Privacy Policy
In short
- We collect only what we need to coach you and run the app.
- Your health information is used only to support your wellness, only with your consent, and is never sold or used for advertising.
- Your data is stored in India (Mumbai).
- You can see, correct, download or delete your data, and withdraw consent, at any time.
1. Who we are
Fit with MB ("we", "us") provides fitness, nutrition and preventive health coaching led by Madhuri Bhangariya, through the Fit with MB mobile app (also shown as "FitByMB"), this website (fitwithmb.com) and related channels such as WhatsApp and email. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described here.
2. Information we collect
| Type | Examples | When |
|---|---|---|
| Account details | Mobile number, name, email address (optional), date of birth | When you register or sign in |
| Health and fitness information | Height, weight, BMI, body measurements, goals, activity level, health conditions or readings you choose to share | Only when you enter it and give separate health-data consent |
| Activity data | Daily step counts and similar totals from Apple Health or Android Health Connect | Only if you connect them and grant permission |
| Messages and questions | Questions you send to Madhuri, your preferences and feedback | When you contact us |
| Consent records | Which notices and consents you accepted or withdrew, and when | When you give or withdraw consent |
| Technical information | Device type, operating system, app version, crash reports and anonymous usage statistics | When you use the app |
| Website | Basic server and security logs kept by our hosting provider. We do not use advertising or tracking cookies on this website. | When you visit fitwithmb.com |
We do not ask for more than a feature needs. Health information is always optional; you can use parts of the app without it.
3. How we use your information
- To create and secure your account, including sending one-time passwords (OTPs).
- To provide coaching: personalise workouts, meal ideas and plans, show your progress and let you stay in touch with Madhuri.
- To answer your questions and provide support.
- To keep the app working, secure and reliable (for example, fixing crashes).
- To meet legal obligations.
We never sell your personal data. We do not use your health information for advertising or marketing, and we do not show third-party ads.
4. Consent
We process your personal data on the basis of your consent, which we ask for clearly and separately:
- agreement to our Terms of Use, Health Disclaimer and this Privacy Policy when you register;
- a separate consent before we store any health information;
- a separate, optional consent before we send you promotional WhatsApp messages (if we ever do).
You can withdraw any consent at any time in the app (My profile → My data & consents) or by writing to privacy@fitwithmb.com. Withdrawing health-data consent stops its processing and deletes the health information you shared. Withdrawal does not affect processing done before it.
5. Who we share it with
We share personal data only with service providers that help us run Fit with MB, under contracts that require them to protect it and use it only on our instructions:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Secure database, sign-in and storage (hosted in Mumbai, India) | Account, health and app data |
| SMS provider (MSG91) | Sending sign-in codes | Mobile number |
| Zoho | Business email | Emails you send us |
| Cloudflare | Website hosting and security | Technical data from website visits |
| Crash reporting and analytics tools | Finding bugs and understanding which features are used | Technical data with a random ID only. Never your name, number or health information. |
| Apple and Google | App distribution, and Apple Health / Health Connect if you connect them | As described in section 6 |
WhatsApp and Instagram are run by Meta. If you message us on WhatsApp or interact with our Instagram, Meta's own privacy policies apply to those conversations. We never put your health information into a WhatsApp message unless you choose to share it.
We may also disclose information if required by law, or to protect someone's safety.
Some providers may process limited technical data outside India; we only allow this where the DPDP Act permits it and with appropriate safeguards.
6. Apple Health and Android Health Connect
- We only read the specific data types you allow (such as steps), and only after you give permission.
- Data from Apple Health or Health Connect is used only to show your activity and support your coaching. It is never used for advertising, never sold, and never shared with third parties for their own purposes.
- You can revoke access at any time in your phone's settings. When you disconnect, we delete the activity data we synced.
7. Storage, security and retention
- Your data is stored with Supabase in Mumbai, India, encrypted in transit and at rest.
- Strict access rules ensure that only you (and, if you choose a coaching plan, your coach) can see your personal and health information.
- We keep your data while your account is active. If you delete your account, we delete your personal and health data within 30 days. We keep only what the law requires, such as records of your consent and, if you paid for a service, transaction records for the period required by tax law.
- If a data breach affects you, we will inform you and the Data Protection Board of India as the law requires.
8. Your rights
Under the DPDP Act you have the right to:
- access a summary of your personal data and how it is used (including downloading your data from the app);
- correct or update your information (most fields are editable in the app);
- erase your data by deleting your account (see how);
- withdraw consent at any time;
- nominate someone to exercise your rights if you die or become incapable;
- raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.
To use these rights, use the app or write to privacy@fitwithmb.com from your registered email or include your registered mobile number. We may verify your identity before acting.
9. Age limit
Fit with MB is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered, contact us and we will delete the account.
10. Changes to this policy
We may update this policy as the app grows. We will show the date of the latest version at the top, and if a change affects how we use your data, we will tell you in the app and ask for your consent again where required.
11. Contact and grievances
For privacy questions, requests or complaints, contact our Grievance Officer:
Grievance Officer, Fit with MB
Email: privacy@fitwithmb.com
We will acknowledge your request within 7 days and aim to resolve it within 30 days.