Privacy Policy
Last updated: October 2026
This policy covers icanbefitter.com and AVYA Fit (the web app at app.icanbefitter.com and the mobile apps), both run by ICANBEFITTER (“we”). Under India's Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the Data Fiduciary for the personal data described here.
The short version
- We do not sell your personal data, show ads, or run trackers that follow you across other sites.
- AVYA Fit stores health-related data you enter or sync. It is used only to run the features you use.
- AI coaching is powered by Google Gemini on its paid API. Photos and health data can be part of what it processes, with your consent.
- You can delete your AVYA Fit account inside the app. Everything is erased except payment records the law makes us keep.
- You must be 13 or older to use AVYA Fit.
Part A — The website
What we collect
- Email address and name when you subscribe to the newsletter, make a free account, join The Keel founding list, or send an inquiry.
- Consent records. When you opt in, we store the exact wording you were shown, what it covers, the time, and your IP address, so we can prove what you agreed to.
- Orders and memberships: what you bought, the amount, its status, and the name and email on the invoice. Our payment processor handles the payment; we never see your card number.
- Technical data: your IP address and request details, used to rate-limit forms, block spam and bots, keep the site secure, and (as above) as proof of consent; error reports; and anonymous page-view and performance data from our analytics provider.
- Telegram chat ID if you are a Keel member and link Telegram to join the members' group.
- Chat messages if you use the chat assistant that appears on some pages. Those messages go to the provider that runs it.
How we use it
- To send the newsletter and free resources you signed up for.
- To respond to inquiries and to run accounts, memberships, receipts and invoices.
- To protect the site from spam, abuse and fraud.
- To improve site performance and content using anonymous analytics.
Who we share it with
We share personal data only with providers who process it on our instructions, and where the law requires:
- Email delivery and newsletter provider
- Database and hosting providers
- Payment processor
- Bot-protection and error-monitoring providers
- Chat assistant provider, only if you use the chat
- Telegram, only if you join the members' group
We do not sell your personal data. Ask us for the named list of providers any time: email upendra@icanbefitter.com.
How long we keep it, and deleting it
- Newsletter and account details: until you unsubscribe or ask us to delete them.
- Invoices and orders (the name, email and amount on them): for as long as Indian tax and financial record-keeping law requires (up to 8 years), because we must keep them even if you ask for deletion.
- Membership records are kept while your membership exists. Ask us to delete once it has ended.
To have your website data deleted, email upendra@icanbefitter.com. We erase everything the law does not require us to keep.
Cookies
We use minimal cookies: a language preference cookie (icbf-lang) and essential session cookies. We use no advertising cookies. Payment checkout, bot protection, the chat assistant and embedded video or audio players may set their own cookies or storage when you use them.
Part B — AVYA Fit (web and mobile apps)
What we collect
Rows tagged Health data are the sensitive ones.
- Account & profile
- Details you enter, such as name, email address, phone number, date of birth, goals and preferences.
- Body dataHealth data
- Body weight and body measurements you log.
- TrainingHealth data
- Workouts, exercises, sets and reps, and your training plans.
- NutritionHealth data
- Food logs and saved meals.
- Sleep & health syncHealth data
- Sleep, steps, weight and similar data from Health Connect, Google Fit or Samsung Health — only if you connect them, and only the data types you allow.
- Progress photosHealth data
- Photos you upload to track your progress.
- AI Coach conversationsHealth data
- The messages you send the AI Coach and its replies. These can reveal health information.
- Device & notifications
- A push notification device ID, plus device type and app version.
- Subscription & payments
- Your plan, its status and payment references from Razorpay. We never receive your card number.
- Security logs
- Basic logs created when the app talks to our servers, such as IP address and request time.
Why we use it
- Training and nutrition tracking: your logs, plans and history.
- AI coaching: the AI Coach answers using your profile and logs.
- Your weekly report and progress review, which compare your logs, measurements and photos over time.
- Syncing sleep, steps and weight from the health apps you connect.
- Push notifications you have turned on.
- Subscriptions, support, security and legal compliance.
We do not use your data for advertising, we do not sell it, and we do not build profiles of you for third parties.
Who processes it
AI features send your messages, logs, health-sync data and progress photos to Google Gemini, only as needed for the task you asked for. These providers process data for AVYA Fit on our instructions:
Supabase
Receives: Your account, logs, plans, AI Coach history and progress photos.
Database and file storage.
Google Gemini
Receives: The messages, logs, health-sync data and progress photos needed for each AI task.
