Privacy Policy

Introduction

At FitandNirbhay we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what we collect, why we collect it, who we share it with and what you can ask us to do about it.

This single policy covers both of the places we operate:

• fitandnirbhay.com — our website, where you read about the programmes and buy one.
• app.fitandnirbhay.com — the coaching app, where your account lives and where your programme is delivered and tracked.

Both are run by the same business and the same people. FitandNirbhay is the data fiduciary for the information described here. By using either the website or the app, you agree to this policy together with our Terms and Conditions.

Section 1: Information We Collect

What we hold depends entirely on what you buy. Someone who buys an eBook gives us far less than someone we coach for twelve weeks.

1.1 Account and purchase information

• Your name, email address, WhatsApp or phone number and country.
• The programme you bought, the amount, the currency and the payment reference. We do not see or store your card, UPI or bank details — those go straight to our payment gateway.
• Your account credentials for the app. Passwords are stored only as a one-way hash and cannot be read by us or by anyone else.

1.2 Health and fitness information

If you buy a coached programme, the app asks you to complete an intake questionnaire. A diet and a training plan cannot be written safely without it. This can include:

• Date of birth, gender, height, weight, waist and other body measurements.
• Your goals, occupation, activity level, sleep, water intake, food preferences, allergies and training history.
• Medical information you choose to tell us — conditions such as diabetes, blood pressure, thyroid or PCOS, past or current injuries, and any medication or supplements you take.
• Weekly check-ins: updated measurements, how closely you followed the plan, energy, sleep, and anything you write to your coach.

1.3 Photographs and documents you upload

The app lets you upload files so your coach can see what a number cannot. All of it is optional — you decide what to share, and you can delete any file afterwards.

• Progress photographs of yourself.
• Blood reports, scan or test reports, prescriptions, and photographs of supplements.

These files are stored privately. They are never publicly accessible: they can only be opened through short-lived links issued to you or to your coach.

1.4 Technical and usage information

• Browser type, device type, IP address, and the pages you visited.
• Sign-in events, so that we can protect your account.

Section 2: How We Use Your Information

• To create and run your account and give you access to what you paid for.
• To write, deliver and adjust your diet plan, training plan and coaching — this is the only reason we ask for health information.
• To review your weekly check-ins and reply to you.
• To send confirmations, receipts, sign-in codes and service updates.
• To provide support over email or WhatsApp when you contact us.
• To send fitness tips, offers or newsletters, only if you have opted in. You can opt out at any time.
• To keep records we are required to keep by law, including tax and payment records.
• To detect and prevent fraud, abuse and unauthorised access.

We do not use your health information, your photographs or your reports for advertising, for training any artificial intelligence model, or for any purpose other than coaching you. We never publish or post your photographs, results or testimonials without asking you separately and in writing first.

Section 3: Your Consent, and Withdrawing It

• We process your health information on the basis of your consent, which you give by choosing to fill in the questionnaire and upload files.
• Sharing medical reports, prescriptions and photographs is always optional. Your programme will still be delivered without them, though it may be less precise, and anything we do not know about cannot be accounted for.
• You may withdraw your consent at any time by writing to us at the address in Section 11. Withdrawing consent does not undo anything done before, and it may mean we can no longer coach you.

Section 4: Sharing of Data

We do not sell, rent or trade your personal information. We never share your health information with advertisers, insurers or employers. We share data only with the service providers who make the service work, and only as much as each one needs:

• Payment processors — to take and verify your payment.
• Email delivery providers — to send account and transactional email.
• Cloud hosting and database providers — to run the website and the app and to hold your account and programme data.
• Secure cloud storage providers — to store the photographs and documents you upload.
• Messaging platforms — only if you choose to contact us there.
• Legal or regulatory authorities, where we are required by law to disclose.

These providers act on our instructions and are not permitted to use your data for their own purposes. Some of them operate servers outside India, which means your data may be stored or processed outside India. We describe them by category rather than by name for security reasons; if you want to know exactly who processes your data, ask us using the details in Section 11 and we will tell you.

Section 5: Data Protection and Security

• All traffic to the website and the app is encrypted in transit using HTTPS.
• Passwords are stored only as salted one-way hashes.
• Your records are separated at the database level so that one client can never read another client's data.
• Uploaded files are stored in private storage and are reachable only through time-limited links.
• Access to your health information is limited to your coach and the small number of people who need it to run the service.
• We take these measures seriously, but no method of transmission or storage over the internet is completely secure. If a breach affects your data, we will notify you and the Data Protection Board as required by law.

Section 6: How Long We Keep Your Data

• Your account, programme history, check-ins and uploads are kept while your account is open, so that you and your coach can look back at your progress.
• You can delete individual photographs and documents from the app yourself at any time.
• If you ask us to close your account, we delete your personal and health data within 90 days.
• We keep payment and invoice records for as long as tax and accounting law requires, even after your account is closed.

Section 7: Your Rights

You have the right to:

• Ask what personal data we hold about you and get a copy of it.
• Correct or update anything that is wrong or out of date. Most of this you can edit yourself in the app.
• Ask us to delete your data and close your account.
• Withdraw consent for health information or marketing email.
• Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
• Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied.

Write to us using the details in Section 11. We will respond within 30 days.

Section 8: Cookies

• We use cookies and similar storage to keep you signed in, to remember your preferences, and to understand how the site is used.
• You may disable cookies in your browser, but the app cannot keep you signed in without them.

Section 9: Children

Our services are for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us their data, contact us and we will delete it.

Section 10: Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date, and if a change materially affects how we use your health information we will tell you by email.

Section 11: Contact and Grievances

For any privacy question, request or complaint, reach our Grievance Officer at:

• Email: [email protected]
• Phone: +91 9889314117