Keva Privacy Policy
Brand: Keva (“Keva”, “we”, “us”)
Company: Navora Life Pvt Ltd, India (“Navora Life”, “Company”)
Website: https://keva.life
Effective Date: 15/12/2025
Last Updated: 15/12/2025
Keva is a nutrition and meal subscription brand operated by Navora Life Pvt Ltd. This Privacy Policy explains how we collect, use, share, store, and protect your personal data when you use our website, mobile application (current or future), and services (nutritionist support, meal subscriptions, progress tracking, and related customer support).
By using Keva, you agree to the practices described in this Privacy Policy.
TLDR
Keva is operated by Navora Life Pvt Ltd and this policy explains how we handle your data.
We collect health data you share (blood/medical reports, allergies, intolerances, medical conditions) because it’s needed to personalize meals and nutrition guidance.
We also collect basics like name, age, height/weight, phone, email, and address because we need to deliver meals and support you.
We do not sell your personal data (including health/medical data) to any third party.
We share only what’s necessary: nutritionists see relevant info to help you; delivery partners get limited delivery details; vendors help run our systems under confidentiality/security obligations.
WhatsApp support is available at +91 96333 55668, and we may keep records of chats because it helps with support and progress tracking (WhatsApp is a third-party service).
We use reasonable security measures (access controls, secure transmission, vendor controls), but no system is 100% secure.
You can request access, correction, or deletion (where permitted) and can withdraw consent by contacting us.
Primary contact: operations@keva.life | Grievance Officer: Amey Akshay Acharya (amey@keva.life).
Keva is intended for 18+ users; we don’t knowingly collect data from children.
1) Definitions
Personal Data: Any data about an individual who can be identified from that data (directly or indirectly), such as name, phone number, email, address, and health information.
Health/Medical Data: Blood reports, lab results, medical reports, allergies, intolerances, medical conditions, and similar information related to your health and diet planning.
Services: Keva’s meal subscriptions, nutritionist consultations, progress tracking, and support.
2) What data we collect
We collect data in three ways: (A) data you provide, (B) data collected automatically, and (C) data from third parties (only when needed/authorized).
A) Data you provide to us
Identity & profile
Name, age, gender (if provided), height, weight, body measurements, goals, dietary preferences, restrictions.
Health & medical data (sensitive)
Blood reports and other lab results.
Medical reports relevant to allergies, intolerances, and nutrition planning.
Allergies, intolerances, medical conditions (as you disclose).
Notes and assessments from nutritionist consultations and progress check-ins.
Contact & delivery
Phone number, email, delivery address, delivery instructions, location details needed for delivery.
Communications
Messages and queries sent to our nutritionists/support through WhatsApp, email, website forms, app chat, calls, or other channels.
Feedback, complaints, and support requests.
B) Data collected automatically (website/app)
Device and technical data (device type, OS, browser type, app version).
Log data (IP address, timestamps, pages/screens viewed, clicks, actions).
Crash reports and performance diagnostics (if using the app).
Cookies and similar technologies on the website (see Section 10).
C) Data from third parties (only when relevant)
Payments: Payment status and basic transaction details from payment gateways (we do not store full card details).
Delivery: Delivery status updates from logistics partners.
Partners (e.g., gyms): Limited enrollment/verification info (only if you sign up through them).
Labs/diagnostics: Only if you ask us to coordinate and you authorize sharing.
3) Why we use your data (purposes)
We use your data to:
Provide and operate the service (create your profile, manage orders, deliver meals, customer support).
Personalize nutrition and meals using your stated goals, preferences, allergies/intolerances, and reports.
Enable progress tracking you choose to do (check-ins, adherence, updates).
Manage subscriptions (pauses, scheduling, plan changes, service communications).
Improve Keva (recipe improvements, service quality, analytics, troubleshooting).
Security and fraud prevention (detect misuse, protect accounts, investigate suspicious activity).
Legal compliance (respond to lawful requests and enforce policies).
We do not use your health/medical data for unrelated purposes without your explicit consent.
4) Consent and your choices
A) Consent for health/medical data
When you upload/share health reports or disclose medical conditions/allergies, you provide explicit consent for Keva to process that data to provide personalization and related services.
B) Withdraw consent
You can withdraw consent by contacting us (Section 14). If you withdraw consent for essential data (like health reports needed for personalization), Keva may not be able to continue or may need to limit the personalization service.
C) Marketing preferences
You can opt out of marketing communications at any time. Service and transactional messages (delivery updates, plan changes, support replies) may still be sent.
