Privacy Policy

1RFitness ("we", "our", "us") is a fitness technology platform operated by 1R Fitness Private Limited, India. Our platform provides live fitness coaching, AI-powered nutrition planning, workout tracking, and an online wellness marketplace at www.1rfitness.com.

This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our website, mobile apps, or any related services. By using our platform, you agree to the practices described here.

1. Information You Provide

2. Automatically Collected Data

• Device & Browser: IP address, browser type, OS, device identifiers
• Usage Data: Pages visited, features used, session duration, click events
• Location: Approximate location from IP (not GPS unless you grant permission)
• Cookies: Session tokens, preference cookies, analytics identifiers (see Cookies section)

• Service Delivery: Creating your account, scheduling live coaching, generating AI diet plans
• Personalisation: Tailoring content, plans, and notifications to your fitness goals
• Payments: Processing subscriptions and marketplace orders via Razorpay
• Communication: Appointment reminders, order updates, and platform notifications via WhatsApp, email, or SMS
• Support: Responding to queries and resolving disputes
• Safety & Security: Fraud detection, abuse prevention, account protection
• Analytics & Improvement: Understanding engagement using aggregated, anonymised data
• Legal Obligations: Complying with Indian laws, court orders, and regulatory requirements
• Marketing (with consent): Promotional content — you can opt out at any time

You can manage cookies through your browser settings. For Meta Pixel, use Meta Ad Preferences to opt out of interest-based advertising.

• Encryption: All data in transit encrypted via HTTPS/TLS 1.2+. Sensitive data at rest is encrypted.
• Password Storage: Passwords stored using bcrypt hashing — never plain text.
• Access Controls: Staff access to personal data is role-based and strictly need-to-know.
• Payment Security: PCI-DSS compliant via Razorpay — we never handle raw card numbers.
• Regular Audits: Periodic security reviews and vulnerability assessments.
• Breach Notification: Affected users notified within 72 hours in the event of a data breach.

• Active Account Data: Retained for as long as your account is active.
• Health & Fitness Data: 3 years from last activity.
• Payment Records: 7 years as required by Indian financial regulations.
• Communication Logs: 1 year from date of communication.
• Analytics Data: 26 months (Google Analytics default).
• Deleted Accounts: Personal data anonymised within 30 days. Some records retained for fraud prevention for up to 3 years.

Email privacy@1rfitness.com to exercise any right. We respond within 30 days. Identity verification may be required.

Our platform is intended for users aged 18 years and above. We do not knowingly collect personal data from individuals under 18. If you believe your child has provided us with personal information, contact us at privacy@1rfitness.com and we will delete it promptly.

When we make material changes, we will update the "Last Updated" date, send a WhatsApp/email notification to registered users, and display a prominent notice on the platform for at least 7 days. Continued use after changes constitutes acceptance.