Vietnamese reference translation available. Tiếng Việt

AI scanning is available in beta through AWS Bedrock in Australia. Separate scan consent and human verification are required.

Privacy policy

Operator: Balavi is operated by ANNA DAO PTY LTD · ABN 18 702 398 285 · ACN 702 398 285. Updated 15 October 2026.

Contact and support

Contact and privacy requests: hang.dao.bbb@gmail.com. Registered address (ASIC record supplied by the founder): 52 Cabramatta Rd E, Cabramatta NSW 2166, Australia.

Information and purpose

We use your email for sign-in and account access. Separate adult consent is required before processing your supplement labels, inventory, directions, routines and reminders, which may reveal health information. Hosting processes request/security metadata including IP addresses. Authentication codes are stored only as keyed hashes, expire in 10 minutes and permit at most five attempts. No advertising pixels or session replay are installed.

Overseas recipients

Railway hosts the app, PostgreSQL and private images in Singapore. Operations and support may involve the United States and other countries.

LeadConnector / GoHighLevel (HighLevel Inc., United States) receives your email address and the transactional sign-in email, including its short-lived code, for email delivery. New contacts receive only the vichat-otp tag; we do not send profiles, label images or health records to GHL. Provider contact and message records may remain until deleted; no automatic provider deletion or fixed retention period has been verified. This email service is separate from account health-data storage.

Optional label scanning uses Amazon Web Services (AWS) Bedrock through the Sydney endpoint. The Australian inference profile processes label images in Sydney or Melbourne, Australia; it never falls back to a global or US profile. Only resized label pixels with EXIF metadata removed are sent, without profile, email or account identifiers. Remove names and identifiers from the image yourself. Anthropic supplies the model but does not receive your images or outputs through Bedrock. The direct Anthropic API is not used in this deployment.

Separate consent is required for AWS Bedrock scanning. Outputs are beta: verify every field before saving. AWS states that model providers cannot access prompts or completions. Customer-configured invocation logging is off in this account/region as checked on 15 October 2026. AWS may retain/review flagged images for abuse/CSAM investigation and legal obligations; we do not promise unconditional zero retention. No training use is authorised. Manual entry remains available without scan consent.

Australian AI inference does not mean all application data stays in Australia: Railway account records, stored images and encrypted backups remain in Singapore; email delivery uses GHL in the US. AWS support/operational metadata and legal handling may involve other countries.

ANNA DAO PTY LTD remains responsible for reasonable steps under APP 8; ordinary consent is not a waiver. Provider processing and support may involve subprocessors and other countries. See the collection notice before submitting information.

Choices, security and retention

Account records are isolated in PostgreSQL. Settings provides correction, export, consent withdrawal and account deletion. Deletion removes active account data and private images; it does not automatically erase provider email records. Contact us for provider deletion requests. Encrypted logical database backups are kept for 14 days on a private Railway volume; daily Railway snapshots normally retain six days; manual snapshots require operator deletion and can persist longer. A separate deletion ledger retains only a hash of the random account ID and deletion time, without email, health data or images, while historical backups remain restorable. Restores automatically replay these deletions and invalidate restored sessions before reopening access. Platform log retention remains an operational limitation; we do not promise a fixed deletion time for third-party logs.

We do not sell health records, use them for advertising or copy them into other ventures. Only necessary providers and authorised operators may handle data, subject to lawful demands and incident duties. No security guarantee is absolute.

Complaints

Email the contact above for access, correction, deletion or complaints. You may also contact the OAIC: https://www.oaic.gov.au/privacy/privacy-complaints. No regulator receives records through ordinary app use. Material changes requiring consent will not be activated just by updating this policy.

Current scanning availability

The AWS Bedrock scanning feature is beta with mandatory verification; its current availability is shown above. Direct Anthropic scanning is disabled. Daily user/global cost limits may temporarily stop scanning; manual entry stays available.

Payments

ANNA DAO PTY LTD operates Balavi and is the merchant for Premium. Stripe processes card payments, subscriptions and cancellations. Card details are entered directly on Stripe's hosted pages, not collected by this app. Stripe receives random account identifiers, billing country, billing/contact details entered at Checkout and transaction references. We do not send health profiles, label images or medication records to Stripe.

We use billing references for reconciliation, access and cancellation. App export/deletion includes app billing records; Stripe may retain financial records to meet applicable legal duties. Stripe may process data outside Australia, including the United States; see https://stripe.com/privacy. Disabling new checkout preserves management of existing subscriptions.

Vietnam test: accounts with billing country VN receive free Premium through 31 December 2026 (Vietnam time). VND checkout is disabled; no card is required and no charge or renewal occurs when the beta ends. Paid web Premium remains available in AUD and USD, with a 7-day trial for eligible accounts. The iOS app has no purchases.

Vietnam privacy framework: Law 91/2025/QH15 and Decree 356/2025/NĐ-CP apply from 1 January 2026. Decree 13/2023/NĐ-CP is repealed by Article 42 of Decree 356. We provide separate consent, withdrawal, correction, export and deletion controls. Cross-border processing and provider retention are described above. Internal impact-assessment preparation is not a claim that a dossier has been filed or accepted. Contact our privacy contact above to exercise your rights.