Privacy Policy

This Privacy Policy explains how Energize.fit ("we", "us", "our"), operated by Shahid Khan (Sole Proprietor) with its registered office at 1182 Prestige Brooklyn Heights, Kanakapura Main Road, 1st Phase J.P. Nagar, Bengaluru — 560078, India, collects, uses, shares and protects information when you use our website at energize.fit, our mobile/web application, and any related services (collectively, the "Services").

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, and applicable provisions of the Information Technology Act, 2000 and the SPDI Rules, 2011.

1. Information we collect

• Account information: name, email, password (hashed), phone number (if provided).
• Health & wellness data: age, gender, height, weight, body composition, goals, health conditions, dietary preferences, food logs, exercise activity, sleep entries, stress journals, onboarding answers, and uploaded reports (e.g. blood test PDFs/images).
• Usage data: device type, browser, IP address, pages viewed, feature usage, AI-chat conversations, log timestamps, error logs.
• Payment data: billing details and subscription status. Card numbers are processed and stored by our PCI-DSS compliant payment provider Razorpay; we do not store full card details on our servers.
• Communications: messages with our coaches, support emails, contact-form submissions, referral activity.

2. How we use your information

• To create and operate your account, deliver personalised meal plans, AI insights and coaching.
• To provide customer support, send transactional emails (account, billing, plan updates) and service-related notifications.
• To process payments and prevent fraud.
• To improve our Services, train internal models, debug, and ensure security.
• To comply with legal obligations and enforce our Terms.
• To send marketing communications only with your consent (you can opt out anytime).

3. Legal bases (DPDP Act)

We process your personal data on the basis of your consent (given at signup and during onboarding), to perform the contract between us, to comply with legal obligations, and for legitimate interests such as security, fraud prevention and product improvement.

4. Sharing & disclosure

We do not sell your personal data. We share data only with:

• Service providers / data processors who help us operate (cloud hosting, MongoDB, Razorpay for payments, Emailit / email delivery providers, AI model providers such as Google Gemini and OpenAI for processing chat and insights). These processors handle data on our behalf under appropriate contractual safeguards.
• Coaches / wellness experts assigned to you, only for the purpose of delivering the Premium plan you subscribed to.
• Authorities, when required by law, court order, or to protect rights, safety and security.
• Successors in the event of a merger, acquisition or asset sale.

5. AI processing

Some features (AI insights, meal-plan generation, chat) send your relevant inputs (age, goals, conditions, food logs, questions) to third-party AI model providers (currently Google Gemini and OpenAI) for inference. We send only the data needed for the feature, and we do not allow these providers to train their public models on your personal data where the provider offers an opt-out.

6. Data retention

We retain account and health data while your account is active and for up to 24 months after deletion or account closure for legal, tax, audit and dispute-resolution purposes, after which it is deleted or anonymized. Payment records are retained as required by Indian tax law (typically 8 years).

7. Your rights

Under the DPDP Act, you have the right to:

• Access a copy of your personal data — available in-app via Profile → Export my data.
• Correct inaccurate or incomplete data.
• Delete your account and associated data — available in-app via Profile → Delete my account.
• Withdraw consent at any time (this will not affect processing already done).
• Nominate another person to exercise your rights in case of death or incapacity.
• File a grievance with our Grievance Officer (below) or with the Data Protection Board of India.

8. Security

We use industry-standard security measures: TLS in transit, hashed passwords (bcrypt), restricted access to production systems, encryption at rest for sensitive fields, and rate-limiting on authentication endpoints. No system is 100% secure; please use a strong, unique password.

9. Children

Our Services are not intended for children under 18. We do not knowingly collect personal data of children. If you believe a child has provided us data, please contact us and we will delete it.

10. International transfers

Some of our processors (e.g., AI providers, email delivery) operate outside India. Where data is transferred, we ensure it is governed by appropriate contractual protections.

11. Cookies

We use essential cookies and local storage to keep you logged in and remember preferences. We may use analytics cookies to understand usage in aggregate; you can disable cookies in your browser, though some features may not work.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notice at least 7 days before they take effect.

13. Grievance Officer

In accordance with the IT Act, 2000 and the DPDP Act, 2023, our Grievance Officer is:

• Name: Shahid Khan
• Address: 1182 Prestige Brooklyn Heights, Kanakapura Main Road, 1st Phase J.P. Nagar, Bengaluru — 560078, India
• Email: info@energize.fit
• Phone / WhatsApp: +91 74118 78511 (Mon–Sat, 10 AM – 5 PM IST)

We aim to acknowledge complaints within 48 hours and resolve them within 30 days.

14. Contact us

Questions? Email info@energize.fit.