Updated: 17 October 2026
What we collect
We collect account details (name, international phone number, country, time zone, password hash, patient ID and an optional recovery email with confirmation status), consultation requests (including age, selected service, country and time zone), consent records, lead stages and staff remarks. Paid programs add order references, plan entitlements, bookings and uploaded diet plans or meal pictures. Assessment information submitted through the linked Google Form is handled in that separate form environment.
Why we use it
We use these details to operate your account, respond to your request, deliver your program, administer payment and refunds, and support our team’s follow-ups. We record the traffic source, UTM campaign values, landing path and conversion location to understand how visitors find us. Avoid placing personal or health details in UTM links.
Payments and external services
Razorpay processes checkout and may collect payment information under its own policy. We store payment references, amount, currency and status, not full card details. A real email address is requested at international checkout for payment receipts. Google hosts the assessment form. If you choose to use our AI tools, the limited preferences you enter are sent to OpenAI’s API to create the response. We do not automatically send your patient name, phone, diet-plan files or assessment history to the AI service.
Account recovery
If you add an optional recovery email, we send a confirmation link. After you confirm, password-reset links can be sent to that address without SMS OTP. Links expire after 30 minutes. We store hashed confirmation tokens, expiry timestamps and confirmation status; passwords and reset links are not sent to the AI tools or CRM. If you have no verified recovery email, contact support for identity checks before account recovery.
Cookies and attribution
WordPress authentication cookies keep you signed in. Attribution storage is optional: you can allow or decline it in the site’s preference banner and change your choice from the footer. Declining does not prevent account creation or consultation requests. This template does not install Meta, Google or other advertising pixels by default.
International service delivery
Our team operates from India, and service providers may process information in other countries. Your country, time zone and selected pricing market help us organize online service delivery. Contact us to discuss privacy questions before submitting medical information.
Access and retention
Authorized staff access account and program records for service delivery. Diet files are served only through an authenticated download check. We keep records for service, accounting and legitimate operational needs, and review data when you request deletion. Ask us for the retention period applicable to your record; information required for transactions or legal obligations may need to be retained.
Your choices
Contact support@thedietcoapp.com to request access, correction, deletion or withdrawal of optional attribution consent. Include your patient ID where available. We verify your identity before acting. Administrative exports and configured CRM webhooks are limited to authorized staff; the default webhook does not send medical files or assessment content.
Children and security
Children do not create their own account; a parent or guardian manages any child-related consultation. We use password hashing and permission checks, but no online system can promise absolute security. Report account or privacy concerns promptly to our team.
Contact
Thedietco, Bhopal, Madhya Pradesh, India. Email: support@thedietcoapp.com. Phone: +91 7224054954.