Privacy notice

1. Who is responsible

KensFIT is operated by [Your full name or company name], [Postal address in India], the "Data Fiduciary" for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025.

2. Personal data we process

Account data: email address, optional display name, password (stored only as a secure hash by our authentication provider).

Fitness and health data you enter or connect: workouts, distance, duration, heart rate readings, sleep hours and quality, mood, stress, meals and nutrients, water intake, body weight, height, age, diet type and training goals.

Food photos you choose to analyse.

Consent records: which version of this notice you accepted, when, and whether you have withdrawn consent.

Technical data needed to sync: the device type that last synced and the time of sync.

3. Purposes (and nothing else)

(a) To show your dashboard, readiness score, training, meal and hydration plans.

(b) To estimate nutrition from a food photo you submit.

(c) To keep a copy in the cloud so your devices show the same data — only if you consent.

(d) To create and secure your account, and to respond to your requests and complaints.

We do not sell your data, use it for advertising, profile you for third parties, or use it to make decisions about you such as credit, insurance or employment.

4. Consent

Without an account, all data stays only on your device and we receive none of it.

Cloud sync starts only after you give free, specific, informed and unambiguous consent by ticking both boxes on the Sync page. You can use the app without giving it.

You can withdraw consent at any time, as easily as you gave it, with Withdraw consent on the Sync page. Your cloud copy is then deleted. Withdrawal does not affect processing done before it.

5. Children

KensFIT is for people aged 18 and over. We do not knowingly process data of children. If you are under 18, do not create an account; a parent or lawful guardian must not create one on your behalf without contacting us first for verifiable consent.

6. Who processes data for us

Cloud hosting and authentication provider (stores your account and synced copy).

AI model provider (receives a food photo only at the moment you ask for analysis; KensFIT does not store the photo).

These Data Processors act only on our instructions under contract. Data may be processed on servers outside India, in countries not restricted by the Government of India under Section 16 of the DPDP Act.

7. Retention and erasure

Your cloud data is kept only while your account is active and consent stands. It is erased when you withdraw consent or delete your account.

If an account shows no activity for 3 years, we will email you at least 48 hours before erasing it, unless you sign in.

Data on your own device stays until you clear it or uninstall the app.

8. Your rights

Access: get a summary of your data and its processing — use Download my data on the Sync page.

Correction and completion: edit any entry in the app, or ask us.

Erasure: Delete my account permanently removes your login, profile and cloud copy.

Withdraw consent at any time (see section 4).

Nominate a person to exercise your rights if you die or become incapacitated — email us with their details.

Grievance redressal: complain to our Grievance Officer (below). We will respond within 90 days.

If you are not satisfied, you may complain to the Data Protection Board of India after using our grievance process.

9. Security and breaches

Encrypted connections, per-user access rules on all stored data, hashed passwords checked against known breach lists, and email confirmation for new accounts.

If a personal data breach affects you, we will inform you and the Data Protection Board without delay, describing what happened, the likely impact and what you can do.

10. Your duties

Under Section 15 of the DPDP Act, provide accurate information, do not impersonate anyone, and do not file false complaints.

11. Changes

If we change this notice in a way that affects how we use your data, we will ask for your consent again before continuing cloud sync.