Privacy Policy.

1. Introduction

Welcome to Dheefit ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Dheefit (the "App").

By using our App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our App.

2. Information We Collect

2.1 Personal Information

When you create an account and use our App, we collect the following personal information:

• Account Information: Email address, name, phone number (optional)
• Profile Information:
  • Gender
  • Date of birth
  • Height (in cm)
  • Weight (in kg)
  • Activity level
  • Profile photo (if uploaded)
• Authentication Data: Email and password (stored securely using Firebase Authentication)

2.2 Health and Fitness Data

To provide our fitness tracking services, we collect the following health and fitness information:

• Step Data: Daily step count, distance traveled, walking speed, GPS location data (for step tracking)
• Nutrition Data:
  • Food entries and meal logs
  • Calorie intake
  • Macronutrient information (protein, carbohydrates, fats, fiber)
  • Meal types (breakfast, lunch, dinner, snacks)
• Water Intake: Daily water consumption records
• Weight Data: Weight entries and weight history
• Workout Data: Exercise logs, workout types, duration
• Fitness Goals: Daily calorie goals, step goals, water intake goals, target weight, weight management goals

2.3 Device and Usage Information

We automatically collect certain information about your device and how you interact with our App:

• Device information (model, operating system version)
• App usage data and analytics
• Crash reports and error logs
• IP address
• Location data (when using GPS step tracking)

2.4 AI Meal Recommendation Data

When you use our AI meal recommendation feature powered by Google Gemini:

• We process your dietary preferences, cuisine choices, and calorie goals to generate personalized meal suggestions
• Your meal preferences and selections are stored to improve future recommendations
• All AI processing is done securely and your data is never shared with third parties except Google Gemini (as part of the AI service)

3. How We Use Your Information

3.1 Core App Functionality

• Account Management: To create and manage your user account
• Fitness Tracking: To track and display your daily fitness metrics
• Personalization: To provide personalized calorie recommendations, meal suggestions, and fitness goals
• AI Meal Recommendations: To generate personalized meal suggestions using Google Gemini

3.2 Service Improvement

• Analytics: To understand how users interact with our App and improve user experience
• Error Monitoring: To identify and fix bugs, crashes, and technical issues
• Performance Optimization: To optimize App performance and functionality

3.3 Communication

• Notifications: Reminders for water intake, meal logging, and other fitness notifications (with your consent)
• Support: To respond to your inquiries and provide customer support

4. How We Store Your Information

4.1 Data Storage

Your data is stored securely using:

• Firebase Firestore: Cloud database service by Google for storing your account, fitness, and health records
• Firebase Authentication: Secure authentication service for managing user accounts
• Local Storage: Some data may be cached locally on your device for offline access

4.2 Data Security

We implement appropriate technical and organizational security measures:

• Encryption: Data is encrypted in transit and at rest
• Authentication: Secure authentication using Firebase
• Access Controls: Limited to authorized personnel only
• Regular Security Updates: We continuously review and upgrade our protections

5. Third-Party Services

We rely on a small number of trusted providers to operate the App. Each processes only the data needed for its function, and each is bound by its own privacy terms:

• Firebase (Google): Authentication, Firestore database, storage, crash reporting and analytics
• Google Gemini: Generates your AI meal recommendations from the dietary preferences and calorie goals you provide
• Apple App Store / Google Play: App distribution, and payment processing if you purchase a subscription

We do not control how these providers handle data under their own policies. We encourage you to review them:

• Firebase Privacy and Security (opens in a new tab)
• Google Privacy Policy (opens in a new tab)

6. Data Sharing and Disclosure

We share your information only in these limited circumstances:

• Service Providers: With the processors listed in Section 5, strictly to operate the App
• Legal Requirements: When required by law, subpoena, court order, or other valid legal process
• Safety: To protect the rights, property, or safety of Dheefit, our users, or the public
• Business Transfer: If Dheefit is involved in a merger, acquisition, or sale of assets, your data may transfer to the successor entity. We will notify you before your data becomes subject to a different privacy policy
• With Your Consent: For any other purpose you explicitly approve

7. Your Rights and Choices

7.1 Access and Correction

• View Your Data: You can view your personal and fitness data within the App
• Update Your Data: You can update your profile, goals, and preferences anytime from App settings

7.2 Data Deletion

8. Children's Privacy

Dheefit is not directed to children under 13 (or under 16 in the European Economic Area), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at support@dheefit.com and we will delete the account and its data promptly.

9. Data Retention

We keep your information only as long as it serves the purpose it was collected for:

• Account and fitness data: Retained for as long as your account is active
• After deletion: Removed from our production systems immediately, and purged from encrypted backups within 30 days
• Crash and diagnostic logs: Retained in aggregated, non-identifying form for up to 90 days
• Legal obligations: Some records may be retained longer where tax, accounting, or other law requires it

10. International Data Transfers

Dheefit is operated from India, and our infrastructure providers store and process data on servers located in the United States and other countries. If you use the App from outside those countries, your information will be transferred to and processed there, where data protection laws may differ from those in your jurisdiction.

For transfers of personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses as implemented by our service providers, together with the technical safeguards described in Section 4.2.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the App, our practices, or legal requirements. When we do, we will revise the "Last Updated" date at the top of this page.

For material changes — such as collecting a new category of data or using your data for a new purpose — we will give you notice in the App before the change takes effect. Your continued use of Dheefit after an update means you accept the revised policy.

12. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the following rights:

• Right to Know: Request the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to legal exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out: Opt out of the sale or sharing of personal information — note that we do not sell or share your data, so there is nothing to opt out of
• Right to Limit: Limit the use of sensitive personal information to what is necessary to provide the App
• Right to Non-Discrimination: We will never deny service, charge different prices, or reduce quality because you exercised a privacy right

To exercise any of these rights, use the in-app deletion flow described in Section 7.2 or email support@dheefit.com. We will verify your identity through the email address on your account and respond within 45 days.

13. GDPR Rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation gives you the following rights over your personal data:

• Access: Obtain a copy of the personal data we hold about you
• Rectification: Correct data that is inaccurate or incomplete
• Erasure: Have your data deleted ("the right to be forgotten")
• Restriction: Ask us to limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing carried out on the basis of our legitimate interests
• Withdraw Consent: Withdraw consent at any time, without affecting processing carried out beforehand

13.1 Legal Bases for Processing

• Consent: For health and fitness data, notifications, and AI meal recommendations
• Contract: To create your account and deliver the features you signed up for
• Legitimate Interests: To secure the App, fix crashes, and improve performance
• Legal Obligation: Where retention or disclosure is required by law

Health and fitness information is treated as a special category of personal data under Article 9 GDPR, and we process it only on the basis of your explicit consent — which you can withdraw at any time by deleting your account.

To exercise these rights, email support@dheefit.com. We will respond within one month. You also have the right to lodge a complaint with your local supervisory authority.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices:

15. Consent

By using Dheefit, you consent to our Privacy Policy and agree to its terms.