Privacy Policy
Last updated: 1 October 2026
This policy covers the Stilwater website and the Stilwater mobile app (plant-based recipes) on Google Play and the App Store.
It also covers Aria Companion, our medicine-reminder and health-tracking app for senior citizens and their families. Aria Companion is described separately in section 3A.
We do not sell your data. We do not show ads. We do not track you across other apps or websites.
1. Who we are
Stilwater is operated by Stilwater Health AI Pvt Ltd, registered at A-2074, Assetz East Point, Bellandur, Bangalore – 560103, Karnataka, India. We are the data controller for the information described in this policy.
For any question about your data, or to exercise any right below, contact support@stilwater.health.
Grievance Officer (India, DPDP Act 2023): Amar Kumar Dani, Stilwater Health AI Pvt Ltd, A-2074, Assetz East Point, Bellandur, Bangalore – 560103, Karnataka, India. support@stilwater.health. We acknowledge grievances within 7 days and resolve them within 30 days.
2. The website
When you use a form on this site - waitlist access, an assessment, or a community enquiry - we may collect your name, contact details, language preference, and any optional wellness context you choose to give us.
We use it to provide the service you asked for, to improve service quality, and to coordinate trusted holistic partner pathways. Access is restricted to authorised team members and approved service systems.
Form submissions are kept for one year from your last contact with us, then deleted.
Cookies and website analytics
This website uses Google Analytics 4 to understand how visitors move through the site - which pages are read, which links are followed. This sets cookies in your browser.
Analytics cookies are only set if you consent to them. You can withdraw consent at any time by clearing your cookies or using the cookie controls on this site.
| Cookie type | Purpose | Basis |
|---|---|---|
| Strictly necessary | Make the site work - page delivery, security | Legitimate interest |
| Analytics (Google Analytics 4) | Count visits, see which pages are used | Consent |
We do not use advertising or cross-site tracking cookies.
3. The Stilwater app
What the app collects
| Data | Why | Kept |
|---|---|---|
| Name and email address | To create and secure your account | Until you delete your account |
| Recipes you save | So they're there next time you open the app | Until you delete them, or your account |
| Dish names and ingredients you search for | To generate the recipe you asked for | Not stored against your account |
| Photos you choose to scan | To identify the ingredients in them | Deleted immediately after processing |
| Anonymous usage analytics | To see which features get used | Aggregated; you can switch this off |
Photos
If you photograph your ingredients, that image is sent to our servers so the ingredients in it can be identified. It is deleted immediately afterwards. It is not stored, not used to train any model, and not seen by anyone.
The app never browses your photo library. You choose each photo yourself, one at a time.
Voice
Voice search is handled by your phone's own speech recogniser. Only the resulting text - the dish name - reaches us.
Read-aloud sends the recipe text to our voice service, and the resulting audio is cached on your own phone so it doesn't need to be sent again.
Analytics - and how to turn it off
We collect anonymous analytics about which screens and features are used. We never attach your recipes, searches or photos to it.
You can switch it off entirely at any time: Profile → Privacy → Share usage analytics. Turn it off and nothing is sent.
3A. The Aria Companion app
Aria Companion helps senior citizens take their medicines on time and lets a family member or carer keep track of their health. This section describes how it handles data. It is separate from the Stilwater recipes app above: the service providers in section 5 apply to the Stilwater recipes app, and the providers named in this section apply to Aria Companion. The rest of this policy (children, security, changes, contact) applies to both.
Who uses it
An account is created by one person - the account holder, who may be the senior citizen or a family member or carer. The account holder enters details about the senior citizen being looked after and, optionally, one family contact. If you enter someone else's details, please make sure they know and agree.
