Kasrat Guru Privacy Policy

Overview

Kasrat Guru is an iOS app for personal trainers and their clients. It is operated by PrivacyTech Software (OPC) Private Limited (“we”, “us”, or “our”). This policy explains what the app collects, why, who can see it, and how you can delete it.

The app works offline first: your data is saved on your iPhone and then synced to our servers so your trainer or client can see what you choose to share.

Information We Collect

• Account: email address, username, display name, password (handled by our sign-in provider and never stored in plain text), whether you are a trainer or a client, preferred units, and, if you enter them, height, sex and date of birth.
• Training: workout plans, logged sets, notes, custom exercises and templates.
• Body measurements and progress photos: measurements you log and photos you take inside the app. Photos are never saved to your photo library, and each photo is either private or shared with your trainer.
• Apple Health: only if you allow it, the app reads steps, active energy, exercise and stand time, workouts, activity rings, sleep, resting heart rate, heart rate variability, cardio fitness, weight and body fat. Only daily totals are uploaded; raw samples stay on your iPhone. The app never writes to or changes your Health data.
• Assistant: if a trainer uses the in-app assistant, the messages and the training data the assistant needs to answer them.
• Technical: a push notification token, notification settings and time zone, sync device identifiers, daily assistant usage counts, and server access logs (account id, request type, result and time, without the content of the request).

The app contains no advertising, no third-party analytics and no tracking across other apps or websites.

How We Use Your Information

We use your information only to run the app: to sign you in, sync your data between your devices, share it with your trainer or client as you choose, send notifications you turned on, and email you verification and password reset codes. We do not sell your data, and Health data is never used for advertising, marketing or analytics.

Sharing With Your Trainer

When a client accepts a trainer's invite, they choose which categories the trainer may see: workout logs, body measurements, progress photos and Health summaries. A trainer sees only those categories. Clients can change or withdraw consent at any time in the app, and the withdrawn data is removed from the trainer's iPhone on its next sync.

Service Providers

• Supabase hosts our database, sign-in and photo storage in Singapore.
• Fly.io runs our API server in Singapore.
• Apple delivers push notifications and provides Apple Health. The on-device Apple Intelligence assistant runs entirely on your iPhone.
• OpenAI powers the cloud assistant for trainers who use it. Requests pass through our server and never include progress photos or raw Health samples; contact details are withheld. If you instead sign in with your own ChatGPT account or enter your own OpenAI API key, requests go directly from your iPhone to OpenAI under your agreement with OpenAI.
• An email delivery provider sends verification and password reset codes.

Storage and Security

Data on your iPhone is protected by iOS file encryption, and you can lock progress photos and measurements with Face ID. Data is sent to our servers over encrypted connections. Progress photos are kept in private storage and can only be opened through short-lived links issued to people allowed to see them.

Retention and Deletion

We keep your data while your account exists. You can delete your account in the app under Settings > Account > Delete Account. This erases your profile, training data, measurements, progress photos and Health summaries from our servers and your iPhone.

If you are a trainer, your clients keep their own data, including plans you wrote for them, with your name removed.

After deletion we keep only what the law requires: records that consent was given or withdrawn and that the account was deleted, which name no one, and server access logs, which are deleted after one year.

Your Rights

Under India's Digital Personal Data Protection Act, 2023, you can access, correct and erase your personal data, withdraw consent, and raise a grievance. You can download a copy of your data, withdraw every trainer's access at once, or delete your account from the app. For anything else, email us at the address below.

Age Requirement

Kasrat Guru is for people aged 18 and over. We do not knowingly collect data from anyone younger.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date.

Contact

If you have questions about this privacy policy or your data, you can reach us at contact@privacytech.in.