App Privacy Policy

Last Updated: October 12, 2026

This Privacy Policy explains how RUSTIC WISDOM PRIVATE LIMITED (“Company”, “we”, “our”, or “us”) collects, uses, protects, and manages your personal information when you use our mobile application and related services (“App”). Our website has its own Privacy Policy.

This policy is issued under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). By using our application, you agree to the terms described in this policy.

1. Your Consent

You give your consent by creating an account in the App and by granting a permission on your device, such as health data or photo access. Each permission prompt tells you what it is used for, and this policy describes it in full. You may withdraw consent at any time by revoking the permission in your device settings, deleting your account from within the App, or writing to the Grievance Officer named in section 13.

2. Information We Collect

We collect basic information such as:

Name
Address
Age
Email address
Phone number
The profile, health history, lifestyle and progress details you enter so that your coach can guide you
Body measurements, weight and the progress photos you upload
Meal logs and your daily activity log (steps, sleep, water)
Messages, photos and documents you exchange with your coach in the App, and your video sessions with your coach
Payment and order records (we never see or store your card or bank details)

We may also collect limited device-related information such as:

Device type
Operating system version
App version
Diagnostic logs
Your phone's time zone and language setting when you sign in, so we can see which region you use the App from. We never use GPS, and the App does not ask for location access.

3. Health Data Access (Read-Only)

If you grant permission, our application may read wellness data from:

Android Health Connect
Apple Health (HealthKit)

The categories of health data may include:

Steps
Exercise sessions
Sleep data
Heart rate
Total calories burned
Hydration records

We only read this data to help you and your coach track your health progress and the effect of programme changes inside the app. We do not modify, delete, or write any health data back to Health Connect or Apple Health. Health data is never sold, shared with advertisers, or used for advertising.

4. Why We Collect Personal Information

Account and profile: to provide and operate the coaching programme you have enrolled in, schedule sessions with your coach, and let your coach guide you
Health data (with permission): to track your health progress and programme changes, as described in section 3
Blood-test bookings: to schedule and perform blood tests and to communicate test results
Device information: to maintain system security, fix crashes and improve our services
All categories: to provide customer support

Our application does not provide medical diagnosis or treatment and should not be considered a medical device.

5. Sharing of Information

We do not sell, rent, or trade customer information.

Information may only be shared:

With your assigned coach and the Rustic Wisdom staff who serve you
With our blood test partner for scheduling and performing tests
With trusted cloud or analytics providers strictly for service operation: Amazon Web Services (hosting and storage, Mumbai, India) and Google Firebase (crash reporting and push notifications)
With your coach through Telegram: when you log your day or book a session, a summary (which can include your weight, sleep, steps and water) is sent to your coach as a Telegram message
With Razorpay, to process your payments
With Shiprocket, our delivery partner, when you order a product: your name, phone number and delivery address
If required by law or legal process

All partners are required to comply with applicable data protection laws.

Client transformations. We publish a client's transformation story, photos or results on our social media handles or website only after obtaining that client's consent. Without consent, we do not post it.

6. Data Security

Encryption in transit (HTTPS/TLS)
Secure cloud storage on Amazon Web Services
Access control mechanisms
Restricted internal access

While we use reasonable safeguards, no digital system is completely secure.

7. Data Retention

We retain personal data only as long as necessary to provide services, fulfill legal obligations, and resolve disputes. Specifically:

Account and programme records, including health data read from your device: while your account is open and your programme is running.
After you delete your account: your login is removed at once. Your profile, programme records, measurements, progress photos, messages and health data are moved to a restricted archive that only authorised staff can open, kept for 5 years from the date your account is deleted so that we can answer a question or dispute about the services we provided, and then permanently deleted.
Payment and invoice records: for 8 years after your last payment, which is the period Indian company and tax law requires us to keep financial records.

Users may request deletion of their data at any time from within the App or by contacting us via email. We will delete it unless a law requires us to keep it.

8. Your Rights

Under the DPDP Act you have the right to:

Access personal data
Correct inaccurate information
Request deletion of data
Withdraw optional permissions and consent
Nominate a person to exercise these rights on your behalf if you are unable to

Health permissions can be revoked anytime from device settings.

To exercise any right, email the Grievance Officer named in section 13. We will respond within 48 hours on working days. If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

9. Children's Privacy

Our application is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact the Grievance Officer and we will delete it.

10. Analytics & App Performance

We may use analytics tools to monitor performance, detect crashes, and improve user experience. These tools do not access your health records.

11. Where Your Data Is Stored

The personal data you give us is stored in India, on Amazon Web Services in the Mumbai (ap-south-1) region. Crash and diagnostic reports are processed by Google Firebase and may be handled outside India; they do not contain your health data. Coach notifications sent through Telegram, described in the sharing section, are handled on Telegram's servers, which may be outside India.

12. Refund and Cancellation Policy

Due to the nature of our services, there are no refunds or cancellations once an order is placed and the payment has been processed. The full terms, including the conditions for products and blood tests booked through the App, are on our Refund Policy page.

13. Grievance Officer and Contact Information

If you have any questions regarding this Privacy Policy, or wish to exercise your rights, please contact:

Grievance Officer (DPDP Act): Deepak A
Email: deepaka@rusticwisdom.in
We acknowledge and respond to privacy requests and grievances within 48 hours on working days.

Company: RUSTIC WISDOM PRIVATE LIMITED
Email: contact@rusticwisdom.in
Contact No: +91 90084 82055
Address: 4th Floor, NR Towers, 17th Cross, 19th Main Rd, Sector 4, HSR Layout, Bengaluru, Karnataka, India 560102

14. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top shows the latest revision. Continued use of the application constitutes acceptance of the revised policy.