LegalLast updated 26 July 2026

Privacy Policy

Application: OG Fit Operator: Rahul Gautam (sole proprietor), Meerut, India Effective date: 26 July 2026

This Privacy Policy explains what personal data OG Fit ("the App", "we", "us") collects, why we collect it, how we use and protect it, and what rights you have. This page is maintained by the App owner to answer common privacy questions about OG Fit. It is a description of our own practices and is not an independent certification or audit.

By using OG Fit you agree to this Policy. If you do not agree, please do not use the App.

1. Who we are

OG Fit is a personal fitness and gym tracking web application operated by Rahul Gautam, an individual sole proprietor based in Meerut, Uttar Pradesh, India. For the purposes of the EU/UK General Data Protection Regulation (GDPR), the owner is the data controller. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), the owner is the Data Fiduciary.

2. Scope

This Policy applies to the OG Fit web application available at https://ogfit.pro/ and any subdomains. OG Fit is currently offered as a web application (installable as a progressive web app). If we release native Android or iOS applications in future, this Policy will be updated before those releases.

3. Who may use OG Fit

OG Fit is intended for individuals aged 13 years and above who wish to track their own training. We do not knowingly collect personal data from children under 13. Where local law requires a higher age of digital consent (for example, 16 in certain EU member states, or 18 for independent consent under India's DPDP Act), a parent or legal guardian must provide consent and supervise use. If we learn that we have collected data from a child without the required consent, we will delete it promptly. Parents or guardians may contact us at og@rahulgautam.in.

4. Personal data we collect

4.1 Account data (provided via Google Sign-In)

OG Fit uses Google OAuth as its only sign-in method. When you sign in, Google shares with us:

  • your name and display name
  • your email address
  • your Google profile photo (avatar URL)
  • a unique account identifier

We never receive or store your Google password.

4.2 Profile and fitness data (provided by you)

  • gender, date of birth, height and weight entered during onboarding
  • body metrics you log over time
  • weekly training goal and unit preference (kg or lb)
  • workouts, session types (rest / gym / cardio), muscle groups, exercises, sets, repetitions, weights, rest intervals, durations and notes
  • custom exercises you create
  • any images you choose to upload (for example a profile or progress photo)

Some of this information (such as weight, body metrics and training records) may be considered health-related data, which is a special category of personal data under GDPR and sensitive personal data under other laws. We process it only to provide the tracking features you have asked for, on the basis of your explicit consent, which you may withdraw at any time by deleting the data or your account.

4.3 Technical and device data

Collected automatically when you use the App:

  • IP address and approximate region derived from it
  • browser type and version, operating system, device type and screen size
  • pages viewed, features used, timestamps and referring pages
  • error and diagnostic logs

4.4 Data we do not collect

We do not collect payment card details (the App is currently free), government identifiers, biometric identifiers, or contact lists.

5. Device permissions

OG Fit requests the following browser permissions. Each is optional, requested only at the moment the related feature is used, and can be revoked at any time in your browser or device settings. Denying a permission only disables that specific feature.

  • Camera and photo storage — to let you take or upload a profile picture or progress photo. Images are uploaded to our secure storage and linked only to your account.
  • Location — to record approximate route or location context for outdoor cardio sessions, when you start such a session. We do not track your location in the background.
  • Notifications — to deliver rest-timer alerts, workout reminders and streak notifications. We do not use notifications for third-party advertising.

We do not request microphone access.

6. Why we process your data and our legal bases

  • To provide the service — creating your account, saving workouts, computing streaks, charts and statistics. *Legal basis: performance of a contract with you (GDPR Art. 6(1)(b)); necessary for the specified purpose under the DPDP Act.*
  • Health and fitness records — storing body metrics and training data. *Legal basis: your explicit consent (GDPR Art. 9(2)(a)).*
  • Security and abuse prevention — logging, rate limiting, detecting misuse. *Legal basis: legitimate interests (Art. 6(1)(f)).*
  • Product analytics and improvement — understanding which features are used. *Legal basis: consent where required, otherwise legitimate interests.*
  • Communication — service messages, security notices and responses to your enquiries. *Legal basis: contract and legitimate interests.*
  • Legal compliance — responding to lawful requests and enforcing our terms. *Legal basis: legal obligation.*

We do not sell your personal data, and we do not use it for behavioural advertising or automated decision-making that produces legal or similarly significant effects.

7. Cookies and analytics

OG Fit uses strictly necessary cookies and browser local storage to keep you signed in and remember your preferences, and analytics to understand aggregate usage. Full details, including how to control them, are in our Cookie Policy.

