Pushpa
Get Pushpa

Pushpa holds a family's reports, prescriptions, medicines and readings. This page says what protects them, in plain words, and is just as plain about what we haven't done. Where it and our privacy policy differ, the policy governs

1. how your information is protected

ControlWhat it means
Encryption in transitHTTPS on every connection between your phone and Pushpa
Where it's storedAmazon Web Services in Mumbai, India (region ap-south-1)
Opening a fileReports are never public. Each opens through a signed link that expires within an hour
Signing inA 6-digit code by WhatsApp, or SMS if WhatsApp can't be reached, valid for 5 minutes. Or Sign in with Apple
SecretsPasswords, share PINs and sign-in links are stored only as one-way hashes, never as readable text
Family accessOnly people added to a profile can open it, and only the profile's owner can change that list
Links for a doctorA separate 6-digit PIN, a 7-day expiry, revocable any time, and locked after five wrong tries
Message checksEvery WhatsApp message is checked to be really from WhatsApp before Pushpa reads it
LogsSign-in credentials are stripped from server logs

what we are not

Pushpa is not end-to-end encrypted. To explain a report, Pushpa has to read it; to hold a call, the AI has to hear it. So our servers, and the services listed below, can process your family's information. What we do instead is keep it in one region, open it only to the people you choose, and keep the services that touch it to the ones named here

Pushpa is not a medical service. It explains and organises; diagnosis and treatment stay with your parent's doctor. In an emergency in India, call 112

2. what happens when content leaves us

No product runs alone. To read a report, place a call or send a WhatsApp message, Pushpa passes the content needed for that task to the services below. Some of them are based outside India

Google GeminiReading reports, conversations and voice calls
Meta (WhatsApp)Messages to and from Pushpa
TwilioPhone calls, and sign-in codes by SMS
Amazon Web ServicesStorage, database and servers, in Mumbai
Microsoft Azure SpeechTranscribing consultations you choose to record
Expo and FirebaseApp notifications
PostHogHow the app is used, so we can improve it
Langfuse and GrafanaChecking the AI's answers and the system's health

Our privacy policy commits that your family's health information is never used to train AI models

3. the controls you have

  • Nothing reaches your parent until you approve Pushpa introducing herself
  • The app asks before any AI processing starts. Review it under Profile, Privacy
  • Choose who sees each profile, as view or edit, and remove anyone at any time
  • Quiet hours are 9pm to 7am by default, in each person's own time zone
  • Send STOP on WhatsApp to stop messages; START turns them back on
  • Delete your account in the app (Profile, Personal Details, Delete Account) or by email
  • Ask for a copy of your data, a correction or raise a grievance under India's DPDP Act. We reply within 7 business days

4. reporting a problem

If you find a security weakness in Pushpa, email system@dayzero.ai before telling anyone else, and please test only with accounts and data that are yours

5. if something goes wrong

No system is perfectly secure. Our privacy policy commits to telling you within 72 hours if we find a breach that affects your personal data