Privacy Policy for Poshak

Effective Date: October 30, 2026

Developer: BBirds Inc.

Application: Poshak - Food Habit & Nutrition Tracker

Official Web App: https://poshak.bbirdsinc.com

1. Executive Summary & Philosophy

Poshak is designed from the ground up as a Privacy-First, Local-First, Zero-Knowledge health and nutrition application. Unlike conventional lifestyle tracking apps that upload personal meal habits, family health records, and lifestyle patterns to centralized cloud servers, Poshak enforces absolute data sovereignty.

2. Data Collection & Processing

• Local Storage (Primary): All your logged meals, dietary deductions, points, and streak goals are stored locally on your device in secure app storage. Latency is 0ms and the app functions 100% offline.
• No Account Required: You are not required to provide your real name, email, phone number, or passwords to use the app.
• Voice Dictation & Microphone Access: The app requests microphone permission (RECORD_AUDIO) solely to provide real-time voice dictation for food logging. Speech is processed strictly on-device using native speech recognition APIs. Audio is never recorded, stored, transmitted, or uploaded to any external server.
• Optional Cloud Synchronization: If you choose to enable Multi-Device Sync, all data is encrypted on your device using AES-GCM-256 with a user-defined passcode before transmission. Neither BBirds Inc. nor cloud infrastructure providers have the encryption keys to read your data.

3. Third-Party Sharing

We do not sell, rent, trade, or share your personal data with any third parties or data brokers. There are no advertising trackers, behavioral profiling algorithms, or third-party ad networks embedded within the app.

4. Data Retention and Deletion

• Instant Local Deletion: You can clear all data instantly via the app settings.
• Data Portability: You can export your full database at any time as an unencrypted .json backup file or generate offline PDF reports.
• Automated Data Purge: Poshak automatically flags historical logs older than one month for pruning (with optional PDF export) to minimize data accumulation.

5. Security Guarantees

When cloud synchronization is enabled, all payloads use military-grade AES-256-GCM authenticated encryption combined with PBKDF2-HMAC-SHA256 key derivation with 100,000 rounds. Even in the unlikely event of a cloud breach, stored payloads remain mathematically unreadable ciphertext without your secret passcode.

6. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact BBirds Inc. at:

Email: privacy@bbirds.com