Privacy Policy

This Privacy Policy explains how Done Right Private Limited (“Company”, “we”, “us”, or “our”) collects, uses, stores, and shares personal information when you use SuperTrainr — including our mobile applications for iOS and Android, our websites (such as supertrainr.com and related domains), and related services (together, the “Services”).

SuperTrainr is a product of Done Right Private Limited. By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Services.

This Policy applies to members (clients), trainers (coaches), and visitors who use our websites or apps.

The data controller for SuperTrainr is Done Right Private Limited, operating from Pune, Maharashtra, India.

For privacy-related requests, email hi+support@supertrainr.in.

We collect information you provide directly, information generated when you use the Services, and information from device permissions you grant.

Account and identity: phone number; one-time passwords (OTPs); name and profile details; role (member or trainer); and, where applicable for trainers, identity verification materials, certifications, profile photos, service areas, and payout-related details (for example bank or UPI information processed via our payment partners).

Booking and service data: fitness goals and preferences; assessment and membership information; session schedules; addresses and visit locations you provide; session status, ratings, and support communications (including WhatsApp, phone, or email with Member Success).

Device permissions (when you allow them): camera (for example selfie verification); photo library (for profile or document uploads); location (for example setting a home visit address or trainer session workflows); microphone (if used for supported call or media features); contacts (if you use invite features); and push notification tokens.

Payments: payment method metadata, order and transaction identifiers, and payment status from our payment processors. We do not store full card numbers on our servers; card and UPI processing is handled by our payment partners.

Technical and usage data: device type, app version, approximate network information, log data, crash or diagnostic information, and similar data needed to operate, secure, and improve the Services.

We may also receive limited information from service providers acting on our behalf (for example SMS delivery status or payment confirmation).

We use personal information to:

• Create and manage accounts, authenticate users (including OTP login), and keep profiles accurate.

• Match members with trainers, schedule visits, and deliver assessments, memberships, and sessions.

• Process payments, refunds, and trainer payouts; prevent fraud and abuse.

• Send transactional messages (OTP, booking confirmations, reminders, session updates) and, where permitted, service-related communications.

• Provide customer support and resolve disputes.

• Maintain safety and trust (identity checks, verification selfies or documents where required, quality monitoring).

• Improve the Services, analyse usage in aggregate, and meet legal, tax, and regulatory obligations.

We process personal information as needed to provide the Services you request, to fulfil contracts (memberships, sessions, payouts), to comply with applicable law, and for legitimate interests such as security, fraud prevention, and service improvement — balanced against your rights.

Where Indian data protection law (including the Digital Personal Data Protection Act, 2023, as applicable) or other laws require consent for specific processing, we will seek consent or rely on another lawful ground as permitted.

We do not sell your personal information.

We may share information with:

• The other party to a booking (for example, a member’s name, address/locality, and session details with their assigned trainer, and relevant trainer profile details with the member) so sessions can take place safely.

• Service providers who process data on our behalf, such as payment processors (including Razorpay / RazorpayX), SMS and OTP providers, cloud hosting and infrastructure, push notification platforms, analytics or crash reporting tools we enable, and customer communication tools.

• Professional advisers, auditors, or authorities when required by law, regulation, legal process, or to protect the rights, safety, and property of Done Right Private Limited, our users, or the public.

• A buyer or successor in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

Service providers are expected to use personal information only to perform services for us and in line with applicable law.

We retain personal information for as long as your account is active and as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements.

When information is no longer required, we delete or anonymise it within a reasonable period, unless a longer retention period is required or permitted by law.

We use administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

You are responsible for keeping access to your device and OTP codes secure.

We primarily operate in India. Some service providers may process or store data in other countries. Where we do so, we take steps reasonably available to us to protect personal information in accordance with this Policy and applicable law.

Subject to applicable law, you may request access to, correction of, or deletion of your personal information; withdraw consent where processing is based on consent; or raise a concern about how we handle your data.

You can manage many preferences in the app (for example notification settings) and device settings (camera, location, photos, microphone, contacts).

To exercise privacy rights, email hi+support@supertrainr.in. We may need to verify your identity before fulfilling a request. We will respond within a reasonable time and as required by law.

You may also contact us if you believe your privacy rights have been infringed. You may have the right to escalate complaints to the relevant data protection authority in India once applicable mechanisms are available.

The Services are intended for adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact hi+support@supertrainr.in and we will take appropriate steps to delete it.

The Services may contain links to third-party websites or integrate third-party SDKs (for example maps, payments, or notifications). Those third parties have their own privacy practices. We are not responsible for their content or policies. We encourage you to review their privacy notices.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. Material changes may also be communicated through the app, website, or other reasonable means. Continued use of the Services after an update constitutes acceptance of the revised Policy where permitted by law.

Done Right Private Limited

Product: SuperTrainr

Email: hi+support@supertrainr.in

Location: Pune, Maharashtra, India

If you have questions about this Privacy Policy or our data practices, please contact us at the email above.