Privacy Policy

01Who we are

remain.fit (the "Service", "we", "us", "our") is operated by BYTSOLV DIGITAL TRANSFORMATIONS PRIVATE LIMITED, a company incorporated in India (CIN: U62099KL2023PTC083187), with its registered office at 37/1993, Infra Futura Building, 8th Floor, Kakkanad, Thrikkakara, Ernakulam, Kerala, India, 682021. We are the data fiduciary responsible for personal data processed through the Service.

For any privacy question, you can reach us at legal@remain.fit. Details of our Grievance Officer are in section 14.

02Scope of this policy

This policy covers the remain.fit website, web application, and mobile applications, together with the tools offered within them (such as fasting tracking). It does not cover third-party services you reach through links from the Service, which have their own privacy policies.

This policy is published under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules made under it, including the Reasonable Security Practices Rules, 2011. Where you access the Service from outside India, your data is still processed as described here.

03Information we collect

We collect only what a tool needs to function. We do not require your real name, phone number, or address to use the Service.

04How we use your information

We use your information to:

• authenticate you and keep your account secure;
• provide, operate, and sync the tools you use across your devices;
• calculate and display your own metrics (durations, targets, streaks, and other summaries);
• remember your preferences, such as theme and time zone;
• process and manage subscriptions for paid features;
• maintain security, prevent abuse, and diagnose technical problems;
• comply with legal obligations and respond to lawful requests.

We do not sell your personal data, and we do not use your health data to serve advertising or to build marketing profiles.

05Consent & lawful basis

We process your personal data on the basis of your consent, given when you create an account and use the tools, and to perform the service you have asked us to provide. Where you provide sensitive (health-related) data, you consent to us processing it for the specific purpose of operating the tool you are using.

You may withdraw your consent at any time by deleting the relevant data or your account (see Your rights). Withdrawing consent does not affect processing already carried out, and may mean parts of the Service can no longer function.

06Sharing & service providers

We do not sell or rent your personal data. We share it only with service providers ("data processors") who help us run the Service, and only to the extent needed:

• Google Firebase (Google LLC / Google Cloud) — authentication, database (Cloud Firestore), hosting, and app-integrity checks. Your account and health data are stored in Firebase.
• Apple (Apple Inc.) — where you choose Sign in with Apple, to authenticate you.
• Payment processor — the Service does not currently offer paid features or process payments. If we introduce them, we will name our payment processor here and update this policy before any payment data is collected.

These providers are bound to use your data only to provide their services to us. We may also disclose data where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.

07Data storage & transfers

Your data is stored and processed on infrastructure operated by our service providers, which may be located outside India (for example, in Google Cloud data centres in other regions). Where personal data is transferred across borders, we rely on the safeguards and contractual protections offered by those providers, consistent with applicable law.

08Security

We apply reasonable security practices to protect your data, including:

• encryption in transit (HTTPS/TLS) and encryption at rest on our providers' infrastructure;
• strict access rules so that each account can read and write only its own data;
• app-integrity verification to reduce automated abuse.

No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security. If we become aware of a personal-data breach affecting you, we will notify you and the relevant authority as required by law.

09Data retention

We keep your personal data for as long as your account is active, or as needed to provide the Service. When you delete specific entries, they are removed from your account. When you delete your account, we delete or irreversibly anonymise your personal data within a reasonable period, except where we must retain certain records (for example, transaction records) to meet legal, accounting, or security obligations.

10Your rights

Subject to applicable law, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is processed;
• Correction — correct inaccurate or incomplete data (much of which you can edit directly in the app);
• Erasure — delete your data or your account;
• Withdraw consent — stop processing based on consent, going forward;
• Grievance redressal — raise a complaint with our Grievance Officer;
• Nominate — nominate another person to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.

To exercise any of these rights, email legal@remain.fit. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11Children & minimum age

The Service is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, contact us and we will delete it. Because the Service involves health-related tracking such as fasting, it is not designed for children.

12Cookies & local storage

We use minimal browser storage — not for advertising. Specifically:

• Authentication — tokens that keep you signed in;
• Preferences — your theme choice (stored under the remain-theme key) so the site loads without a flash.

We do not use third-party advertising or cross-site tracking cookies. You can clear this storage in your browser settings, though doing so will sign you out and reset preferences.

13Changes to this policy

We may update this policy as the Service evolves or the law changes. When we do, we will revise the "Last updated" date above, and for material changes we will provide a more prominent notice. Continuing to use the Service after an update means you accept the revised policy.

14Grievance officer & contact

In line with India's Information Technology Act and the DPDP Act, you can contact our Grievance Officer with any complaint about how your data is handled. We will acknowledge your complaint within the timelines required by law.