VeronFit privacy policy
- Effective date
- [EFFECTIVE DATE]
- Version
- 1.0
Contents
1 Who we are and what this policy covers
VeronFit (listed on Google Play as "VeronFit: Workout & Habits") is a workout, habit and daily-discipline app. It is run by Yuvaraj ("we", "us"). You can reach us at yuvarajkgm24@gmail.com or Kangayam, Tamil Nadu, India.
This policy explains what personal data VeronFit collects, why, who can see it, how long we keep it and what choices you have. It covers the VeronFit app on Android and the VeronFit website at https://app.verontechnologies.xyz. They are the same product and use the same account.
VeronFit is for people aged 18 and over (see section 10).
2 The short version
- You decide what goes in. Most of what VeronFit stores is something you typed or tapped: your name, your body measurements, your workouts, habits, water, sleep, mood, weight, and, if you choose, a progress selfie.
- No ads, no ad networks, no tracking tools. VeronFit contains no advertising and no analytics or advertising software from third parties. We do not sell your data.
- You can ask us to delete your account and data without the app: https://app.verontechnologies.xyz/delete-account explains how.
3 What we collect, feature by feature, and why
"Collect" means data that leaves your phone and is stored by VeronFit's service providers (section 6). The "why" column is the only purpose we use it for.
3.1 Your account and signing in
- Email address and password (if you sign up with email). We never see your password; our sign-in provider keeps only a protected form of it (a hash).
- Why
- To create your account, sign you in, and send you the messages needed to confirm your address or reset a password.
- Google sign-in (if you choose "Continue with Google"). Google gives us your name and email address, and may include your Google profile picture address. We use the name and email; our sign-in provider may keep the other details Google sends as part of your sign-in record.
- Why
- To sign you in without a separate password. We do not receive your Google password, contacts, files or anything else from your Google account.
- A sign-in cookie on your device (section 3.12).
- Why
- To keep you signed in.
3.2 About you and your body (set-up)
When you first open VeronFit it asks for: a first name or nickname, your age, your gender (optional, including "prefer not to say"), height, weight, your time zone (for example Asia/Kolkata, read from your device's clock settings; this is not your location), your fitness level and goal, the body areas you want to work on, whether you have dumbbells and how heavy, and how many days and minutes a week you can train. Your weight is also kept as a history each time you record it. You can change most of this later in Settings.
Why: to greet you, to build your weekly plan from the exercise library, to estimate calories (using your weight), and to decide which "day" it is for you (so a workout done at 11:55 pm counts for that day).
3.3 Workouts
For each workout you start, VeronFit records the workout's name, the exact start and end times, pauses, every exercise you finished or skipped, sets and seconds done, rest and relaxation times, whether you did the stretch, how much of the workout you completed, and an estimated number of calories burned. The estimate is calculated from your weight, the type of exercise and the time spent. It is not a medical measurement.
If you build your own workouts, VeronFit stores each one with the name you gave it and the exercises, sets, repetitions or seconds and rests you chose. Only you can see them.
Why: to run the workout player, show your history, streaks and progress, and let the coach look at how your weeks went.
3.4 Habits and the daily check-in
When you tick a habit, VeronFit stores the habit, the date and the time. The nightly check-in stores the time you confirmed your day, a snapshot of which habits were done and an optional note (up to 500 characters). The list of habits is a template the app provides: "Workout completed", "Walking completed", "Reading time" and "Quiet reflection". Your ticks are private to you.
Why: to show your habit progress and streaks.
3.5 Water, sleep, mood and weight
Only if you use these trackers: water entries (amount and time), sleep (when you went to bed and woke up, optional note), mood (one of five faces, optional short note), and weight entries.
Why: to show you your own history and charts. Mood tracking can be turned off in Settings. We do not make health claims from these numbers, and we do not give medical advice.
3.6 Progress selfie and profile picture (optional)
If you choose, you can take or upload one selfie a day and a profile picture. Before upload, the photo is resized on your device, which also removes location and camera details stored inside it. It is kept in a private storage area and is shown to you through a temporary link that expires within five minutes. You can delete a selfie any time. The camera is used only when you tap to take a selfie, and your phone asks your permission first.
Why: so you can see your own progress over time. Photos are never sent to an AI or to any service other than our storage provider (section 6).