5) Our commitment: we don’t sell your data
We respect your privacy. We do not sell your personal data, including your health/medical data, to any third party.
6) How we share your data
We share data only when necessary to deliver the service, operate Keva, or comply with the law.
A) With Keva nutritionists/coaches
Your profile, preferences, and relevant health/diet details are accessible to the nutritionist/coach supporting you, strictly for providing the service.
B) With service providers (vendors/“processors”)
We may use trusted vendors for:
Website/app hosting and storage
Support systems (CRM/helpdesk)
Analytics and performance monitoring
Payment processing
Communications tooling
Logistics coordination tools
They are permitted to use data only to provide services to Keva, and must follow confidentiality and reasonable security obligations.
C) With delivery/logistics partners
We share only what’s required to deliver meals (typically: name, phone, address, and delivery instructions).
D) With partners (e.g., gyms) when you enroll via them
If you sign up via a partner, we may share limited data such as enrollment/plan status where necessary for the partnership, unless you explicitly consent to share more.
E) For legal reasons
We may disclose data if required by applicable law, lawful government requests, court orders, or to protect rights, safety, and security.
7) Data retention (how long we keep data)
We keep personal data only as long as needed to provide services and for legitimate business/legal purposes. For sensitive personal data, retention should be limited to what is required for the stated purpose or as required by law. CIS India+1
Typical retention approach (unless longer retention is legally required):
Active subscription: retained to provide meals, personalization, and support.
After subscription ends: retained for a limited period for support, dispute handling, and compliance, then deleted or anonymized where feasible.
De-identified/aggregated data: may be retained longer for analytics and improvements.
You may request deletion/erasure subject to applicable law and our obligations (see Section 13).
8) Security safeguards
We use reasonable technical and organizational safeguards designed to protect your data, such as:
Access controls (need-to-know basis)
Secure transmission methods (encryption in transit)
Vendor contracts and controls
Monitoring/logging for security and reliability
9) WhatsApp communications (important)
Keva offers support and nutritionist communication via WhatsApp: +91 96333 55668.
By messaging us on WhatsApp, you understand that WhatsApp is a third-party platform and its own terms/privacy practices apply.
We recommend not sending highly sensitive documents over WhatsApp unless necessary; when possible, use the Keva app upload (when available) or email.
We may store conversation records and relevant details from WhatsApp communications to provide support, track progress, and improve service quality.
10) Cookies and similar technologies (website)
We use cookies and similar technologies to:
Ensure site functionality and security
Remember user preferences
Analyze usage and performance
You can manage cookies through your browser settings. Disabling cookies may impact site functionality.
11) De-identified and aggregated data
Where feasible, we may convert personal data into de-identified or aggregated form to improve menus, operations, and insights (e.g., cuisine preference trends). This is intended not to identify you.
12) Cross-border storage/processing
Depending on the vendors we use (hosting, analytics, support tools), your data may be stored or processed outside India. When we do so, we take reasonable steps to ensure confidentiality and security protections remain in place.
13) Your rights and requests
Subject to applicable law, you may request:
Access to information about your personal data
Correction/updates of inaccurate data
Erasure/deletion (where permissible)
Withdraw consent
Grievance redressal
These rights are reflected in India’s DPDP Act framework (including correction and erasure) and the requirement to provide grievance redressal mechanisms. MeitY+2DPDPA+2
How to submit a request: Email us at operations@keva.life (or message WhatsApp for routing), from your registered contact details. We may verify your identity before fulfilling requests.
14) Grievance Officer & contact details
If you have any questions, complaints, or requests related to privacy/data protection, contact:
Primary Operations Contact
Email: operations@keva.life
WhatsApp: +91 96333 55668
Website: https://keva.life
Grievance Officer (India)
Amey Akshay Acharya
Email: amey@keva.life
Address:
Navora Life Pvt Ltd.,
65/1428-e, E1, E3, E4, 4th Floor, Kannankandy Mansion,
Nadakavu, Kozhikode, Kozhikode, Kerala, India, 673011
Under India’s SPDI Rules framework, companies are expected to designate and publish a Grievance Officer and resolve grievances within a specified period. DataGuidance+1
15) Children’s privacy
Keva is intended for individuals 18 years and above. If we learn we have collected personal data from a person under 18 without appropriate authorization, we will take steps to delete it and restrict access. India’s DPDP Act treats individuals under 18 as children and includes specific obligations around processing their data. MeitY+1
16) Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will update the “Last Updated” date and may notify you via the website/app/email/WhatsApp where appropriate.