Privacy Policy
ApexLifestyle ("we", "us") runs a personal fitness and nutrition coaching service. The ApexLifestyle app is how our coaches plan your training and nutrition, and how you log your progress and talk to your coach. This policy explains what personal data the app collects, why, who can see it, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (the DPDP Act).
Who we are
ApexLifestyle is the data fiduciary responsible for the personal data described in this policy. You can contact us at any time at jjena560@gmail.com.
What we collect
- Account details: your name, email address, profile photo (if you add one) and whether you are a client or a coach. Your password is stored only as a secure hash by our sign-in provider; we never see it.
- Coaching and health data entered by you or your coach: training plans, workouts, exercises and weights lifted, personal records, session notes, meal plans and meals, calories and macronutrients, water intake, daily targets, body weight, body-fat percentage, lean mass, goals and progress photos.
- Messages you exchange with your coach in the app.
- Technical data needed to run the service: sign-in tokens kept in your device's secure storage, a push notification token for your device (if you allow notifications), and server logs (such as IP address and time of request) kept by our hosting provider for security.
We do not show advertising, we do not put analytics or tracking tools in the app, and we do not sell or rent your personal data.
How we use it
- To coach you: show your plan, record your progress, and let your coach review it and adjust your program.
- To let you and your coach message each other, and to notify you of new messages if you allow notifications. A notification shows the sender's name and the start of the message, including on your lock screen; you can turn notifications or previews off in your phone's settings.
- To create and protect your account, including password changes.
- To keep the service working, prevent misuse and meet our legal obligations.
Health data and progress photos
Body measurements, nutrition records and progress photos are sensitive. We use them only to coach you. They are visible to you and to the ApexLifestyle coaching team (our coaches and administrators). Other clients can never see them. Progress photos are kept in private storage and are only shown through short-lived, signed links.
Your consent
We process your personal data on the basis of your consent, which you give when you start using the app after your coach creates your account. You can withdraw consent at any time by contacting us. We will then stop processing your data and delete it as described below, which also means we can no longer coach you through the app.
Who processes data for us
- Supabase, which provides our database, sign-in and file storage. Your data is stored in Supabase's Mumbai, India region.
- GitHub, which stores our encrypted database backups for up to 90 days.
- An email delivery provider, used only to send account emails such as password resets.
- Expo, together with Apple's and Google's push notification services, to deliver message notifications to your device.
Apple and Google distribute the app; their own terms and privacy policies apply to your use of their app stores. Our providers act only on our instructions and are bound by confidentiality and security obligations. Some of them may access data from outside India for support and maintenance. We will also disclose personal data where the law requires it.
How long we keep it
We keep your data while your coaching account is active. When you delete your account in the app, your account and personal data are deleted immediately. If you ask us by email instead, we do it within 30 days. We keep only what the law requires us to keep. Deleted data can remain in encrypted backups for up to 90 days before it is overwritten.
Deleting your account
- In the app: open Profile, choose Delete Account, type DELETE and confirm. Your login, workouts, meals, check-ins, progress photos, goals and messages are deleted straight away.
- By email: write to jjena560@gmail.com from the email address linked to your account and ask us to delete it. We confirm once it is done, within 30 days.
Your rights
Under the DPDP Act you can:
- Ask for a summary of the personal data we hold about you and how we process it.
- Ask us to correct, complete or update your data. You can change your name, photo and password yourself in the app's Profile screen.
- Erase your data and close your account, yourself in the app or by asking us (see Deleting your account).
- Withdraw your consent.
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
- Raise a grievance with us and, if it is not resolved, complain to the Data Protection Board of India.
To use any of these rights, email jjena560@gmail.com from the email address linked to your account. We aim to respond within 30 days.
Security
- All traffic between the app and our servers is encrypted.
- Database access rules ensure each person can reach only the data they are allowed to see.
- Sign-in tokens are kept in your device's encrypted secure storage.
- Backups are encrypted before they are stored.
No system is perfectly secure. If a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.
Children
The app is only for adults aged 18 or over. We do not knowingly create accounts for, or collect personal data from, anyone under 18.
Changes to this policy
If we change this policy we will update the effective date above and, before any material change takes effect, tell you in the app or by email.
Contact and grievances
For questions, requests or complaints about your personal data, contact our grievance officer at jjena560@gmail.com.