3.7 The coach
The coach reads your own recent workouts and offers a small change, such as moving a workout to another day, swapping an exercise for a similar one, going easier or stepping up. A change happens only when you tap its button, and you can undo it. We store which suggestions you accepted or turned down and the last few changes (so you can undo them). It is made of fixed rules inside the app, not a language model; the same history always gives the same advice and nothing about you is sent to an AI provider.
3.8 Reminders and notifications
VeronFit keeps a feed of in-app notices (for example a reminder, a finished workout or a streak milestone) and your reminder settings (which reminders are on, their times and quiet hours). Reminders appear while the app is open; VeronFit does not send background push notifications. If you allow your browser or phone to show notices, VeronFit asks permission first and you can turn this off at any time.
3.9 Exercise videos from YouTube and Vimeo
Some exercises show a video that is hosted by YouTube or Vimeo. Nothing is requested from YouTube or Vimeo until you choose: you tap "Play video", or you answer "Yes, play automatically" to the one-time question under a video (you can change that in Settings, and a video never starts by itself when your device asks for reduced motion or data saving). Until you choose you see a picture that ships with VeronFit and a button that says "Plays from YouTube" or "Plays from Vimeo". After you tap or choose automatic play, your device connects to YouTube's privacy-enhanced player (youtube-nocookie.com) or Vimeo's player (with "do not track" requested), which receive your device's IP address, browser details and any cookies they set, and which collect data under their own rules:
- YouTube is a Google service. Google's privacy policy is at https://policies.google.com/privacy (opens in a new tab). By playing a YouTube video you are also bound by the YouTube Terms of Service (https://www.youtube.com/t/terms (opens in a new tab)).
- Vimeo's privacy policy is at https://vimeo.com/privacy (opens in a new tab).
We do not control these players or what they show. We choose videos we have the right to use, and we try to use videos that carry no advertising, but YouTube and Vimeo decide what their players display. Some exercises instead play a video or picture file stored in VeronFit's own storage; these make no request to any third party. If we ever link a video file that is hosted somewhere else, the host of that file receives your device's IP address when the video loads, and a link that cannot be played inside the app opens in a new tab on its own site.
3.10 What our servers record automatically
Like every online service, our hosting and sign-in providers receive your device's IP address, the type of browser and device, and the time of each request. They keep short-lived technical logs, which can include your IP address, the time and address of each request and, for sign-in events, your email address, to deliver the service, stop abuse (for example repeated wrong passwords) and fix faults. These logs do not contain the values you enter (workouts, weights, notes, photos). VeronFit's own error logs contain error codes and names, not your entries, name or email. We do not use IP addresses to work out where you are and we do not build profiles from them.
3.11 What we do not collect
Your GPS or precise location; your contacts, calendar, messages or call history; your microphone; other apps on your phone; your advertising ID; payment or bank details (VeronFit has no purchases); data from health platforms such as Health Connect; or any data for advertising or analytics.
4 Why we may use your data (the legal reasons, in plain words)
- To give you the service you asked for (an account, a plan, the workout player, trackers, streaks). Without this data VeronFit cannot work.
- Because you said yes (consent). We ask for your consent for things that are optional or more personal: progress selfies, your health-related entries, reminders, and Google sign-in. You can withdraw consent at any time, as easily as you gave it (switch the setting off, delete the entry or delete your account). Withdrawing does not affect what we did before.
- For legitimate security and safety reasons: logs, rate limits and abuse prevention, and fixing errors. We keep this to what is necessary.
- Because the law requires it: for example to answer a lawful order or to report a security breach as required.
Under India's Digital Personal Data Protection Act, 2023 we rely on your consent and on the "voluntarily provided for a stated purpose" and legal-obligation grounds. If you are in the European Economic Area or the UK, the same reasons correspond to contract, consent (explicit consent for health data), legitimate interests and legal obligation.
We use health-related data only to give you the features you use. We never use it for advertising, we never sell it, and no automated decision with legal or similar effect is made about you.
5 Who can see your data
- You
- What they can see
- All of your own data.
- Our service providers (section 6)
- What they can see
- Only what they need to run the service for us, under our instructions.
- Authorities
- What they can see
- Only when a valid legal order requires it. We tell you unless the law forbids it.
Like any online service, VeronFit's data lives in a database hosted by Supabase. The person who owns the hosting accounts could, technically, open that database with the hosting tools. We commit not to look at members' data except to fix a fault you reported, to protect security or to meet a legal duty.
We do not sell your data, rent it, or share it with advertisers, data brokers or analytics companies.
