feature usage) to keep Grayd working and improve it.

We do not collect more than the App needs to function, and we never sell your personal data.

3. Why we process it, and the legal basis

We process your data to: generate your personalized verdict, remember your saved items and preferences, improve the product, and communicate with you (e.g. about your account or, if you've joined our waitlist, about launch). Where required, we rely on your consent, which you can withdraw at any time (see §6).

4. Where your data goes

Grayd's scanning and verdict features are powered in part by third-party AI providers who process label/product data on our behalf (currently including Google Gemini, OpenRouter, and DeepSeek — all outside India). We only send what's needed to generate your verdict, never your account identity alongside it where avoidable, and these providers do not have standing rights to use your data beyond fulfilling our request.

5. How long we keep it

We keep your account and scan history for as long as you have an account with us, or until you ask us to delete it (see §6). Waitlist emails are kept only until launch or until you unsubscribe, whichever comes first.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Erase your data (subject to any legal retention requirements)
• Withdraw consent at any time, as easily as you gave it
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• File a complaint with us first, and with the Data Protection Board of India if unresolved

To exercise any of these, email us at support@grayd.in.

7. Grievance Officer

Techfist has designated a Grievance Officer to handle any complaint or query about how your data is handled.

• Contact: support@grayd.in
• Response commitment: we'll acknowledge your request within 72 hours, and resolve it within 7 working days, in line with the DPDP Rules, 2025 — unless we tell you why a specific case genuinely needs longer.

8. Children's data

Grayd is not directed at children as independent users. Where a parent or guardian sets up a profile for a child within their own account (e.g. “Family/kids”), that data is provided and controlled by the parent, used solely to personalize verdicts, and never used for behavioral tracking or ad-targeting directed at the child.

9. Security

We apply reasonable technical and organizational safeguards to protect your data. If a breach ever puts your data at risk, we'll notify the Data Protection Board of India and affected users as required by law.

10. Changes to this policy

We'll post any material change here with an updated date, and where the change is significant, we'll tell you directly (e.g. by email or an in-app notice).

11. Contact

Questions about this policy, or about your data: support@grayd.in.