Your Privacy, Our Commitment

1. Introduction

Ignite Health Club ("we," "our," or "us") operates the website ignitehealthclub.in and the Ignite Health Club mobile application (available on iOS and Android), collectively referred to as our "Services."

We are committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, store, share, and protect information when you use our Services — whether through our website, mobile application, or physical facilities.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our Services immediately.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account, book a consultation, purchase a membership, or interact with our Services, we may collect:

• Identity Information: Full name, date of birth, gender, profile photograph
• Contact Information: Email address, mobile/phone number, postal address
• Account Credentials: Username, password (stored in encrypted form)
• Membership Information: Membership type, plan details, payment history
• Health & Fitness Information: Fitness goals, physical activity history, pre-existing medical conditions relevant to exercise (provided voluntarily), nutritional preferences, programme preferences
• Communication Data: Messages, feedback, reviews, and support enquiries you send to us
• Payment Information: Billing address, payment method details (processed securely by third-party payment processors — we do not store your full card numbers)

2.2 Information Collected Automatically

When you use our website or mobile application, we automatically collect:

• Device Information: Device type, model, operating system and version, unique device identifiers (e.g., IDFA, Android Advertising ID), screen resolution, and language settings
• Log & Usage Data: IP address, browser type and version, pages visited, time spent on pages, access times and dates, referring URL, clickstream data, and in-app activity
• Location Data: Approximate location based on IP address. We do not collect precise GPS location unless you explicitly grant permission through your device settings
• Crash & Performance Data: App crash logs, performance diagnostics, and error reports to help us improve our application

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

• Social login providers (Google, Apple, Facebook) if you choose to sign in via these services — limited to your public profile information and email address
• Payment processors confirming transaction status
• Analytics providers furnishing aggregated usage insights

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and manage your account, process consultation bookings, manage memberships, and deliver personalised wellness programmes including Strength & Vitality, Menopause Fit, Therapeutic Yoga, Metabolic Reset, Mind Mastery, Bone & Joint Care, Nutrition Coaching, and Corporate Wellness
• Communication: To respond to your enquiries, send appointment confirmations, membership updates, and service notifications
• Personalisation: To tailor our programmes, content, and recommendations to your individual health goals and fitness preferences
• Analytics & Improvement: To analyse usage patterns, monitor app performance, diagnose technical issues, and improve our Services
• Safety & Security: To detect and prevent fraud, enforce our terms, and ensure the safety of our members within our facilities
• Marketing: With your explicit opt-in consent, to send promotional communications about new programmes, events, or offers. You can opt out at any time
• Legal Compliance: To comply with applicable laws, regulations, and legal processes under Indian law

4. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our platform, processing payments, sending communications, hosting data, and providing analytics — all bound by strict data processing agreements
• Expert Team: With our in-house trainers, coaches, and nutrition experts solely to deliver your personalised programme
• Analytics Partners: With analytics services (e.g., Google Analytics, Firebase Analytics) to understand app usage in aggregated, de-identified form
• Legal Obligations: When required by law, regulation, court order, or governmental authority under applicable Indian law
• Safety & Protection: To protect the rights, property, or safety of Ignite Health Club, our members, or the public
• Business Transfers: In connection with a merger, acquisition, reorganisation, or sale of all or a portion of our assets, with prior notice to affected users
• With Your Consent: With any other party where you have provided explicit, informed consent

5. Data Security

We implement industry-standard technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure, access-controlled data storage infrastructure
• Regular security assessments, vulnerability testing, and audits
• Role-based access controls — only authorised personnel can access personal data
• Employee training on data protection and privacy best practices
• Secure payment processing through PCI-DSS compliant third-party providers

Despite our best efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any breach in accordance with applicable law.

6. Data Retention & Deletion

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law:

• Active Members: Data is retained throughout your membership and for up to 2 years after termination for legal and audit purposes
• Consultation Enquiries: Retained for up to 1 year if you do not become a member
• Marketing Data: Until you withdraw consent or unsubscribe
• Transaction Records: Retained as required by Indian tax and commercial laws
• App Usage Data: Aggregated analytics data may be retained indefinitely in de-identified form

Account Deletion

You may request deletion of your account and associated personal data at any time by:

• Using the "Delete Account" option within the mobile app (Settings > Account > Delete Account)
• Emailing us at ignitehealthclub@cnvlabs.ai with the subject line "Account Deletion Request"

Upon receiving a valid deletion request, we will delete or anonymise your personal data within 30 days, except where retention is required by law. You will receive a confirmation once the process is complete.