6 Our service providers
They act on our behalf and only for the purposes in this policy. They are not allowed to use your data for their own purposes.
- Supabase
- What it does for VeronFit
- Database, sign-in (authentication) and file storage (selfies, profile pictures). Data is stored in Mumbai, India (ap-south-1).
- Data it handles
- All account and app data described in section 3.
- Vercel
- What it does for VeronFit
- Hosts the VeronFit website and app servers, in Mumbai, India (bom1) and its delivery network.
- Data it handles
- Requests to the app (including the technical data in section 3.10); it passes your data through to Supabase and does not store your entries.
- Google
- What it does for VeronFit
- "Continue with Google" sign-in.
- Data it handles
- Your Google name and email address, as part of signing in. Google acts on its own account for its own services (see its privacy policy).
YouTube and Vimeo are not our service providers. They act on their own when you tap "Play video" or choose automatic play (section 3.9).
7 Where your data is kept
Your data is stored on servers in Mumbai, India (ap-south-1) and may be processed by our providers in other countries, including the United States, where Google and Vercel operate. We use providers that apply security safeguards and contractual protections for personal data, and we transfer data only as the law of India and, where it applies, of your country allows.
8 How long we keep your data, and deleting it
- While your account exists we keep what you entered, so your history, streaks and progress stay available. We do not delete active accounts automatically.
- You can delete single items at any time: a selfie, and entries in the water, sleep, mood and weight trackers.
- You can ask us to delete your whole account through the public page https://app.verontechnologies.xyz/delete-account, which explains how to ask us by email. Deleting the account removes your profile and everything you entered, workouts, habits, trackers, coach history, and your selfies and profile picture from storage. Deleting the app from your phone does not delete your account.
- What may remain for a short time: our database plan keeps no backups, so once your account is deleted your data is gone from our database. Short-lived technical logs kept by our hosting and sign-in providers do not contain the values you entered (workouts, weights, notes, photos). If the law requires us to keep something (for example a security log), we keep only that, for as long as the law requires, and nothing else.
- A copy you exported yourself is yours and is not affected by deletion.
9 Your rights and how to use them
Under India's Digital Personal Data Protection Act, 2023 you have the right to:
- know what personal data we process about you and with whom we share it (this policy, and a copy of your data on request);
- correct, complete and update your data (most of it can be changed in Settings or on the screen where you entered it);
- erase your data (delete your account, section 8);
- withdraw your consent at any time;
- have a grievance answered (see below);
- nominate another person to exercise these rights for you if you die or become unable to act.
If you are in the European Economic Area, the UK or another place with similar laws you also have the right to restrict or object to processing, to receive your data in a portable file, and to complain to your local data-protection authority.
How to use them: use the in-app tools where they exist, or email yuvarajkgm24@gmail.com from the address you signed up with (so we can check it is you). We acknowledge requests within 7 days and answer within 30 days. We never charge for this. If we cannot fully act on a request (for example because the law requires us to keep something), we tell you why.
Grievances: write to Yuvaraj, yuvarajkgm24@gmail.com. If you are not satisfied with our answer you may complain to the Data Protection Board of India once it is in operation, or to your local authority if you live elsewhere.
10 Children
VeronFit is for people aged 18 and over. We do not knowingly collect data from anyone under 18. The Google Play listing is set to adults only. If you think a person under 18 has an account, tell us at yuvarajkgm24@gmail.com and we will delete it.
11 How we protect your data
- All traffic between your device and VeronFit is encrypted (HTTPS), and the website tells browsers to use only secure connections.
- Every table in the database has access rules that decide who may read and change each row. The rules are tested automatically. The app never uses a master database key.
- Selfies and profile pictures are in private storage, reachable only through links that expire within five minutes. Passwords are never stored by us, only protected (hashed) by our sign-in provider.
- The app sends strict security headers, validates every input on the server, and logs errors without personal content.
- No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
12 Links and services we do not control
VeronFit links to or embeds services run by others: Google (sign-in, and YouTube), YouTube and Vimeo. Their privacy practices are their own: Google https://policies.google.com/privacy (opens in a new tab), YouTube Terms of Service https://www.youtube.com/t/terms (opens in a new tab), Vimeo https://vimeo.com/privacy (opens in a new tab).
13 Changes to this policy
When we change this policy in a way that matters, we will update the date and version at the top. Earlier versions are available on request.