Alpha Health — Privacy Policy

Effective date / Last updated: 28 June 2026

This Privacy Policy explains what information the Alpha Health mobile application ("Alpha Health", "the app", "we", "us", "our") collects, how we use it, who we share it with, and the choices and rights you have. Please read it carefully. By creating an account and using Alpha Health, you agree to the practices described in this policy.

1. Who we are

Alpha Health is owned and operated by Hindustan Scale Co (HSCo).

• App name: Alpha Health
• Developer / data controller: Hindustan Scale Co (HSCo)
• App backend: Our own server at https://bmi.hindustanscale.com
• Contact: support@hindustanscale.com

Alpha Health connects over Bluetooth to a compatible body-composition weighing scale and shows you your weight, BMI, body-fat %, body-water %, skeletal-muscle, BMR and related wellness metrics. It tracks this history over time and lets you optionally share your readings with a doctor or health provider you choose.

2. What information we collect

2.1 Information collected and sent to our server

When you use Alpha Health, the following information is collected and stored on our own server (the backend at https://bmi.hindustanscale.com, accessed over HTTPS/TLS):

• Mobile phone number — used as your account identifier and for login.
• Name
• Gender
• Date of birth
• Height
• Body-composition measurements taken from your weighing scale and computed by the app — including weight, BMI, body-fat %, body-water %, skeletal-muscle, basal metabolic rate (BMR) and related metrics.
• Doctor / provider "License No." (optional) — only if you choose to link your account to a specific health provider.

This information is used to create your account, generate your reports, track your progress over time, and (if you choose) make your readings available to your linked provider.

2.2 Information stored only on your device (never sent to our server)

The following stays only on your phone and is never uploaded to our server or shared with anyone:

• Profile photo / avatar — the optional picture you choose for your profile is stored locally on your device.
• Local copies of your readings — kept on the device so you can view your history.

2.3 Account login and consent

You sign in using your mobile phone number and a one-time password (OTP) delivered to you over WhatsApp. We do not use passwords, email sign-in, or Google sign-in.

Before any OTP is sent, you must tick a health-data consent checkbox confirming that you agree to Alpha Health collecting and processing your health-related information. Your consent is the basis on which we collect and use this data.

2.4 What we do NOT collect

• We do not collect or store your geographic location. (See Section 7 on the Location permission.)
• We do not use third-party advertising networks or third-party analytics SDKs.
• We do not show ads.

3. How we use your information

We use the information described above to:

• Create and secure your account and log you in via OTP.
• Pair with your weighing scale and display your measurements.
• Calculate body-composition metrics (BMI, body-fat %, body-water %, skeletal-muscle, BMR, etc.) from your readings and your profile details (age, gender, height, weight).
• Save and show your history so you can track your progress over time.
• Make your readings available to the doctor / health provider you have chosen to link with (only if you link one).

Alpha Health is a wellness and fitness tracking tool. It is not a regulated medical device and does not provide medical advice, diagnosis or treatment. Measurements are estimates for informational and wellness purposes only. Always consult a qualified healthcare professional before making any medical decision.

4. How we share your information

• With your chosen doctor / health provider only. If you link your account to a provider (for example by entering their License No.), your readings become visible to that specific provider through our multi-tenant provider portal. Your data is shared only with the provider you chose, and with no other provider.
• We never sell your data. Your personal and health information is never sold or rented to anyone.
• No advertising. We do not share your data with advertising networks, and Alpha Health contains no ads and no third-party advertising or analytics SDKs.
• Legal requirements. We may disclose information if required to do so by law, regulation, or valid legal process.

5. Data retention

• We keep the information described in Section 2.1 for as long as your account remains active, so that you can access your history and (if linked) share readings with your provider.
• When you delete your account (see Section 6), your account and the associated data on our server are removed.
• Information stored only on your device (Section 2.2), such as your profile photo and local copies of readings, is removed when you delete it or uninstall the app.

6. How to delete your account and data

You can delete your account and your data at any time, in either of these ways:

• In the app: open Settings → "Delete Account & Data". This removes your account and all of your data from our server.
• On the web (no app needed): submit a request at our public account-deletion form: https://bmi.hindustanscale.com/account-deletion/

Either method removes your account and the personal and health data we hold for it on our server.

7. App permissions

Alpha Health requests only the permissions it needs to work:

• Bluetooth (scan / connect) — to find and communicate with your weighing scale.
• Location — required by Android only so that Bluetooth scanning is allowed to work on the device. Alpha Health does not use, track, collect or store your location. No location data is recorded or sent anywhere.
• Internet — to securely sync your account and readings with our server.
• Photos — used only if you choose to set a local profile picture. The selected photo stays on your device.

8. Security

We take reasonable measures to protect your information:

• Encryption in transit: all network traffic between the app and our server uses HTTPS / TLS (certificates issued by Let's Encrypt).
• No cleartext traffic: unencrypted (cleartext) network traffic is disabled in the app.
• Secure login: OTP codes are stored on the server in hashed form, and your session uses token-based authentication.

No method of transmission or storage is completely secure, but we work to protect your information using the measures above.

9. Children

Alpha Health is intended for adults (18 and over). It is not designed for, or directed at, children. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with information, please contact us at support@hindustanscale.com so we can remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and make the updated policy available in the app and at our public Privacy Policy URL. Your continued use of Alpha Health after an update means you accept the revised policy.

11. Contact us

If you have any questions about this Privacy Policy or your data, contact:

Hindustan Scale Co (HSCo)
Email: support@hindustanscale.com
Website: hindustanscale.com

This policy applies to Alpha Health, Android package com.hsco.hsco_bmi_companion.