What the app collects
Aria Companion handles health information. We collect only what is needed for the feature you use.
| Data | Why | Kept |
|---|---|---|
| Account holder: name, mobile number (for sign-in by one-time code), access code | To create and secure your account and sign you in | Until you delete your account |
| Senior citizen: name, gender, age, city, email (optional), mobile number, time zone, notes | To set up reminders and address the person correctly on calls and messages | Until you delete your account |
| Family contact (optional): name, relationship, mobile number, email, city, gender | To send them reminders or reports if you choose | Until you delete your account |
| Medicine reminders: medicine names, doses, times of day, start and end dates, how you want to be reminded | To remind the senior citizen to take their medicines | Until you delete them, or your account |
| Health entries you log: whether each dose was taken, blood sugar, insulin, HbA1c, sleep, exercise, weight, meals, and your own daily self-assessment ratings | To show your history, build reports, and let you share them | Until you delete them, or your account |
| Reminder and call history: when a reminder was sent, how it went, a text transcript of an Aria check-in call, and the facts Aria noted from it | To show what happened and keep a record for the carer | Until you delete your account |
| Concern flags: a note when something said on a call may need a person's attention | So the carer can follow up | Until you delete your account |
| Recipes and photos you choose to add: recipe name, a short description, dish and step photos, a voice recording of the recipe, and your name, age, city and profile photo as the author | To let you share healthy recipes with other Aria Companion users and save recipes you like | Until you delete your account |
| Voice you speak to log an entry | To turn what you say into text | See "Voice" below |
| Notification token for your phone | To send you reminders and notifications | Until you delete your account or turn notifications off |
| Subscription status: that you have a paid plan, its state and dates, and an order or purchase reference | To unlock the paid plan and keep it up to date | Until you delete your account |
| Usage and technical records: which screens and features are used, session length, device type and time zone, and technical event logs | To understand how the app is used and to fix problems | Until you delete your account |
| Security audit records: which account opened which record, and when (record identifiers only, no names) | To keep the service secure and meet our obligations | Kept after account deletion - see "Deleting your account" |
Reminders and calls
At the times you set, Aria can send a missed call, a WhatsApp message, a recorded voice message, or an AI-voice call to the senior citizen's number and, if you turn it on, to the family contact's number. On an AI-voice call Aria introduces herself as an AI assistant, asks how the person is, and may note their answers. We keep a text transcript of those calls. Sign-in codes are sent by SMS or WhatsApp to the mobile number you enter, and expire after a few minutes.
Voice
When you tap the microphone to speak a reading, your phone's speech recogniser (on Android, Google's speech service) turns your voice into text. When you log a meal by voice, or record a recipe, the audio is sent to our servers and to our speech-to-text provider (Sarvam AI) so it can be turned into text. We use the text to fill in your entry and, for recipes, to work out whether the dish is vegetarian. Aria Companion never listens in the background.
Photos and camera
The app only uses the camera or photo library when you tap to add a profile photo or a dish photo, and only the photos you choose.
AI-written text
Short summaries on your reports, and the wording of spoken reminders, are written by AI language models from the entries you have logged. This is content generation: the app does not diagnose, prescribe, or make decisions about your treatment, and nothing in it replaces a doctor. Always follow your doctor's advice.
Sharing - what leaves the app
- Reports you share. You can create a PDF or image of a report and send it to a family member or doctor. It leaves the app only when you choose to send it, and goes wherever you send it.
- Community recipes. A recipe you upload, together with your name, age, city and profile photo as author, can be seen by other signed-in Aria Companion users. Do not include anything you would not want them to see.
- Family contact. If you add one, they receive the reminders and reports you set up for them.
We do not sell your data, we do not show ads, and we do not use your health information for advertising.
Who processes your data for Aria Companion
We use these providers to run the service. Each handles only what its job needs:
- Google Cloud (App Engine) and Firebase - run the app and its website, and send push notifications.
- Supabase - the database where your account and entries are stored.
- Bolna - places the AI-voice calls and recorded-voice calls, and returns the call transcript.
- Plivo - connects the phone calls, including missed calls.
- Twilio - sends sign-in codes by SMS.
- Meta (WhatsApp Business) - delivers WhatsApp reminders and sign-in codes.
- OpenRouter - routes our requests to AI language models that write report summaries and spoken reminder wording.
- Sarvam AI - turns voice recordings into text.
- Google Play - takes your subscription payment in the Android app. We never see your card or UPI details; we receive only the status, dates and an order reference. If you subscribe on the web version instead, payment is handled by Cashfree, and we keep only the subscription status and reference.