Powers the AI Coach, the weekly report and the progress review. We use the paid Gemini API: under Google's paid-tier terms, data sent through it is not used to train Google's models. Google may keep it for a limited time to detect abuse, which is outside our control.
Razorpay
Receives: Your name, contact details and payment amount at checkout.
Payment processing for subscriptions. Razorpay handles your card details; we do not see them.
OneSignal
Receives: Your push notification device ID and the notification text.
Delivers notifications you have turned on.
Firebase (Google)
Receives: Your device push token.
Firebase Cloud Messaging only, as the delivery route for push notifications on Android. We do not use Firebase Analytics, Crashlytics or sign-in.
Health Connect, Google Fit and Samsung Health send data to AVYA Fit only when you connect them. Their own policies govern data on their side. We use that data only to run the features you see in the app, never for advertising, and never sell it.
Our providers run servers in several countries, including outside India, so your data may be processed there. We choose providers with security commitments and send each only what it needs.
Health data and your consent
Health data is sensitive. Weight, measurements, food, sleep, workouts and body photos say a lot about you, so we ask for your explicit consent in the app before we process them, and we treat AI processing, each health source and notifications as separate choices.
You can withdraw consent at any time: turn off the permission in the app or your phone's settings (health sync, notifications, camera and photos), stop using the AI Coach, delete your account, or email us. Withdrawing does not undo what we did before you withdrew. If a feature needs the data you withdraw, that feature stops working.
Retention and deletion
We keep your data until you delete it. We do not sell it and do not hold it “just in case.”
Delete from inside the app
Open AVYA Fit, go to the Profile tab, tap Delete Account, and type DELETE to confirm. Erasure is immediate and cannot be undone.
Can't sign in or uninstalled the app? Email upendra@icanbefitter.com from the address linked to your account, or include your registered phone number. We verify it's you, complete the deletion within 30 days, and confirm by email. See the full list of what is deleted on the Delete Account page.
- Profile, body stats, workouts, nutrition, photos, AI Coach history, device ID
- Kept while your account is open. Erased when you delete your account.
- Subscription & payment records
- Kept for as long as Indian tax and financial record-keeping law requires (up to 8 years), then deleted.
- Encrypted backups
- Never restored into the live app after you delete. They age out on our database provider's normal backup cycle.
- Gemini abuse-monitoring copies
- Held by Google for a limited time under its API terms. We cannot delete these on request.
On the website, if you unsubscribe or ask us to delete your data, we may keep a minimal record of your email and your opt-out so we never email you again.
Who can use AVYA Fit
AVYA Fit is for people aged 13 years or older. We ask for your date of birth at sign-up to check this. If we learn that someone under 13 has an account, we delete the account and its data.
If you are under 18, Indian law treats you as a child, and some other countries set a higher age for consent, so please use AVYA Fit with your parent or guardian's knowledge. For under-18 users, we do not show ads, we do not track behaviour for advertising, and we do not sell data. A parent or guardian can email us at any time to see, correct or delete a child's data.
AVYA Fit gives general fitness and nutrition guidance. It is not medical advice and is not designed to treat eating disorders. If you are under 18, or have a health condition, talk to a doctor before changing your diet or training.
Your rights
Under the DPDP Act, for the website and the app, you have the right to:
- Access a summary of the personal data we process about you and who it is shared with.
- Correction and updating of data that is wrong or incomplete.
- Erasure of your data, in the app or by email, except records the law requires us to keep (such as invoices and payment records).
- Grievance redressal: a response to any complaint, from the Grievance Officer below.
- Nominate another person to exercise these rights for you if you die or cannot act.
- Withdraw consent at any time, as described above.
To use any of these, email upendra@icanbefitter.com. We verify it is you and reply within 30 days. If you are not satisfied after raising a grievance with us, you can complain to the Data Protection Board of India.
If you live outside India (for example in the EU or UK), you may also have the rights of portability, restriction and objection, and can complain to your local data protection authority. We handle those requests the same way.
Security
All data is encrypted in transit (HTTPS) and at rest. API keys are stored encrypted in our database and never exposed to the frontend. We use row-level database security so one account cannot read another's data. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
Grievance Officer
Upendra Prasad, Grievance Officer, ICANBEFITTER
Email: upendra@icanbefitter.com
Write to us with your registered email or phone number and a description of the problem. We acknowledge every complaint within 48 hours and aim to resolve it within 30 days.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and tell you in the app or by email. Questions about this policy? Email upendra@icanbefitter.com.