At Fitmango Technologies, Inc. ("Fitmango", "we", "us", or "our"), safeguarding your personal dietary and biometric information is our core commitment. This Privacy Policy outlines how we collect, process, store, and safeguard your data when using our website (fitmango.co.in), our free consumer web application (app.fitmango.co.in), and our gym member retention platforms.

1. Regulatory Compliance Framework

We operate in strict adherence with global and regional data protection statutes, notably:

India Digital Personal Data Protection (DPDP) Act, 2023: Ensuring consent-first processing, clear withdrawal mechanisms, and lawful processing.
General Data Protection Regulation (GDPR - EU/UK): Upholding data minimization, the right to erasure, and strict data controller obligations.
California Consumer Privacy Act (CCPA / CPRA): Providing comprehensive disclosure of data categories and a strict guarantee: We do not sell or share personal health data.

2. Information We Collect

We collect information you explicitly provide and minimal automated telemetry:

A. Information You Voluntarily Provide

• Account Details: Email address and profile display name when registering via Google Single Sign-On (SSO).
• Dietary & Meal Logs: Conversational text descriptions (e.g., "Greek yogurt with blueberries" or "2 rotis and a bowl of dal"), calorie targets, TDEE metrics, and optional Bring Your Own Key (BYOK) API credentials.
• Encrypted Health Profiles: Optional user-declared medical conditions (such as Diabetes, PCOS, Thyroid conditions, Hypertension, or Celiac disease) for personalized diet planning, encrypted at rest using AES-256-GCM.
• Gym & Facility Records: For gym members and owners: gym affiliation, membership plan duration, freeze dates, and documents uploaded to the Member Document Vault (e.g., ID proofs, medical waivers).
• Support & Inquiries: Organization name, gym location, and contact information provided on demo or inquiry forms.

B. Automatically Collected Technical Data

• Device & Network Identifiers: IP address (anonymized), browser user-agent, operating system, and session timestamps.
• Usage Telemetry: Aggregated feature interactions, model response latencies, and Core Web Vitals performance benchmarks.
• Cookies & Storage Tokens: Refer to our Cookie Policy for detailed specifics.

3. Purpose & Legal Basis for Processing

We process your data strictly under the following lawful bases:

Performance of Service: Computing macronutrient estimates, generating personalized diet charts, and syncing your calendar analytics.
Explicit User Consent: When you upload meals, accept optional analytics cookies, or request partner gym coaching oversight.
Legitimate Interests: Preventing brute-force security attacks, maintaining platform uptime, and debugging neural model inferencing accuracy.

4. Data Retention & Encryption Architecture

All data transmitted to Fitmango is encrypted in transit using Transport Layer Security (TLS 1.3) and stored at rest using AES-256 encryption. Food photographs uploaded for volume estimation are processed ephemerally in RAM and are not retained for external model training without explicit opt-in consent.

You may purge your meal history or delete your entire account at any moment through the web application settings. Deletion requests permanently expunge active database records within 72 hours.

5. Third-Party Disclosures & Processors

We do NOT sell, lease, or monetize your health data. We disclose limited data exclusively to vetted infrastructure sub-processors:

Cloud Infrastructure: High-security ISO-27001 certified cloud server environments located in secure enterprise data centers.
Anonymous Analytics: Privacy-shielded Google Analytics (subject to your explicit cookie preferences).
Affiliated Gyms: If you join Fitmango through a partner fitness club, your assigned trainer only receives access to the nutrition leaderboard metrics you have explicitly consented to share.

6. Your Statutory Rights

Under the DPDP Act 2023, GDPR, and CCPA, you hold comprehensive rights over your personal data:

Right to Access & Portability: Request a complete machine-readable copy (JSON) of your historical nutritional logs.
Right to Rectification: Correct inaccurate calorie targets or profile parameters.
Right to Erasure ("Right to Be Forgotten"): Request immediate permanent deletion of all stored dietary data.
Right to Withdraw Consent: Revoke analytics or coaching access at any time with immediate effect.

7. Grievance Officer & Contact Information

In compliance with the Digital Personal Data Protection Act, 2023 and global privacy frameworks, any inquiries, complaints, or data deletion requests may be directed to our designated Grievance & Privacy Officer:

Fitmango Technologies Data Protection & Grievance Cell

Designation: Data Protection Officer (DPO)

Jurisdiction: New Delhi, India

info@fitmango.co.in