Privacy Policy

1. Data we collect

• Account & identity (via Koovira). You sign in with your Koovira account (single sign-on). We receive basic identity details from Koovira — such as your name, email/phone and account identifier — needed to give you the Service.
• Health profile (sensitive). Details you provide to personalise your plans — such as age, sex, height, weight, activity level, goals, dietary preferences, and any health conditions or limitations you choose to share. This is sensitive personal data.
• Workout & activity data. The plans generated for you, workouts logged, sessions completed, meals, calculators used, and coaching interactions.
• Progress photos. If you choose to upload progress photos, they are stored privately in a protected store and are visible only to you unless you explicitly share them.
• Payment data. Memberships are paid from your Koovira wallet. We record what you purchased and the corresponding invoice; the wallet balance and payment instruments are handled by central Koovira billing, not by The Gym.
• Technical data. Basic device, log and usage information needed to run the Service securely.

2. Purpose & lawful basis (consent)

We process your personal data on the basis of your consent, which you give when you create your profile and use the Service, and which you can withdraw at any time. For sensitive health data, we rely on your specific, informed consent to personalise your fitness experience and keep you safe. We collect only what we need for the following purposes:

• to provide and personalise your workout, yoga and diet plans and daily coaching;
• to keep you safe (e.g. adjusting guidance to conditions or limitations you disclose);
• to operate your membership, billing and invoicing;
• to send you service notifications;
• to maintain the security, integrity and improvement of the Service;
• to comply with legal obligations.

3. How we use your health data

Your health profile is used to personalise your plans and keep your training safe — for example, tailoring intensity, exercises and diet to your goals, preferences and any conditions you disclose. Health data may be processed by Koovira’s BRAMHA AI to generate your guidance.

We never sell your health data, and we do not use it for third-party advertising. It is used only to deliver the Service to you and to keep you safe, as described in this policy.

3b. Location data

With your permission, The Gym by Koovira collects approximate (coarse) and, where you grant it, precise (fine) location only while the app is in use. We do not collect background location. We use it to:

• find nearby gyms, trainers and partner studios on the Find a Gym search;
• show your check-in locations and your own training journey on your profile;
• verify Fitness Passport check-ins — confirming you are actually at the gym you are checking into.

We do not use location for advertising. We do not sell location data and we do not share it with third parties for marketing. Location may be shared within Koovira with the specific gym or trainer the current action requires (for example, the gym you are checking into).

Raw per-session location points are kept only for the duration of the session that produced them and the completion of the related task (for example, a check-in). Aggregated, non-identifying location analytics may be retained for product improvement.

You can revoke the location permission at any time from your device: Settings → Apps → The Gym → Permissions → Location. Features that need location fall back to your saved city or to the manual search bar.

4. Storage & security

• Data is stored on secure Koovira infrastructure in line with Koovira’s security standards.
• Progress photos are held in a protected, access-controlled store and are private to you by default.
• Data is transmitted using encryption in transit (HTTPS/TLS).
• Access to sensitive data is restricted on a need-to-know basis, with reasonable technical and organisational safeguards.

No system is perfectly secure, but we take reasonable steps to protect your data and will act in accordance with applicable law in the event of a data breach.

5. How we share data

The Gym is a Koovira vertical and shares data only with central Koovira services that are needed to run the Service, such as:

• Koovira identity/SSO — to sign you in;
• Koovira billing & wallet — to process membership payments and issue invoices;
• Koovira notifications — to send you service messages;
• BRAMHA AI — to generate your personalised plans and coaching.

We do not sell your data and do not share it with third parties for advertising. We may disclose data where required by law, to enforce our Terms, or to protect the rights and safety of users and Koovira. Where we use processors, they act on our instructions under appropriate safeguards.

6. Your rights

Under the DPDP Act, subject to its conditions, you have the right to:

• Access a summary of the personal data we process about you;
• Correction and completion of inaccurate or incomplete data;
• Erasure of your personal data where it is no longer needed;
• Withdraw consent at any time (this may limit or end your ability to use parts of the Service);
• Grievance redressal and the right to nominate another person to exercise your rights in case of death or incapacity.

To exercise these rights, contact us via koovira.com or the Grievance Officer below.

7. Data retention

We keep your personal data only for as long as your account is active and as needed for the purposes above, or as required by law (for example, tax and invoicing records). When data is no longer needed, we delete or anonymise it. If you withdraw consent or request erasure, we will delete your health profile and progress photos, except where we are legally required to retain certain records.

8. Children

The Service is intended for adults 18 years and older. We do not knowingly process the personal data of children without verifiable parental or guardian consent as required by the DPDP Act. If a person under 18 wishes to use the Service, they may do so only with the consent and supervision of a parent or legal guardian.

9. Grievance Officer

In line with the DPDP Act, you may raise privacy concerns with our Grievance Officer:

• Grievance Officer: [Name / designation — to be appointed]
• Contact: [grievance email / address — via koovira.com]

Placeholder — to be completed by Koovira before publication. If your concern is not resolved, you may approach the Data Protection Board of India as provided under the DPDP Act.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, take reasonable steps to notify you. Continued use of the Service after changes take effect means you accept the updated policy.

11. Contact us

For any privacy question, contact us through koovira.com. The Gym is operated by Koovira, India’s AI services platform, powered by BRAMHA AI.

See also: Terms of Service · Refund & Cancellation Policy