Overview
We respect your privacy. This policy explains in plain language what data REPZZ collects, why we collect it, and how you control it.
REPZZ ("we", "us", "our") operates the website repzz.in and related mobile and desktop applications (collectively, the "Platform"). By using our Platform, you agree to the practices described in this Privacy Policy.
This policy applies to all users — athletes, gym owners, and fitness experts — who interact with the REPZZ platform.
Data We Collect
Information you provide
- Account details: name, email address, phone number, profile photo
- Gym owner registrations: gym name, address, pricing, photos, amenities, contact details
- Trainer profiles: certifications, experience, specialisations, photos, operating locations
- Contact form submissions and support messages
- Newsletter subscription email addresses
Information collected automatically
- Device information: browser type, operating system, device model
- Usage data: pages visited, search queries, filters used, clicks and interactions
- Location data: approximate location derived from IP address; precise GPS location only if you grant permission ("Locate Me" feature)
- Log data: IP address, access timestamps, referring URLs, HTTP status codes
Information from third parties
- Google OAuth: when you sign in with Google, we receive your name, email address, and profile picture from Google
- Payment processors: if applicable, payment processors handle financial data — we do not store card numbers
How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Providing the Platform (gym search, trainer discovery) | Location, search queries, filters | Contractual necessity |
| Account creation and management | Name, email, phone | Contractual necessity |
| Displaying gym and trainer listings | Photos, addresses, pricing | Legitimate interest |
| Sending transactional emails | Email address | Contractual necessity |
| Marketing emails and deals (opt-in only) | Email address | Consent |
| Improving the Platform (analytics) | Usage data, device info | Legitimate interest |
| Fraud prevention and security | IP address, log data | Legitimate interest |
| Legal compliance | As required | Legal obligation |
We do not sell your personal data to advertisers or third parties for their marketing purposes.
Sharing Your Data
We share personal data only in the following circumstances:
- Service providers: Supabase (database and authentication), cloud hosting providers, email delivery services — under strict data processing agreements
- Gym & trainer profiles: Information you submit as a gym owner or trainer is displayed publicly on REPZZ as intended
- Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of our users
- Business transfers: In the event of a merger or acquisition, data may be transferred to the successor entity
We will never sell your personal data to data brokers, advertising networks, or any third party for commercial gain.
Cookies & Tracking
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Session | Authentication, CSRF protection, basic functionality | Session or up to 1 year |
| Preference | Remembered location, sort order, filters | Up to 6 months |
| Analytics | Page views, feature usage (anonymous) | Up to 2 years |
You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in or using certain features.
Data Retention
We retain personal data for as long as necessary to provide the Platform and comply with legal obligations:
- Account data: retained while your account is active, plus 30 days after deletion request
- Gym and trainer listings: retained while the listing is active; deleted within 14 days of removal request
- Log and analytics data: retained for up to 24 months in anonymised form
- Backup copies: may persist for up to 90 days in encrypted backups
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interest
- Withdraw consent: Withdraw consent at any time for consent-based processing (e.g. marketing emails)
To exercise any of these rights, email us at privacy@repzz.in. We will respond within 30 days.
Security
We take reasonable technical and organisational measures to protect your data, including:
- HTTPS encryption for all data in transit
- Encrypted storage of sensitive data at rest via Supabase
- Row-level security (RLS) policies ensuring users can only access their own data
- Google OAuth for authentication — we never store passwords
- Regular security reviews and access controls
No system is completely secure. If you suspect a security issue, please contact us at security@repzz.in immediately.
Children's Privacy
REPZZ is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Policy Changes
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to registered users for significant changes
- Displaying an in-app notice for 30 days after the change
Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised policy.
Contact Us
For any privacy-related questions, requests, or concerns:
Mumbai, Maharashtra, India
You may also use the Contact Us form to reach our team.