Privacy policy

The short version

• We collect what we need to run your account, your programs and your chats. Nothing more.
• We do not show ads. We do not use advertising IDs or track you across other apps.
• We do not sell your data, and we do not share it with advertisers or data brokers.
• Your coach sees your logs and messages for their program. Nobody else outside our team does.
• You can delete your account at any time, in the app or at our deletion page.

Who we are

Akyn is run by AKYN TECHNOLOGIES (OPC) PRIVATE LIMITED, a company incorporated in India. "Akyn", "we" and "us" mean this company. This policy covers the Akyn apps for Android and iPhone and the website at https://akyn.fit.

Under the Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the Data Fiduciary for the personal data described here, and you are the Data Principal.

What we collect and why

Name and email address

To create your account, sign you in, send receipts and tell you about your account.

Source: You, or Google or Apple when you sign in with them.

User ID

An internal number that links your account to your programs, logs and messages.

Source: We create it.

Photos and files

Your profile photo, and the images and files coaches add to their programs, shown in the app.

Source: You or your coach.

Fitness and diet logs

The workouts and meals you mark done, your streaks and completion. They power your daily view and let your coach see how you are doing. This can say something about your health, so we treat it as sensitive and only your coach sees it.

Source: You.

Chat messages

Messages between you and your coach, stored so both of you can read the history.

Source: You and your coach.

Purchase history

Which programs you bought, the amount, the date and the payment reference. We use it to give you access, send receipts, handle refunds and keep tax records. We never see or store your card, UPI or bank details.

Source: You, and Razorpay when a payment completes.

Coach application

If you ask to become a coach: your name, phone number and, if you give it, your Instagram handle. We use them only to contact you about coaching on Akyn. We send them, with your email and username, to our own support inbox.

Source: You.

Device identifiers and push token

A device ID (the Android ID, or the identifier for vendor on iPhone) and a Firebase Cloud Messaging token, to keep your session secure and deliver notifications to the right phone.

Source: Your device.

Crash data

Crash reports with your device model, OS version and app version, so we can find and fix bugs.

Source: Your device, through Firebase Crashlytics.

App usage analytics

Which screens and features are used, so we know what to improve. Never used for advertising.

Source: Your device, through Firebase Analytics.

Website data

The email you give our waitlist form. After a web purchase, one cookie on that browser (kept 90 days) that remembers the purchase so you can find your access code again. Server logs with IP address and browser type, kept by our host for security.

Source: You and your browser.

We do not collect your precise location, contacts, microphone or advertising identifier. Akyn is not meant for medical data, so please do not put medical records in chats or uploads.

Consent

We ask for your consent when you create an account, and we use your data only for the purposes listed above. You can withdraw consent at any time by deleting your account or writing to us. Withdrawing does not undo processing that already happened, and some features stop working without the data they need. We may also process data where the DPDP Act allows it without consent, for example to keep payment records that tax law requires.

You can turn off notifications at any time in your phone's settings.

Who we share it with

Your coach.When you join a coach's program, that coach sees your name, your logs and progress for their program, and your messages with them. Coaches do not see your payment details.

Service providers. These companies process data for us, only to run Akyn, under their own security and privacy terms:

Google Firebase (Google LLC)

Sign-in (Firebase Authentication), crash reports (Crashlytics), push notifications (Cloud Messaging), app settings (Remote Config) and usage analytics (Analytics).

Google and Apple sign-in

Confirm who you are when you choose to sign in with your Google account or Apple ID. We receive your name and email from them, never your password.

Microsoft Azure (Microsoft Corporation)

Our servers, database and file storage, in the Central India region.

Razorpay (Razorpay Software Private Limited)

Payments on our website. Razorpay collects your payment details directly under its own privacy policy.

Zoho (Zoho Corporation Private Limited)

Email: receipts, account messages and our support inbox.

Vercel (Vercel Inc.)

Hosts this website.

Google Sheets (Google LLC)

Stores the email addresses given to our website waitlist.

The law. We disclose data to government authorities only when Indian law requires it.

If Akyn is ever merged or sold, your data moves only under this policy, and we will tell you first.

Where your data is stored

Our servers, database and files are in India (Microsoft Azure, Central India). Some providers above, such as Google Firebase, Zoho and Vercel, may process data outside India. The DPDP Act allows this, and we will stop any transfer to a country the Government of India restricts.

How long we keep it

• While your account is open, we keep your data so the service works.
• When you delete your account, we sign you out everywhere and hide your profile straight away. If you sign back in within 30 days, you can cancel the deletion. After 30 days we permanently delete your personal data: your name, email, photos, messages and device information.
• We keep your workout and diet logs only in anonymised form, separated from you so they can no longer identify you. We use them to understand how programs are followed.
• We keep a one-way protected fingerprint of your email and sign-in account (not the email itself), used only to prevent fraud and abuse. Your username also stays reserved, so nobody can take it and pose as you.
• Payment and invoice records are kept for 8 years, as Indian tax and company law requires, even after deletion. They hold only what those laws need.
• If you are a coach and we still owe you money, your payout details (UPI ID), until your earnings are paid out. Then we delete them.
• If you ask to become a coach, we keep your name, phone number and Instagram handle while your request is open. Once we have been in touch, we clear them 180 days after the last update to your request, and we delete our support inbox's email about it. We delete them straight away if you delete your account.
• If you are a coach, your programs are hidden straight away. Clients who already paid keep read-only access until their program ends; after that, the program content is deleted.
• Backups that contain your data are overwritten within a further 30 days.
• Crash reports expire on Firebase Crashlytics' own schedule, and analytics events on Firebase's.
• Waitlist emails are deleted once we have invited you or when you ask.

Your rights

Under the DPDP Act you can ask us to:

• give you a summary of the personal data we hold about you and who we have shared it with;
• correct, complete or update your data;
• erase your data (see deleting your account);
• withdraw your consent;
• hear and resolve a complaint about how we handle your data;
• let someone you nominate exercise these rights if you die or cannot act yourself.

Write to grievance@akyn.fit from the email on your account. We may ask you to confirm it is you before acting. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Grievance Officer

Our Grievance Officer handles privacy questions and complaints. Reach them at grievance@akyn.fit. We acknowledge every complaint and aim to resolve it within the time the DPDP Act and its rules allow.

Age

Akyn is only for people aged 18 or over. We do not knowingly collect data from anyone younger. If we learn that an account belongs to someone under 18, we delete it.

Security

Data travels encrypted (HTTPS). Access to our systems is limited to the people who need it to run Akyn. You sign in with Google or Apple, so we never hold a password for you, and card and UPI details go straight to Razorpay, never through our servers. No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board as the DPDP Act requires.

Changes to this policy

When we change this policy we update the date at the top. If a change affects how we use your data, we tell you in the app or by email before it takes effect.

Contact

Privacy questions and complaints: grievance@akyn.fit. Everything else: help@akyn.fit. See also our terms of service.