Data & privacy
What we collect, and what this tool is not
Notice version 2026-07-28. Written to be read, not to be survived.
This is not a medical device
Upanah.AI is not a medical device and does not diagnose or treat anything. The foot scan is an estimate accurate to a few millimetres at best, and the guidance here describes footwear features commonly associated with comfort — it is not medical advice. For any pain, numbness, wound or swelling, please see a qualified clinician.
Concretely: we do not diagnose flat feet, plantar fasciitis, diabetic neuropathy or anything else. Where your log suggests something that needs a clinician — numbness, a wound that isn't healing, new swelling — we withhold footwear suggestions and say so, because a shoe recommendation would be the wrong answer to those.
What we collect, and why
| What | Why | How long |
|---|---|---|
| Email, name, password hash | To have an account at all. Passwords are hashed with bcrypt — we cannot read yours. | Until you delete the account |
| City and state | Chosen by you at signup. Used for aggregate reporting on where interest comes from. | Until you delete the account |
| Foot measurements — length, width, arch type | To convert to a size and to personalise footwear guidance. Health data: only stored after you consent. | Until you withdraw consent |
| Activity and symptom log | Steps, distance, where it hurts, and the red-flag questions. Health data: only after consent. | Until you withdraw consent |
| Whether you have told us you have diabetes | Optional, and only because it changes the advice: it lowers the point at which we stop suggesting footwear and suggest a foot examination instead. Never shared, never used for targeting. | Until you untick it or withdraw consent |
| Four-week follow-up answers | Whether you changed your footwear and whether the pain improved. Aggregated to check our guidance is worth anything. | Until you withdraw consent |
| Reviews, questions and answers you post | They are public by design — that is the point of them. | Until you ask us to remove them |
| Page views and searches | A first-party cookie gives an anonymous id so we can count people rather than requests. No third-party advertising or tracking pixels. | Aggregated; raw rows pruned over time |
| Clicks out to brands and retailers | So we can tell a brand how many people we sent them. | Aggregated |
We do not run third-party advertising trackers, we do not sell personal data, and we do not pass your identity to brands or retailers. When you click through to a store, they see a normal visitor — not a profile from us.
Health data needs consent, separately
Foot measurements and symptom logs are health information, so we ask before storing any of it, and the app works without it. Two separate permissions:
- Health logging. Lets us store your measurements and log. Refuse it and everything else still works — search, size charts, brand ratings, the community. You just don't get the personal summary.
- Anonymised research use (optional). Lets us include your measurements in aggregate statistics about Indian foot dimensions — measurement, age band and state only, never your name, email or exact location. It is off by default and refusing it changes nothing else. We keep it separate precisely so that agreeing to use the tracker doesn't silently agree to this.
Withdrawal deletes. Withdrawing health consent doesn't just flip a flag — it deletes your foot profile, your entire activity log, your follow-up records and any condition you told us about. We think a switch that hides data we still hold would be dishonest.
Your rights, and how to use them
- · See it — your account page shows everything we hold about you.
- · Correct it — re-measure, edit your profile, or update a review at any time.
- · Delete it — withdraw health consent to erase health data; email us to remove the account entirely.
- · Withdraw consent — one click on the health page, no explanation needed.
- · Ask a human — prashant.malviya@upanah.com.
These reflect the rights the Digital Personal Data Protection Act, 2023 gives you as a Data Principal in India. If we ever fall short of them, write to the address above.
Where our accuracy actually stands
We would rather state our limits than imply precision we don't have:
- · One shoe size is 8.5 mm, so small measurement errors change the answer.
- · A tapped, perspective-corrected measurement is good to roughly ±3 mm.
- · A single-photo AI estimate is ±5 to ±14 mm depending on how confident the model is — and below a threshold we refuse to name a size at all rather than guess.
- · Sizing still varies between brands, which is why we show what real buyers report rather than trusting a chart alone.
- · None of this is clinically validated. We have run no trials and no clinician has reviewed individual results.
Where the data lives
Hosted on Microsoft Azure. The application runs in the Central India region and the AI models we use are deployed in South India, so measurements and photos are processed within India. Photos you submit for a scan or a match are sent to that model to be analysed and are not retained as part of your profile.
Operated by TriMalv Pvt Ltd. If this notice changes materially we'll ask you to review it again rather than quietly update the date — the version you agreed to is recorded against your account.