8. Third-party services (processors)

We use a small number of vetted providers to run the App. They process data on our instructions only.

  • Google LLC — Google Sign-In (OAuth) authentication. See Google's privacy policy.
  • Supabase Inc. — managed database, authentication and file storage hosting for your account and workout data.
  • Lovable / hosting and delivery providers — application hosting, content delivery and platform infrastructure.
  • Analytics provider — aggregate, privacy-respecting product usage measurement.

We enter into data processing terms with our providers where required and rely on Standard Contractual Clauses or equivalent safeguards for transfers of personal data outside your country.

9. International data transfers

Our infrastructure providers may store or process data on servers located outside India, including in the European Economic Area, the United Kingdom and the United States. Where personal data is transferred internationally, we rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses, adequacy decisions, or your consent, together with appropriate technical safeguards.

10. Artificial intelligence

OG Fit currently has no live AI features, and no user data is sent to any AI model or AI provider today. We plan to introduce AI-assisted training insights in future. Before any AI feature is enabled, we will update this Policy and our AI Usage Policy and, where required, obtain your consent. See the AI Usage Policy for the commitments that will apply.

11. Data retention

  • Active accounts: we retain your account, profile and workout data for as long as your account remains active, because the value of the App is your long-term training history.
  • Deleted accounts: when you delete your account, your data is removed from the live application immediately and permanently purged from our systems and backups within 30 days.
  • Individual records: workouts, sets or custom exercises you delete inside the App are removed immediately.
  • Logs: security and diagnostic logs are retained for up to 90 days.
  • Legal holds: we may retain limited records for longer where required by law or to establish, exercise or defend legal claims.

12. Account deletion and data export

You are in control of your data:

  • Export — download a copy of your data from Settings → Download my data.
  • Erase data, keep account — use Settings → Remove my data to wipe workouts and logs while keeping your login.
  • Delete account — use Settings → Delete account. This permanently removes your profile, workouts, sets, metrics, goals and uploaded images, subject to the 30-day purge window described above.
  • Alternatively, email og@rahulgautam.in and we will action your request.

Account deletion is irreversible. Please export your data first if you want to keep it.

13. Security measures

We take the security of your training data seriously and apply measures appropriate to a service of this size:

  • all traffic is encrypted in transit using HTTPS/TLS
  • data is stored on managed, encrypted-at-rest database infrastructure
  • row-level security is enforced at the database layer, so every query is scoped to your own account and one user cannot read another user's data
  • authentication is delegated to Google OAuth; we never handle or store your password
  • server-side authorisation checks on privileged operations, and least-privilege access to production systems
  • routine dependency and platform updates

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected users without undue delay and in line with applicable law.

14. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time without affecting prior lawful processing. To exercise any right, email og@rahulgautam.in. We do not discriminate against you for exercising your rights.

14.1 If you are in the EEA or UK (GDPR)

You have the rights under Articles 15–22 GDPR, including access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, and the right not to be subject to solely automated decision-making. You also have the right to lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office.

14.2 If you are in California (CCPA/CPRA)

You have the right to know what personal information we collect and how it is used and disclosed, to request deletion, to request correction, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. We do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding 12 months. You may exercise these rights, including through an authorised agent, by emailing us. We will verify your request using your account email address.

14.3 If you are in India (DPDP Act, 2023)

As a Data Principal you have the right to access a summary of your personal data and its processing, the right to correction and erasure, the right to nominate another individual to exercise your rights in the event of death or incapacity, and the right to grievance redressal. Please direct grievances to og@rahulgautam.in; if unresolved, you may approach the Data Protection Board of India.

15. Health disclaimer

OG Fit is a self-tracking tool. It is not a medical device and does not provide medical, diagnostic or professional health advice. Nothing in the App should be relied upon as a substitute for consultation with a qualified healthcare professional.

16. Changes to this Policy

We may update this Policy as the App evolves. The "Last updated" date at the top will always reflect the current version. For material changes we will provide reasonable advance notice inside the App or by email, and, where the law requires it, seek your consent again.

Contact

  • Owner / Data Controller: Rahul Gautam (sole proprietor), operating "OG Fit"
  • Address: F1 Dwarika Dham Colony, Meerut 250001, Uttar Pradesh, India
  • Email: og@rahulgautam.in
  • Website: https://ogfit.pro/

We aim to respond to all privacy and legal enquiries within 30 days.