2. Request account and data deletion
You can request deletion of your Gym Incognito account and associated personal data without signing in. Follow the steps on our account deletion page or email support@gymincognito.com. Support will verify account ownership and review gym and social data, processor-held data and any records that must be retained. Request confirmation of completed deletion and the reason and retention period for any retained records. Qviple sign-in is shared with other services; deletion of your wider Qviple account requires separate coordination.
3. Information we collect
We collect personal information that you provide directly, information that is generated automatically when you use the Platform, and information we receive from trusted third parties. The categories of information we may collect include:
Information you provide to us
- Identity and contact details — name, email address, phone number, postal address, and date of birth.
- Fitness and health information that you voluntarily provide — such as fitness goals, training preferences, body measurements, activity levels, and any health or medical conditions you choose to disclose for the safe delivery of services.
- Payment details — billing name, billing address, and transaction information required to process membership fees and other charges (handled through our third-party payment processors).
- Account and booking information — membership type, class and personal training bookings, attendance records, and your communication preferences.
- Other information you submit through enquiries, chat with your gym, or customer support interactions.
- Identity documents — where your gym asks for KYC, the ID documents you upload, kept for the retention period your gym sets.
Information collected automatically
- Device and technical data — IP address, device identifiers, browser type, operating system, and language settings.
- Usage data — pages viewed, features used, referring URLs, and the dates and times of your visits.
- Attendance and location data — your check-ins by QR code, by location, or through a fingerprint or face device at your gym. When you check in by location, the app uses your device's location to confirm you are within your gym's check-in radius.
- Crash reports — technical details about app errors, used to fix problems.
- Cookies and similar technologies — as described in the “Cookies and local storage” section below.
Information from third parties
We receive information from Qviple, the account service you use to sign in, and from our payment gateway when you pay online, to the extent permitted by law and your settings with those providers.
4. How we use your information
We use your personal information for the following purposes:
- To create, verify, and manage your account and membership.
- To process bookings for classes, personal training, and other services.
- To process payments, renewals, refunds, and maintain billing records.
- To communicate with you about your account, bookings, schedule changes, and important service notices.
- To provide customer support and respond to your enquiries and requests.
- To send you marketing communications, offers, and newsletters, where you have given your consent — which you may withdraw at any time.
- To show you the plans, workouts, diets, classes and messages your gym shares with you.
- To carry out analytics, measure performance, and improve the safety, quality, and functionality of our Platform and services.
- To protect the security of our members, staff, and premises, and to prevent fraud or misuse.
- To comply with applicable laws, regulations, and lawful requests from authorities.
We process your personal information on the basis of your consent, the performance of our contract with you, our legitimate business interests, and our legal obligations, as applicable.
5. Payment processing and security
Membership fees, personal training charges, and other payments are processed through reputable third-party payment gateways. When you make a payment, your card or banking details are collected and processed directly by these payment service providers.
Mithkal Minds Pvt. Ltd. does not store your full card number, CVV, or banking credentials on its own servers. Our payment partners maintain industry-standard security certifications (such as PCI-DSS compliance) and use encryption to protect your transaction data. We retain only limited transaction records (for example, payment reference and amount) as required for accounting, taxation, and dispute-resolution purposes.
8. Data retention
We retain your personal information for as long as your account or membership remains active and for a reasonable period thereafter, in order to fulfil the purposes described in this Policy, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When personal information is no longer required, we will securely delete, destroy, or anonymise it in accordance with applicable law.
9. Your rights and choices
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:
- Access the personal information we hold about you and obtain a summary of how it is processed.
- Correct, complete, or update inaccurate or incomplete personal information.
- Request erasure of your personal information, subject to legal and contractual retention requirements.
- Withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of prior processing.
- Opt out of marketing communications using the unsubscribe link or by contacting us.
- Nominate an individual to exercise your rights in the event of death or incapacity, and to seek grievance redressal.
To exercise any of these rights, please contact us using the details in the “Contact us” section. We may need to verify your identity before acting on your request and will respond within the timelines prescribed by applicable law.
10. Data security
We implement reasonable security practices and procedures, including encryption, access controls, and secure infrastructure, designed to protect your personal information against unauthorised access, alteration, disclosure, or destruction, consistent with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applicable law. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Third-party services and external links
Our Platform may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party services you access.
12. Children’s privacy
Our Platform and services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from minors without the verifiable consent of a parent or legal guardian. Where a minor uses our services, it must be with such consent and under appropriate supervision. If you believe we have collected information from a minor without proper consent, please contact us and we will take steps to delete it.
13. Cross-border data transfers
Some of our service providers may store or process your personal information on servers located outside India. Where such transfers occur, we take reasonable steps to ensure that your information is protected by adequate safeguards and that the transfer complies with applicable Indian law, including any restrictions notified by the Government of India.
14. Compliance with applicable laws
This Privacy Policy is intended to comply with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the rules framed thereunder, as amended from time to time. For the purposes of these laws, Mithkal Minds Pvt. Ltd. acts as the Data Fiduciary responsible for determining the purpose and means of processing your personal information.
15. Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date at the top of this page and, where the changes are material, provide a more prominent notice or notify you directly. Your continued use of the Platform after the updated policy takes effect constitutes your acceptance of the revised terms.
16. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Grievance Officer:
1. Social features and sponsored content
The app's social features use a separate social service linked to your Qviple identity. That service handles social profiles, posts, photos, videos, messages and interactions. Content you choose to make public can be visible to other users.
Social feeds can show sponsored content. The social service processes account identifiers, relevant profile or preference information, and impressions and clicks to select content and measure engagement. Contact support@gymincognito.com with questions about this processing or to request access or deletion of your social data.