Privacy Policy

1. Information We Collect

WorkoutWala collects minimal data to provide elite training services. We are committed to transparency about what we collect and why. The types of information we gather include:

• Account Information: When you create an account, we collect your email address and display name for account management, authentication, and communication purposes. If you sign in via Google OAuth, we receive your basic profile information (name and email) from Google's authentication service.
• Performance Data: We collect personal records, event choices, training preferences, and generated workout history to personalize your experience and improve our generation algorithms. This data is essential for creating plans that adapt to your level and goals.
• Payment Information: When you subscribe to Premium, payment processing is handled entirely by Razorpay. We do not store your credit card numbers, UPI details, or banking information on our servers. Razorpay processes payments in compliance with PCI-DSS standards.
• Technical Data: We automatically collect IP address, browser type, operating system, device information, and page access timestamps for security monitoring, analytics, and service optimization.
• Usage Analytics: We collect anonymized interaction data such as features used, pages visited, and workout generation patterns. This data is used exclusively to improve the quality of our training algorithms and user experience.

2. How We Use Your Data

Your data is used exclusively for the following purposes:

• Personalized Training: Tailor workout intensities, volume, and progression based on your personal bests, event selection, and training history.
• Service Delivery: Maintain your training history, manage your subscription status, and provide access to premium features for subscribed users.
• Algorithm Improvement: Improve our generation algorithms through anonymized performance trends and aggregate usage patterns. Individual user data is never shared.
• Payment Processing: Process payments and manage subscription tiers through our payment partner Razorpay.
• Security & Support: Detect and prevent fraud, abuse, and unauthorized access. Respond to your support requests and provide technical assistance.
• Communication: Send important account notifications, subscription expiry reminders, and service updates. We will never send marketing emails without your explicit consent.

3. Data Security

We implement industry-standard security measures to protect your data. All data in transit is encrypted using SSL/TLS protocols. Your performance data and account information are stored in secure databases with strict access controls, role-based permissions, and regular security audits.

Our infrastructure is hosted on enterprise-grade cloud servers with automatic backups, DDoS protection, and firewall monitoring. We follow the principle of least privilege, meaning only authorized team members can access the data necessary to perform their roles. While we implement robust security measures, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

4. Cookies and Advertising

We use essential cookies to manage your authentication session, remember your preferences, and ensure secure navigation across the platform. These cookies are strictly necessary for the service to function and do not require consent.

Third-party partners, including Google AdSense and Google Analytics, may use cookies, web beacons, and similar technologies to serve personalized ads and collect analytics data. Google AdSense uses cookies to serve ads based on a user's prior visits to this and other websites. You can opt out of personalized advertising by visiting your browser's ad settings or visiting Google's Ad Settings.

5. Data Retention

We retain your account information and performance data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized and aggregated data that cannot be used to identify you may be retained indefinitely for research purposes. Payment records are retained for 7 years as required by Indian tax regulations.

6. Third-Party Services

We use the following third-party services that may collect or process your data:

• Google AdSense: Serves personalized advertisements. Uses cookies for ad personalization.
• Google Analytics: Collects anonymized usage analytics to understand site traffic and user behavior.
• Firebase: Provides authentication services, cloud messaging for notifications, and analytics.
• Razorpay: Processes payment transactions in a PCI-DSS compliant environment.
• Resend / Gmail SMTP: Handles transactional email delivery for account notifications.

7. Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request deletion of your account and all associated personal data.
• Right to Data Portability: Request that your data be transferred to another service provider.
• Right to Object: Object to the processing of your personal data for specific purposes.
• Right to Withdraw Consent: Withdraw previously given consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days and may need to verify your identity before processing your request.

8. Children's Privacy

WorkoutWala is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email or through a prominent notice on our website before the changes take effect. Your continued use of the Service after the changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Website: workoutwala.com/contact
• Location: Gujarat, India