Privacy notice
What Healthy Hueman keeps, and what it doesn't
No ads, no third-party trackers, and no card details on our servers. Only what each feature needs, under your own sign-in, shared only where you ask, and yours to download or delete at any time.
Updated 11 October 2026
Who is responsible
Healthy Hueman (a sole proprietorship, registration pending), Bengaluru, Karnataka, India (Healthy Hueman, "we") is the data fiduciary for the personal data described here: it decides why and how your data is processed. Write to hello@healthyhueman.example for anything about your data, or to the Grievance Officer named on the Contact page.
Gyms that use the gym tools are themselves responsible for the member records they keep in the app (names, phones, plans, payments). For those records Healthy Hueman acts on the gym's instructions as a processor; the gym is the one to ask about them, and this notice explains how the app handles them on the gym's behalf.
What we collect, and why
Only what a feature needs. Each item below is collected for the purpose next to it and for nothing else.
- Sign-in details (name, email address, profile picture) from your Google account, or the name, email address and password you choose: to create and secure your account. We never see a password: Firebase Authentication stores a salted hash of it, sends the verification and reset links, and is the only place it is checked.
- Profile (date of birth, sex, height, weight, activity level, goal, dietary preferences, the role you picked): to size calorie, protein and water targets and to show the right parts of the app. Health-related figures like weight are sensitive data; you give them voluntarily and can remove them.
- Training and nutrition records (weekly plan, workouts logged, weigh-ins, meals, water, body measurements, progress photos, badges and points): so the app can show your progress. Progress photos are optional and private.
- Coaching data (connections with a coach, what you chose to share, programmes, check-ins, messages, ratings, payment periods and invoices): to run the coaching relationship you chose. Coaches' private notes are visible to the coach only.
- Gym data (for gym owners: the gym, plans, members, payments, sign-ups, attendance; for members: your membership, dues, invoices, check-ins): to run the gym tools. Members confirm a gym before any of it reaches their own account.
- Plan and payments (which plan you are on, trial and renewal dates, and for each payment the amount, date and the payment provider's reference): to run your subscription and issue invoices. Card, UPI and bank details go to Razorpay, Google Play or the App Store and never reach us.
- Reminders (a push subscription for each device, the hour you picked, your time zone): to send the reminders you turned on.
- Usage counts (a random id per browser, the page viewed, screen size class, whether the app is installed, the referring site): to understand which parts of the app are used. No advertising identifiers, no third-party analytics.
- Technical records (request logs with an IP-derived hash for rate limiting, error logs): to keep the service secure and working. The hash cannot be turned back into an address.
Calculators and the exercise library work without an account; what you type into a calculator stays in your browser and is never sent to us.
Consent and how to withdraw it
You consent when you sign in and when you turn a feature on: picking a coach and choosing what they see, confirming a gym, joining a leaderboard, turning on reminders, adding a photo. Each of those has an off switch in the app that withdraws that consent, and the data stops being shared from that moment. Withdrawing is as easy as giving: the same screen, one tap.
Withdrawing consent does not undo what was lawfully done before, and some records stay for legal reasons (an invoice already issued, for example). Deleting your account withdraws everything at once.
Children
Healthy Hueman is for people aged 18 and over. The app asks for a date of birth and does not accept one under 18. If you believe a child has an account, write to us and it will be removed.
Who sees your data
Nothing is sold, rented or given to advertisers. Data leaves your account only where you ask for it:
- a coach you connect with, and only the categories you turned on (workouts, meals, weight, assessment, measurements, photos);
- a gym you confirmed as yours (your name, attendance you log, your place on a leaderboard you joined by first name only);
- other members of that gym, on the leaderboard, if you joined it: first name, photo and sessions this week;
- people you share with: an invoice link, a week summary, a calculator result, a message you send on WhatsApp;
- the public coach directory, if you are a coach and listed yourself: the profile you wrote, your rate card, first names from reviews.
Service providers process data on our behalf, under contract, and do not use it for themselves: Google (Firebase Authentication for sign-in), MongoDB Atlas (database), DigitalOcean (file storage in Bangalore), Vercel (hosting), GitHub (the hourly reminder job), and for payments Razorpay (an RBI-licensed payment aggregator, India) on the website and Google Play or the App Store in the apps, each of which sees what a payment needs and keeps card data under its own policy. Some of these providers run outside India; the DPDP Act permits this unless the Government restricts a country, and we will move data if it does.
We disclose data to authorities only when the law requires it and after checking the request is valid.
Where it is kept and how it is protected
Records live in a MongoDB Atlas database; photos, voice notes and documents live in a DigitalOcean Spaces bucket in Bangalore; sign-in is handled by Firebase Authentication; the site is served by Vercel. Everything travels over TLS. Private files are reachable only through short-lived signed links. More on the Security page.
Pages you have opened are cached on your device so the app works offline, and anything logged offline waits on the device until you are back online. The only cookie is a flag that says you are signed in; it holds no secret.
How long we keep it
- Your account and everything in it: until you delete the account, or after three years without a sign-in, when we delete it after notifying the address on file.
- Usage counts: two years, then deleted.
- Request and error logs: 30 days.
- Invoices a gym or coach issued to you: kept by them as business records (the law requires that), in the app until the issuer deletes their account.
- Subscription invoices and payment references: 8 years after the payment, as Indian tax law requires, even after the account is deleted (name, amount, date and GST only).
- Backups: up to 7 days, then overwritten.
- After deletion, a short record that the account was closed (an identifier only) so people you dealt with see "account closed" rather than nothing.
Your rights
Under the DPDP Act you can ask for a summary of your data, correct or complete it, delete it, nominate someone to act for you if you cannot, and complain. In the app:
- See and take it: Profile › Account › Download my data gives you everything as a file.
- Correct it: every field on Profile is editable; logs can be changed day by day.
- Delete it: Profile › Account › Delete account removes your profile, plans, logs, photos, reminders, coaching data and, for a gym owner, the gym with its records, then removes the sign-in. It takes effect at once; backups clear within 7 days. The same works from this website without the app installed.
- Complain: to the Grievance Officer on the Contact page. We acknowledge within 24 hours and answer within 15 days, well inside the 90 days the Rules allow; if you are not satisfied you may approach the Data Protection Board of India.
You also have a duty under the Act not to impersonate others or give false information when exercising these rights.
If something goes wrong
If personal data is lost or exposed, we tell the people affected without delay, in plain words, with what happened and what to do, and report it to the Data Protection Board within 72 hours as the Rules require.
Changes
When this notice changes in a way that matters, the app tells you on your next sign-in and the date above moves. Older versions are available on request.