Privacy Policy
Template: this page is a starting point written for a small Indian subscription app. Review and edit it (or have a lawyer check it) before you go live.
Brahma Reddy Suravarapu (“we”) runs Elric Fit. This policy explains what personal data we collect, why, and your choices. We follow India's Digital Personal Data Protection Act, 2023 and the IT Act, 2000 and their rules.
What we collect
- Account details: your email address and, if you use Google sign-in, your name and profile picture as shared by Google.
- Your tracking data: workouts, meals, foods, macros, water logs, goals and custom foods you enter. Some of this can relate to your health; we use it only to show it back to you.
- Subscription details: plan, status, renewal dates and payment reference IDs. We never see or store your full card number, UPI PIN or bank details; payments are processed by Razorpay.
- Technical data: basic logs (IP address, browser, time of request) kept by our hosting providers for security and troubleshooting.
Why we use it
- To create your account, sign you in and sync your data across devices.
- To run your free trial and subscription, and send essential emails (account confirmation, password reset, payment receipts, renewal notices).
- To keep the Service secure and fix problems.
We do not sell your data, and we do not use your tracking data for advertising.
Who processes it for us
- Supabase: sign-in and database hosting.
- Netlify: website and server-function hosting.
- Razorpay: payments and subscriptions (their own privacy policy applies to payment data).
- Google: only if you choose “Continue with Google”.
- Open Food Facts: when you use online food search, your search words are sent to their public database. No account details are sent.
These providers may store data on servers outside India, under their own security and data-protection commitments.
On your device
The app keeps a copy of your data and your sign-in session in your browser's local storage so it works offline. Signing out removes the app data copy from that browser. Progress photos are stored only on your device; they are never uploaded to our servers, so they are not synced and are lost if you clear your browser data. We do not use advertising or tracking cookies.
How long we keep it
We keep your data while your account exists. If you ask us to delete your account, we delete your tracking data within 30 days. Payment records may be kept longer where tax and accounting law requires.
Your rights
You can access and export your data in the app, and ask us to correct or delete it, or withdraw consent, by emailing theinfo222@gmail.com. We reply within 30 days.
Security
Data is sent over HTTPS, and database rules make sure each account can only read its own records. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Children
The Service is not meant for children under 18 without a parent's or guardian's consent.
Grievance officer and contact
Brahma Reddy Suravarapu, 3-33-62, NGO Colony 4th Line, opp park, Narasaraopet, Andhra Pradesh 522601, India. Email: theinfo222@gmail.com.