Privacy Policy

Who we are

Dhruva Fit ("Dhruva", "we", "us", or "our") is a fitness application and website owned and operated by Minimal Softwares Co., a sole proprietorship established in India. Minimal Softwares Co. is the data fiduciary or data controller responsible for the personal data described in this policy.

Our contact address is Pune, Maharashtra, India – 411019. Privacy questions and rights requests may be sent to info@dhruvafit.com.

Information we collect

We collect information that you provide, information created through your use of Dhruva, and limited technical information needed to operate and protect the service.

• Account information, including your name, email address, account identifier, authentication status, and preferences
• Fitness and workout information, including exercises, routines, sets, repetitions, weights, history, goals, progress records, and notes
• Health and fitness data you choose to make available through supported device health services after granting permission
• Communications, including contact submissions, support requests, feedback, and related correspondence
• Device, app, and network information, including device type, operating system, app version, language, IP-derived approximate location, identifiers, timestamps, and security events
• Usage, analytics, performance, and diagnostic information, including feature interactions, session activity, errors, and reliability data
• Push-notification tokens and notification preferences when you enable notifications
• Referral program information, including referral codes or links, qualifying-referral status, earned rewards, and the contact details of people you choose to invite when you submit them

Health and fitness permissions

Dhruva accesses health or fitness data from your device only after you grant the relevant system permission. We process this information to provide workout tracking, progress analysis, and related features requested by you. We do not use health or fitness data for advertising, sell it, or provide it to data brokers.

You can review or revoke health-data permissions through your device settings. Revoking permission stops future access but does not automatically delete information already stored in your Dhruva account; you may delete that information or your account separately. Our Health Data & Permissions page at /health-data explains these permissions and controls in more detail.

No advertising or sale of health data

We do not sell health or fitness data, provide it to data brokers, or use it for advertising, targeted advertising, or advertising measurement. We disclose health or fitness data to service providers only when necessary to operate, secure, support, or provide features you request through Dhruva, subject to appropriate contractual and security obligations.

How we use information

We process personal data for stated, lawful purposes and limit processing to what is reasonably necessary.

• Create, authenticate, maintain, and secure your account
• Store workout history and provide tracking, comparison, progress, and insight features
• Synchronize permitted health and fitness information with features you choose to use
• Deliver service, security, reminder, and workout-related push notifications according to your preferences
• Provide support and respond to enquiries, feedback, and rights requests
• Operate the referral program, verify qualifying referrals, credit rewards, and detect referral fraud or abuse
• Measure usage, diagnose errors, improve reliability, and develop Dhruva features
• Prevent fraud, abuse, unauthorized access, and violations of our Terms
• Comply with applicable legal obligations and enforce legal rights

Legal grounds

Depending on where you live, we rely on your consent, performance of our agreement with you, compliance with law, and our legitimate interests in operating, securing, and improving Dhruva. Where consent applies, you may withdraw it through the relevant app or device control or by contacting us. Withdrawal does not affect processing already lawfully completed.

Indian users receive the notices and rights provided by the Digital Personal Data Protection Act, 2023 and rules brought into force under it. Users elsewhere may have additional rights under local law.

Service providers and sharing

We use a small number of service providers (data processors) to operate Dhruva. They process information for us only on our instructions and under contractual and security obligations. Their processing may also be governed by their own policies where they act independently.

Product and usage analytics are processed on our own infrastructure; we do not use third-party advertising or analytics trackers. We may disclose information when required by law, to protect users or the service, in connection with a business reorganization, or with your direction or consent. We do not sell personal data, share it with data brokers, or use health and fitness data for targeted advertising. Dhruva does not display advertising at launch.

• Amazon Web Services — cloud hosting, media storage and delivery (S3 and CloudFront), and transactional email (SES)
• MongoDB Atlas — managed database hosting
• Expo (Expo Application Services) — delivery of push notifications to your device
• Apple App Store and Google Play — application distribution and paid-plan billing when you purchase through a store

International processing

Dhruva is available internationally. Our providers may process information in India and other countries where they operate. Those countries may have different data-protection laws. Where required, we use contractual, organizational, and technical safeguards for international transfers.

Retention and deletion

We retain account and workout information while your account remains active or as needed to provide Dhruva. Operational records, support communications, security logs, and residual backup copies are generally retained for 90 to 180 days, unless a longer period is required for legal, fraud-prevention, dispute, or security purposes.

When you delete your account, we remove or de-identify associated personal data from active systems and instruct relevant processors to do the same, subject to permitted retention. Residual backup copies may remain protected and inaccessible in routine operations until they expire. Irreversibly anonymized data may be retained because it can no longer identify you.

Your rights and choices

Subject to applicable law, you may have rights to information, access, correction, erasure, restriction, objection, portability, consent withdrawal, and complaint to a competent authority.

• Use account and privacy controls available in the Dhruva application
• Delete your account using the in-app deletion option
• Visit /delete-account for web-based deletion instructions
• Email info@dhruvafit.com from your registered address for assistance or a rights request

Age requirement and minors

Dhruva is intended only for individuals who are at least 18 years old. We do not permit anyone under 18 to create an account or use Dhruva, and a parent or legal guardian may not authorize use by someone under 18.

We do not knowingly collect personal data from anyone under 18. If you believe that a person under 18 has created an account or provided personal data to Dhruva, contact info@dhruvafit.com. We will investigate and, where appropriate, disable the account and delete the personal data, subject to any retention required by law.

Security

We apply reasonable administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encrypted transmission, infrastructure monitoring, and restricted operational access. No online service can guarantee absolute security, and you are responsible for keeping your credentials confidential.

Changes to this policy

We may update this policy as Dhruva, our providers, or applicable laws change. We will post the revised policy with a new effective date and provide additional notice through the app or email when a material change requires it.

Contact and grievances

For privacy questions, consent withdrawal, account deletion, rights requests, or grievances, contact Minimal Softwares Co. at info@dhruvafit.com or write to Pune, Maharashtra, India – 411019. We may request reasonable verification before acting on a request.

The proprietor of Minimal Softwares Co. serves as the designated Grievance Officer under the Digital Personal Data Protection Act, 2023, and can be reached at info@dhruvafit.com with the subject line "Grievance". We will acknowledge and respond to grievances within the period required by applicable law. If your grievance remains unresolved, you may escalate it to the Data Protection Board of India or the competent authority where you live.