Privacy Policy

1. Introduction & Legal Entity

This Privacy Policy applies to the AuralFit mobile application, website (https://auralfit.fitness), and associated services operated by Spedaris Technologies LLP (“Spedaris”, “we”, “us”, or “our”), a limited liability partnership incorporated in India with registered office in Surat, Gujarat, India. We are committed to safeguarding the privacy of athletes, lifters, and users (“you”) who utilize our workout tracking, sports nutrition, AI coaching, and partner discovery services.

2. Information We Collect

We collect information strictly necessary to deliver personalized athletic coaching, logging, and partner matching:

• Account Credentials: Name, email address, and encrypted authentication tokens.
• Athletic Profile Data: Self-reported body weight, training split preferences (e.g. Push/Pull/Legs), strength experience level, and fitness objectives.
• Workout Telemetry: Logged exercises, set weights, repetition counts, RPE (Rating of Perceived Exertion), completed timestamps, and personal record milestones.
• Nutrition & Dietary Logs: Calorie goals, macronutrient splits (protein, carbohydrates, fats), logged food descriptions, and water intake goals.
• Camera & Uploaded Photos: User-initiated progress check-in photos and meal photos submitted to the AI Meal Photo Scanner.
• Coarsened Proximity Data: Coarse facility-level or approximate distance bucket (e.g., “Inside Facility” or “Within 1 km”) requested only when using the Gym Partner Radar. Exact GPS latitude/longitude is never stored permanently or shared with other athletes.

3. Photo Uploads & AI Processing Security

We maintain rigorous safeguards regarding your images:

• Progress Photos: All physique check-in photos are encrypted at rest using AES-256 and stored in private cloud storage. They are accessible exclusively through your authenticated account session, never displayed on public feeds, and never used to train public machine learning vision models.
• Meal Photo Scanner: Images submitted for calorie and macro estimation are processed via secure API endpoints solely to detect food composition and portion estimates. They are retained only as part of your private diary history unless deleted by you.

4. Third-Party Service Providers & Data Processors

We do not sell, rent, or trade your personal health data to third-party data brokers or advertisers. We share data only with authorized sub-processors necessary to run the service under strict confidentiality agreements:

• Cloud & Database Hosting: Secure cloud infrastructure providers operating encrypted databases in high-compliance datacenters.
• AI Model Providers: Enterprise AI API services utilized to process chat coaching Q&A and meal recognition. Data transmitted via enterprise APIs is zero-retention for training under contractual protections.
• Billing Platform: Google Play manages in-app purchases and subscriptions. We do not store or process your credit card or bank account details directly.

5. Your Rights Under India's DPDP Act 2023 & Global Frameworks

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and international data protection regulations, you possess the following rights:

• Right to Access: Request a summary of your personal data processed by Spedaris Technologies LLP.
• Right to Correction & Erasure: Correct inaccuracies or request complete, permanent erasure of your account, workout history, and photos.
• Right to Grievance Redressal: Submit inquiries or complaints directly to our designated Grievance Officer.
• Right to Withdraw Consent: Revoke permissions for location, camera, or push notifications anytime in your operating system settings.

6. Data Retention & Account Deletion

Your account telemetry, workout logs, and progress photos are retained for as long as your account remains active. If you initiate account deletion from the app settings or via email to support@auralfit.fitness, all personal identifiers, workout records, and stored photos are permanently scrubbed from our active databases within thirty (30) days.

7. Grievance Officer & Redressal Mechanism

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the details of our designated Grievance Officer are provided below:

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect enhancements in application features or regulatory requirements. We will notify users of material modifications through in-app notifications or by updating the “Effective Date” at the top of this page.