MyRise Privacy Policy

COMPLIANCE NOTICE

This Privacy Policy is drafted in full compliance with the Digital Personal Data Protection (DPDP) Act, 2023, and the Digital Personal Data Protection Rules, 2025, as mandated by the Government of India and the Department for Promotion of Industry and Internal Trade (DPIIT).

1. Introduction

Fitbionics Technologies Pvt. Ltd., operating under the brand name "MyRise," is committed to protecting your privacy. We provide an AI-powered adaptive running coaching platform designed to help you train smarter, run safer, and stay consistent.

This Privacy Policy outlines our practices regarding the collection, processing, storage, and protection of your digital personal data when you use our application, website, and associated services.

By accessing or using MyRise services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

We collect specific categories of personal data to provide you with personalized coaching, track your progress, and ensure a safe training environment.

Account Information

Collected: Name, email address, phone number, password, date of birth, gender.

Purpose: To create and manage your account, verify age (must be 18 or older), and communicate with you.

Physical & Health Data

Collected: Height, weight, fitness level, daily fatigue levels, recovery state, Rate of Perceived Exertion (RPE) feedback.

Purpose: To map fatigue and intensity, auto-adjust your weekly training plans, and provide safe, personalized coaching.

Performance Data

Collected: Workout history, missed sessions, pace, distance, heart rate (if integrated with wearables), race timelines.

Purpose: To adapt your training schedule, track progress, and provide real-time audio coaching cues.

Location Data

Collected: GPS coordinates during runs.

Purpose: To track running routes, distance, and pace accurately.

Financial Information

Collected: Billing address, subscription status. Note: Payment processing is handled by secure third-party gateways; we do not store full credit card details.

Purpose: To process subscription memberships (e.g., Rs 600/month core plan) and premium event training purchases.

Social Data

Collected: Profile picture, community challenge participation, leaderboard rankings, running buddy matches.

Purpose: To facilitate social accountability, community engagement, and corporate wellness programs.

3. Consent and Data Processing

We process your personal data based on your explicit, informed, and unambiguous consent. In accordance with the DPDP Act 2023, you have the right to manage your consent through our designated Consent Manager interface within the MyRise application.

Withdrawal of Consent: You may withdraw your consent at any time. The process to withdraw consent is designed to be as easy as the process of giving it. Upon withdrawal, we will cease processing your data for the specified purposes, which may result in the termination of certain personalized coaching features.

Children's Data: Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data without verifiable parental consent, we will take immediate steps to delete it.

4. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with trusted third-party service providers only to the extent necessary to deliver our services. These include:

• Cloud hosting and storage providers.
• Secure payment processing gateways.
• Analytics and performance tracking tools.
• Corporate partners or Run Clubs (only if you explicitly opt-in to their specific programs).

All third-party data processors are bound by strict confidentiality agreements and are required to implement security measures compliant with the DPDP Act 2023.

5. Data Security and Retention

Fitbionics Technologies Pvt. Ltd. implements robust, industry-standard security safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include data encryption, secure access controls, and continuous monitoring of our systems.

Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. Once the purpose is complete, or upon your request for deletion, your data will be securely erased or anonymized.

Breach Notification: In the unlikely event of a personal data breach, we will promptly notify the Data Protection Board of India and all affected users within 72 hours, detailing the nature of the breach and the remedial actions taken.

6. Your Rights as a Data Principal

Under the DPDP Act 2023, you possess the following rights regarding your personal data:

Right to Access

You can request a summary of the personal data we hold about you and the processing activities undertaken.

Right to Correction and Erasure

You can request the correction of inaccurate data or the deletion of your data when it is no longer necessary for the purpose it was collected.

Right to Grievance Redressal

You have the right to register complaints regarding data processing, which we will address within 90 days.

Right to Nominate

You may nominate an individual to exercise your rights in the event of your death or incapacity.

7. Grievance Redressal and Contact Information

We have appointed a Data Protection Officer (DPO) to oversee compliance and address any concerns you may have regarding your privacy.

Email: [email protected]

Company: Fitbionics Technologies Pvt. Ltd.

If your grievance is not resolved satisfactorily within 90 days, you have the right to escalate the matter to the Data Protection Board of India.

8. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any significant changes through the MyRise application or via email prior to the changes taking effect.

Compliant with DPDP Act 2023 and DPIIT Standards