Several of these providers are outside India, so your data may be processed outside your country of residence. Where required, transfers are made under appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Our legal basis
Because Aria Companion handles health information, we rely on your consent (and, in India, consent under the Digital Personal Data Protection Act 2023) for that information, and on contract to provide the service you asked for. Technical logs and security records are kept on the basis of our legitimate interest in keeping the service secure and working. You can withdraw consent at any time by deleting your account.
Delete your Aria Companion account and data
You can request deletion of your Aria Companion account and associated personal data either from within the app or by emailing support@stilwater.health.
In the app: Menu → Delete my account. Type DELETE to confirm. This is immediate and permanent.
It removes the account holder and the senior citizen's profile, all reminders, health entries, call history and transcripts, recipes and photos you added, saved recipes, notification tokens, subscription records, and usage and event records linked to the account.
What we keep: security audit records (which account opened which record and when, using record identifiers only, with no names), which we keep to protect the service and meet our obligations.
Your subscription: deleting your account does not cancel a paid subscription. To stop being charged, cancel it in Google Play (Payments & subscriptions → Subscriptions → Aria Companion). The app reminds you of this before you delete.
If you cannot sign in, email support@stilwater.health and we will delete the account within 30 days.
Your rights
Everything in section 7 applies to Aria Companion too: you can ask to access, correct, export or erase your data, object to or restrict processing, and withdraw consent. Email support@stilwater.health; we act within 30 days, free of charge. India users can also contact our Grievance Officer in section 1.
Children
Aria Companion is for adults - senior citizens and their families and carers. It is not directed at children and we do not knowingly collect data from them.
4. Our legal basis for using your data
If you are in the UK, the EU, or another region with equivalent law, we rely on the following bases:
| What we do | Legal basis |
|---|---|
| Create and run your account; save your recipes | Contract - we can't provide the app without it |
| Generate a recipe from your search, ingredients, or photo | Contract - this is the service you asked for |
| Usage analytics | Consent - off-switchable in the app and revocable at any time |
| Website analytics cookies | Consent |
| Keep the service secure and prevent abuse | Legitimate interest |
| Respond to a website enquiry or waitlist request | Consent / steps prior to a contract |
5. Who processes your data, and where
- Google Firebase - accounts, saved recipes, analytics.
- OpenAI - generating recipes, identifying ingredients in photos, and speech. Data sent through the OpenAI API is not used to train their models.
We do not share your data with anyone else, and we never sell it.
Where your data goes
We are established in India, and both providers are based in the United States. Your data is therefore processed outside your country of residence, and - for users in the UK or the EEA - outside the UK and the EEA.
Where that transfer is from the UK or the EEA, it is made under the European Commission's Standard Contractual Clauses (and the UK Addendum), which contractually bind the recipient to equivalent protection. Copies are available on request.
6. Deleting your account
In the app: Profile → Delete my account.
This is immediate and permanent. It removes your account and every recipe you have saved.
If you can't sign in, email us at support@stilwater.health and we will delete it for you. We action deletion requests within 30 days.
7. Your rights
- Delete your account and all your data, at any time, from inside the app.
- Turn off analytics, at any time, from inside the app.
- Access a copy of the data we hold about you.
- Correct anything that is wrong.
- Erase your data - in the app, instantly, or by email.
- Export your data in a portable format.
- Object to or restrict processing based on legitimate interest.
- Withdraw consent at any time, without affecting anything done before you withdrew it.
Email support@stilwater.health and we will action any of these within 30 days, free of charge.
If you're unhappy with how we handled it
You have the right to complain to your data protection authority.
- India: contact our Grievance Officer (section 1) first. If you are not satisfied, you may escalate to the Data Protection Board of India.
- UK: the Information Commissioner's Office.
- EU: the supervisory authority in your country of residence.
We'd rather fix it ourselves first - please give us the chance.
8. Children
Stilwater is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.
9. Automated processing
Recipes, ingredient detection and read-aloud audio are produced by AI models, not written by a person. This is content generation, not automated decision-making about you: nothing in the app makes a decision that has a legal or similarly significant effect on you.
10. Security
Data is held on Google Cloud infrastructure and encrypted in transit. Access is restricted to authorised team members.
11. Changes
If we change this policy we will update the date at the top of this page. Continued use of the site or the app means you accept the current version.
12. Contact
Questions about any of this, or a request about your data: support@stilwater.health
We aim to reply within two working days.