Welcome to Aarohh. We are dedicated to respecting and safeguarding your personal privacy. This Privacy Policy outlines how our mobile application collects, uses, protects, and discloses information when you use our platform.
By downloading, accessing, or using Aarohh, you agree to the collection and use of your information in accordance with this policy.
1. Information We Collect
We only collect information strictly required to provide you with an optimal fitness tracking, workout planning, and gym community experience:
- Account & Identity Data: Full name, email address, password credentials, and optional profile picture.
- Physical & Fitness Profile: Age, date of birth, biological sex, height, body weight, target fitness goals, workout experience level, and dietary preferences.
- Activity & Workout Logs: Completed workout routines, sets, repetitions, weights lifted, workout duration, and hydration logs.
- Gym Affiliation & Attendance: Enrolled gym studio, membership tier, daily check-in timestamps, attendance streaks, and leaderboard points.
2. Google Health Connect & Apple Health Disclosure
Health Connect Limited Use Compliance:
Our use and transfer to any other app of information received from Google Health Connect complies with the Google Health Connect Permissions Policy, including the Limited Use requirements.
With your explicit, granular permission, Aarohh reads and writes fitness data via Google Health Connect (on Android) and Apple Health (on iOS):
- Data Types Accessed: Daily Steps, Total & Active Calories Burned, Body Weight, Distance, and Completed Exercises.
- Purpose of Use: Health data is used strictly within the application to power your daily activity rings, compute accurate caloric deficits, maintain consistent workout streaks, and display your progress analytics.
- Strict Prohibition on Transfer & Advertising: We do NOT sell your health data to data brokers, advertising networks, or third-party resellers. We do NOT use health data for targeted advertising or user profiling.
3. Location Data Usage
Aarohh requests foreground location access (Fine and Coarse GPS coordinates) strictly for on-demand features:
- Nearby Gym Discovery: To calculate real-time distance from your current location to fitness clubs and studios in the Gym Finder.
- Outdoor Workout Tracking: To compute distance, pace, and route maps during active outdoor runs, walks, or cycling sessions.
No Background Location Tracking:
Location access is only invoked when you are actively using the relevant screen in the foreground. We do NOT track, store, or monitor your location in the background when the app is closed.
4. Camera, Storage & Contacts Permissions
- Camera & Photo Gallery: Accessed only when you choose to upload an avatar profile photo, capture progress transformation images, or post workout photos to the social feed.
- Contacts (Optional): If you choose to use the "Find or Invite Friends" feature, contact data is read with your explicit consent solely to find registered connections. We do not copy, sell, or permanently store your address book on our servers.
5. Third-Party Services & Cloud Infrastructure
We work with trusted, enterprise-grade cloud service providers:
- Supabase: Provides encrypted database storage (PostgreSQL), user authentication, and secure session management.
- OpenAI: Powers automated algorithm assistance for personalized workout split and meal recommendations. No personally identifiable health or medical records are shared.
- Google Sign-In & Apple Sign-In: Secure third-party authentication protocols.
6. Data Security & Encryption
We implement rigorous technical and organizational security measures:
- Encryption in Transit: All network communication is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
- Encryption at Rest: Database records and assets are stored in encrypted volumes protected by Row-Level Security (RLS) policies.
- Access Control: User data access is strictly restricted to authenticated application requests belonging to that user.
7. Account & Data Deletion (Google Play Compliance)
In full compliance with Google Play and Apple App Store user data policies, you retain the permanent right to delete your account and all associated personal data at any time:
A. In-App Self-Service Deletion
- Open the Aarohh app.
- Navigate to Settings → Account & Privacy.
- Scroll to the Danger Zone and tap "Delete Account & All Data".
- Confirm the deletion prompt. Your account, profile, attendance records, workout history, and social posts will be permanently deleted immediately.
B. Web Deletion Request
If you cannot access the app, you may submit a data deletion request by emailing support@aarohh.com with the subject line "Account Deletion Request". Your account and all stored records will be expunged within 30 days.
8. Children's Privacy
Aarohh is not directed to children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we discover that a child under 13 has provided us with personal information, we promptly delete such data from our servers.
9. Contact Information
If you have any questions, concerns, or inquiries regarding this Privacy Policy, please contact us at:
