Privacy Policy

Version 2026-08-18 · Last updated 18 August 2026

1. Who we are

Fitineary is operated by 7th Pillar Infotech, which is the Data Fiduciary for the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), and the data controller under equivalent laws elsewhere.

2. What this policy covers

This policy covers the Fitineary website at fitineary.app, including the coach page, and the Fitineary mobile app once it is released. Where something applies only to the app and not yet to the website, it is marked clearly.

3. What we collect today

When you join the early access list

• Your email address — so we can tell you when Fitineary launches.
• The goal you chose — one of "lose weight", "build muscle" or "general fitness". This is a broad interest category, not a health record.
• Your consent record — the fact that you ticked each box, the time you did it, and the version of this policy in force at that moment. We keep this because the law requires us to be able to show that consent was given.
• Your confirmation that you are 18 or over.

When a coach joins the coach list

• Name, email address, and professional details you enter: scope of practice, roughly how many clients you have, years coaching, and any certifications you list.

Automatically, when you visit

• The country your request came from, derived by our hosting provider from your IP address. We store the country, not the IP address itself.
• Your browser's user agent string and the page that referred you.
• Analytics events — but only after you consent. See section 14.

4. What we do not collect today

The website deliberately does not ask for, and does not store, any of the following: your weight, height, age, body measurements, target weight, BMI, medical conditions, medication, pregnancy status, or any other health information. It does not ask for your phone number, your postal address, or any payment details. The calculator on the front page runs entirely in your browser — the numbers you type into it are never sent to us and never leave your device.

5. What the app will collect when it launches

When Fitineary is released, the app is a food and training tracker, so it will hold information that is genuinely personal and, in several cases, health-related. That will include:

• What you log about food — meals, items, portions, calories and macros.
• What you log about training — exercises, sets, reps, loads, distances and durations.
• What you log about your body and habits — body weight, sleep, water, and mood.
• Your targets and profile — height, weight, age, activity level and goal, which the app uses to calculate your daily targets.
• Messages you send to a coach through the app, if you connect one.

Coaches see your logs only if you connect them, and only from the moment you do. You connect a coach by entering their code or scanning it — it cannot happen without your action. You can disconnect at any time, after which they stop seeing new data. Coaches can keep private notes about you that you cannot see; those notes belong to the coach.

6. Why we process it, and our lawful basis

We do not sell your personal data. We do not share it with advertisers or data brokers, and we do not use it to build advertising profiles.

7. Who we share it with

We use a small number of service providers, who process data on our instructions only:

We may also disclose personal data where we are legally required to, or to establish or defend a legal claim. If our business is sold or merged, your data may transfer to the buyer, who would be bound by this policy until they give you notice of any change.

8. Where your data goes

Our providers operate outside India, including in the United States, so your personal data is transferred and stored outside India. We rely on the DPDP Act's position that transfers are permitted except to countries the Central Government restricts, and we use providers that offer contractual data protection commitments.

9. How long we keep it

• Early access list: until Fitineary launches plus twelve months, or until you ask us to erase it — whichever comes first.
• Coach list: the same.
• Consent records: for as long as we hold the data they relate to, plus the period in which a claim could be brought.
• App data, once released: for as long as your account is open. If you delete your account we will erase your personal data within 30 days, except anything we must keep by law.

Under section 8(7) of the DPDP Act we erase personal data once the purpose it was collected for is served. If you never take up the app after launch, your list entry is deleted at the end of the period above without you having to ask.

10. Your rights

Under the DPDP Act you have the right to:

• Know what we hold about you and who we have shared it with.
• Have it corrected if it is wrong, incomplete or out of date.
• Have it erased, unless we are required to keep it.
• Withdraw your consent at any time. Withdrawing is as easy as giving — one email to privacy@fitineary.com, or the unsubscribe link in any message we send. Withdrawal does not undo processing that already happened lawfully.
• Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
• Complain, as set out below.

Email privacy@fitineary.com and we will respond within 30 days. We may ask you to confirm the request came from the address we hold.

11. Complaints

If you are unhappy with how we have handled your data, contact our Grievance Officer first — their details are in section 1. We aim to respond within 30 days.

If you are not satisfied with our answer, you have the right to complain to the Data Protection Board of India.

12. Children

Fitineary is not for people under 18, and we ask you to confirm your age before joining the list. We do not knowingly collect personal data from children, we do not track children, and we do not serve them behavioural advertising — section 9 of the DPDP Act prohibits it. If you believe a child has given us their data, email privacy@fitineary.com and we will delete it.

13. Security

Data is encrypted in transit. Access to the signup lists is restricted to people who need it. No system is perfectly secure, and we do not claim otherwise — but if a breach affects your personal data we will notify you and the Data Protection Board, as section 8(6) requires.

14. Cookies and local storage

This website sets no advertising cookies and no third-party tracking cookies.

Our analytics tool loads in an opted-out state with in-memory storage only, which means it sets no cookie and no persistent identifier, and records nothing — not even a page view — unless and until you tick the consent box on the signup form. If you never sign up, no analytics event is ever recorded for you. If you do consent and later change your mind, tell us and we will delete the associated events.

15. Changes to this policy

If we change this policy we will update the version and date at the top. If a change materially affects how we use data you have already given us, we will email you and, where the law requires it, ask for your consent again. Every consent record we keep names the version you agreed to, so we can always tell what you actually signed up to.

16. Contact

Privacy questions: privacy@fitineary.com
Complaints: grievance@fitineary.com
Anything else: hello@fitineary.com