# Data Processing Inventory (Data Mapping)

| Field Name | Data Category | Purpose of Processing | Required? | Retention Period | Legal Basis |
| :--- | :--- | :--- | :--- | :--- | :--- |
| first_name, last_name | Identity | Identification and personalized communication. | Yes | Account Lifetime | Affirmative Consent |
| email | Identity | Primary login identifier and consultation notifications. | Yes | Account Lifetime | Affirmative Consent |
| mobile_number | Identity | Contact method for nutritionist/executive follow-up. | Yes | Account Lifetime | Affirmative Consent |
| date_of_birth | Identity | Age verification to comply with child protection laws. | Yes | Account Lifetime | Affirmative Consent |
| medical_history | Health Data | Customizing the 7.4 food plan based on health conditions. | Yes | Active Lifecycle + 2 Years | Affirmative Consent |
| blood_test_results | Health Data | Tracking progress and vital signs during consultation. | Yes | Active Lifecycle + 2 Years | Affirmative Consent |
| food_preferences | Lifestyle | Customizing food plan structure and structure. | Yes | Active Lifecycle + 2 Years | Affirmative Consent |
| consent_given | Legal | Proof of affirmative action per DPDP Act 2023. | Yes | Permanent (Legal Audit) | Legal Obligation |
| consent_timestamp | Legal | Verification of the exact moment consent was obtained. | Yes | Permanent (Legal Audit) | Legal Obligation |
| last_login | Audit | Monitoring inactivity to trigger auto-deletion policy. | Yes | 2 Years | Legitimate Use |

## Legal Basis
All personal and health data processing is based on the **Affirmative Consent** provided by the Data Principal (User) during the registration process, as defined in Section 6 of the DPDP Act 2023.