7. Your Rights & Choices

Under applicable data protection laws (including the Digital Personal Data Protection Act, 2023, of India), you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (see Account Deletion above)
• Right to Withdraw Consent: Withdraw consent for data processing at any time, without affecting the lawfulness of processing performed before withdrawal
• Right to Grievance Redressal: Lodge a complaint with us or the relevant Data Protection Board of India
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity

Managing Your Preferences

• Push Notifications: You can enable or disable push notifications through your device settings or within the app at any time
• Marketing Emails: Unsubscribe via the link in any marketing email, or adjust preferences in your account settings
• Location Access: Manage location permissions through your device's system settings
• Camera & Photo Access: Manage permissions through your device's system settings — required only if you choose to upload a profile photo

To exercise any of these rights, contact us at ignitehealthclub@cnvlabs.ai. We will respond within 30 days.

8. Cookies & Tracking Technologies

Our website and app may use the following technologies:

• Essential Cookies: Required for the website and app to function properly (session management, authentication, security)
• Analytics Cookies & SDKs: Help us understand usage patterns and improve our Services (e.g., Google Analytics, Firebase Analytics)
• Marketing Cookies: Used only with your consent to deliver relevant communications and measure campaign effectiveness

You can manage cookie preferences through your browser settings. On mobile, you can reset your advertising identifier or limit ad tracking through your device settings (iOS: Settings > Privacy > Tracking; Android: Settings > Google > Ads).

Do Not Track

Our Services do not currently respond to "Do Not Track" browser signals due to the lack of a universal standard. We will update this policy if a standard is established.

9. Mobile Application

In addition to the data practices described above, our mobile application may access the following device features, only with your explicit permission:

• Camera: To upload a profile photo or scan QR codes for facility check-in (optional)
• Photo Library: To select and upload a profile photo from your gallery (optional)
• Push Notifications: To send booking confirmations, class reminders, membership updates, and promotional messages (you can opt out at any time via device settings)
• Location (approximate): To help you find the nearest Ignite Health Club facility (optional; precise location is never collected without explicit consent)
• Internet Access: Required for the app to function, sync data, and communicate with our servers

Third-Party SDKs in Our App

Our mobile application may integrate the following third-party software development kits (SDKs):

• Firebase (Google): For analytics, crash reporting, push notifications, and authentication
• Payment Gateway SDKs: For secure in-app payment processing
• Social Login SDKs: Google Sign-In, Apple Sign-In, and/or Facebook Login for streamlined account creation

Each third-party SDK operates under its own privacy policy. We encourage you to review these policies. We ensure all integrated SDKs comply with our data protection standards.

App Store & Play Store

Our app is distributed through the Apple App Store and Google Play Store. When you download or update the app, the respective platform may collect information in accordance with its own privacy policy (Apple Privacy Policy / Google Privacy Policy). We do not control the data these platforms collect.

10. Third-Party Services & Links

Our Services may contain links to third-party websites and services, including our social media profiles on platforms such as Instagram and Facebook. We are not responsible for the privacy practices, content, or security of these external services.

We encourage you to review the privacy policy of any third-party service before providing them with your personal information.

11. Children's Privacy

Our Services are not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under this age.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at ignitehealthclub@cnvlabs.ai. Upon verification, we will promptly delete such information from our records.

Users between the ages of 13 and 18 may use our Services only with the consent and supervision of a parent or legal guardian.

12. International Data Transfers

Your information is primarily processed and stored on servers located in India. If any data is transferred outside India (e.g., through the use of cloud services or third-party providers), we ensure that appropriate safeguards are in place in accordance with applicable Indian data protection laws to protect your information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Last Updated" date at the top of this page
• We will notify you via email and/or an in-app notification before the changes take effect
• For significant changes, we may require you to review and re-consent to the updated policy

We encourage you to review this policy periodically. Continued use of our Services after any modifications constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or wish to exercise any of your rights, please contact us:

• Email: ignitehealthclub@cnvlabs.ai
• Website: ignitehealthclub.in

We are committed to resolving any complaints about our collection or use of your personal data. We aim to respond to all enquiries within 30 days.