The short version
- We collect what Merova Fit needs to work: your account details, the fitness data you log, your chats and bookings, and your orders.
- We don't sell your personal data, and we don't use it for ads.
- Payments are handled by Razorpay. We never see or store your full card, UPI or bank details.
- You can ask to see, correct or delete your data at any time by emailing support@merova.app.
Who we are
Merova is run by Aaditya Kumawat, a sole proprietor based in India ("Merova", "we", "us"). This policy explains how we handle personal data when you use:
- this website, merova.app;
- the Merova Fit web app at fit.merova.app; and
- the Merova Fit Android app.
Together we call these "the services". For the purposes of the Digital Personal Data Protection Act, 2023, Merova is the data fiduciary for the personal data described here.
What we collect
We only collect what we need to run the services.
| Data | Examples | Why we need it |
|---|---|---|
| Account details | Name, email address, phone number, password (stored only as a secure hash, never in plain text) | To create and protect your account, send sign-in codes and confirm bookings |
| Onboarding answers | Your goals, age, height, weight, activity level and food preferences [CHECK THIS LIST MATCHES THE QUIZ] | To build your plan |
| Fitness logs | Workouts you complete, meals and calories, water, weight, your day score | To show your progress and let your coach guide you |
| Messages and bookings | Chats with your coach, call bookings and times | To provide coaching |
| Orders and payments | Items bought, amounts, order and payment IDs, payment status, and a delivery address if you order something physical | To process orders, send receipts, handle refunds and keep tax records |
| Messages to us | What you send through the contact form or by email | To reply to you |
| Technical data | Device and browser type, IP address, app version, error logs | To keep the services secure and fix problems |
Some of what you log, like your weight, meals and activity, relates to your health. We use it only to provide the service to you. It is visible to you, your coach and us, and to no one else except the service providers listed below who store it for us.
Payment details such as card numbers, UPI IDs and bank details are entered directly with Razorpay. We receive only a payment reference and status.
How we use your data
- To run your account and the features you use, like plans, logging, chat, bookings and the shop.
- To let your coach see your logs and messages so they can coach you.
- To take payments, send receipts and process refunds.
- To send service messages: sign-in codes by email, receipts, and booking confirmations by email or WhatsApp.
- To keep the services secure, prevent fraud and fix bugs.
- To understand, in total and not per person, which features are used, so we can improve them.
- To meet our legal obligations, such as keeping tax records.
We do not sell or rent your personal data. We do not share it with advertisers. We only send you marketing emails if you have agreed to receive them, and every such email has a way to unsubscribe.
Consent and legal basis
We process your personal data with your consent, which you give when you create an account and agree to this policy, and for other uses that Indian law allows, such as meeting legal obligations.
You can withdraw your consent at any time by emailing support@merova.app or by deleting your account. Withdrawing consent doesn't affect anything we did before, but some features will stop working, because we can't run them without the data.
Who we share it with
We use trusted service providers to run the services. They process data only on our instructions and only for the purpose listed.
| Provider | What they do for us | Data involved |
|---|---|---|
| Razorpay | Payments and refunds | Order and payment details |
| MongoDB Atlas | Database hosting | Account and app data |
| [BACKEND HOST] | Runs the Merova Fit server | Account and app data |
| Twilio | WhatsApp messages | Phone number, booking details |
| Resend | Sign-in codes and receipts by email | Email address, message content |
| Google Workspace | Our email inbox | Emails you send us |
| Web3Forms | Delivers contact form messages | What you type into the form |
| GitHub Pages | Hosts this website | IP address in server logs |
| Google Play | Distributes the Android app | Handled under Google's own policy |
We also share data:
- with your coach, as described above;
- with authorities, if the law requires it or to protect someone's safety; and
- with a new owner, if Merova or an app is ever sold or transferred. We'd tell you first, and this policy would keep applying to your data.
Some providers store data on servers outside India. We only use well-known providers that protect data with strong security, and we transfer data only as Indian law allows.
Cookies and local storage
This website, merova.app, does not use tracking or advertising cookies.
Merova Fit stores a sign-in token on your device so you stay signed in, and remembers settings like light or dark mode. These are needed for the app to work. If we ever add analytics, we'll update this policy first.
How long we keep data
- Account and app data: for as long as your account is open. If you delete your account, we delete this data within 30 days.
- Order, payment and invoice records: for as long as Indian tax and accounting laws require, which is generally up to 8 years.
- Server and error logs: up to [90] days.
- Backups: deleted data can stay in backups for up to [30] days before it's overwritten.
Your rights
Under Indian law, including the Digital Personal Data Protection Act, 2023, you have the right to:
- get a summary of the personal data we hold about you and who we've shared it with;
- correct, complete or update your data;
- have your data erased;
- withdraw your consent;
- nominate someone to use these rights for you if you die or are unable to; and
- raise a complaint with us, and then with the Data Protection Board of India.
To use any of these rights, email support@merova.app from the email address on your account. We'll reply within 30 days. To delete your account, follow the steps on Delete your account.
Security
We protect your data with encrypted connections (HTTPS), hashed passwords, sign-in codes, and access limited to the people and systems that need it. No system is perfectly secure, so we can't promise that data will never be exposed. If a breach affects your data, we'll tell you and the authorities as the law requires.
Age limit
The services are for people aged 18 and over. We don't knowingly collect data from anyone under 18. If we learn that we have, we'll delete it.
Changes to this policy
We may update this policy as the services change. The date at the top shows the latest version. If a change is significant, we'll tell you by email or in the app before it takes effect.
Grievance officer and contact
If you have a question or complaint about your data, contact our grievance officer:
- Name: Aaditya Kumawat
- Email: support@merova.app
- Address: [BUSINESS ADDRESS]
We'll acknowledge your complaint within 48 hours and aim to resolve it within 30 days.