Privacy Policy — OG Fit
← Legal Last updated 26 July 2026

Privacy Policy

Application: OG Fit Operator: Rahul Gautam (sole proprietor), Meerut, India Effective date: 26 July 2026

This Privacy Policy explains what personal data OG Fit ("the App", "we", "us") collects, why we collect it, how we use and protect it, and what rights you have. This page is maintained by the App owner to answer common privacy questions about OG Fit. It is a description of our own practices and is not an independent certification or audit.

By using OG Fit you agree to this Policy. If you do not agree, please do not use the App.

1. Who we are

OG Fit is a personal fitness and gym tracking application operated by Rahul Gautam, an individual sole proprietor based in Meerut, Uttar Pradesh, India. For the purposes of the EU/UK General Data Protection Regulation (GDPR), the owner is the data controller. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), the owner is the Data Fiduciary.

2. Scope

This Policy applies to the OG Fit web application available at https://ogfit.pro/ and any subdomains, and to the OG Fit Android application (package app.ogfit.pro), which is built with Capacitor from the same codebase and distributed through Google Play. If we release an iOS application in future, this Policy will be updated before that release.

3. Who may use OG Fit

OG Fit is intended for individuals aged 13 years and above who wish to track their own training. We do not knowingly collect personal data from children under 13. Where local law requires a higher age of digital consent (for example, 16 in certain EU member states, or 18 for independent consent under India's DPDP Act), a parent or legal guardian must provide consent and supervise use. If we learn that we have collected data from a child without the required consent, we will delete it promptly. Parents or guardians may contact us at app@ogfit.pro.

4. Personal data we collect

4.1 Account data (provided via Google Sign-In)

OG Fit uses Google Sign-In, authenticated through Firebase Authentication, as its only sign-in method. When you sign in, Google shares with us:

  • your name and display name
  • your email address
  • your Google account profile photo (avatar URL)
  • a unique account identifier

We never receive or store your Google password.

4.2 Profile and fitness data (provided by you)

  • gender, date of birth, height and weight entered during onboarding
  • body metrics you log over time
  • weekly training goal and unit preference (kg or lb)
  • workouts, session types (rest / gym / cardio), muscle groups, exercises, sets, repetitions, weights, rest intervals, durations and notes
  • custom exercises you create

Some of this information (such as weight, body metrics and training records) may be considered health-related data, which is a special category of personal data under GDPR and sensitive personal data under other laws. We process it only to provide the tracking features you have asked for, on the basis of your explicit consent, which you may withdraw at any time by deleting the data or your account.

4.3 Technical and device data

Collected automatically when you use the App:

  • IP address and approximate region derived from it
  • browser or device type, operating system and app version, screen size
  • pages/screens viewed, features used, timestamps
  • crash and diagnostic logs, used to keep the App stable

4.4 Data we do not collect

We do not collect payment card details (the App is currently free), government identifiers, biometric identifiers, contact lists, or precise location. We do not currently ask you to upload a profile photo or progress photo — your avatar is the profile photo already associated with your Google account.

5. App permissions

The OG Fit Android app is built to request the minimum permissions needed to function. As of the effective date above, the app requests:

  • Internet access and network state — required to sign you in, sync your workouts with our servers, and tell the app when you are offline.
  • Vibration — used for short haptic feedback when you complete a set or hit a milestone. Purely cosmetic; it does not collect any data.

OG Fit does not request camera, photo library, microphone, precise location, or notification permissions. If we add a feature that needs one of these in future, we will update this Policy before that feature ships and ask for the permission at the point you use the feature, not on install.

6. Why we process your data and our legal bases

  • To provide the service — creating your account, saving workouts, computing streaks, charts and statistics. Legal basis: performance of a contract with you (GDPR Art. 6(1)(b)); necessary for the specified purpose under the DPDP Act.
  • Health and fitness records — storing body metrics and training data. Legal basis: your explicit consent (GDPR Art. 9(2)(a)).
  • Security and abuse prevention — logging, rate limiting, detecting misuse. Legal basis: legitimate interests (Art. 6(1)(f)).
  • Product analytics and improvement — understanding which features are used. Legal basis: consent where required, otherwise legitimate interests.
  • Communication — service messages, security notices and responses to your enquiries. Legal basis: contract and legitimate interests.
  • Legal compliance — responding to lawful requests and enforcing our terms. Legal basis: legal obligation.

We do not sell your personal data, and we do not use it for behavioural advertising or automated decision-making that produces legal or similarly significant effects.

7. Cookies and analytics

The OG Fit web app uses strictly necessary cookies and browser local storage to keep you signed in and remember your preferences. Both the web app and the Android app use privacy-respecting analytics to understand aggregate usage and stability (crash reporting). Full details, including how to control them on the web, are in our Cookie Policy.

8. Third-party services (processors)

We use a small number of vetted providers to run the App. They process data on our instructions only.

  • Google LLC — Google Sign-In authentication.
  • Google Firebase / Google Cloud Platform — our backend: Firebase Authentication, the Firestore database that stores your account, profile and workout data, Cloud Functions (for actions like account deletion and data export), and Firebase Analytics for aggregate usage measurement. Our Firestore database and Functions are hosted in the asia-south1 (Mumbai) region.
  • Google Play — distribution and installation of the Android app, and crash diagnostics for the installed app.
  • Application hosting and content delivery providers — for serving the OG Fit website.

We enter into data processing terms with our providers where required and rely on Standard Contractual Clauses or equivalent safeguards for transfers of personal data outside your country.

9. International data transfers

Our infrastructure providers may store or process data on servers located outside India, including in the European Economic Area, the United Kingdom and the United States. Where personal data is transferred internationally, we rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses, adequacy decisions, or your consent, together with appropriate technical safeguards.

10. Artificial intelligence

OG Fit currently has no live AI features, and no user data is sent to any AI model or AI provider today. We plan to introduce AI-assisted training insights in future. Before any AI feature is enabled, we will update this Policy and our AI Usage Policy and, where required, obtain your consent. See the AI Usage Policy for the commitments that will apply.

11. Data retention

  • Active accounts: we retain your account, profile and workout data for as long as your account remains active, because the value of the App is your long-term training history.
  • Deleted accounts: when you delete your account, your data is removed from the live application immediately and permanently purged from our systems and backups within 30 days.
  • Individual records: workouts, sets or custom exercises you delete inside the App are removed immediately.
  • Logs: security and diagnostic logs are retained for up to 90 days.
  • Legal holds: we may retain limited records for longer where required by law or to establish, exercise or defend legal claims.

12. Account deletion and data export

You are in control of your data:

  • Export — download a copy of your data from Settings → Download my data.
  • Erase data, keep account — use Settings → Remove my data to wipe workouts and logs while keeping your login.
  • Delete account — use Settings → Delete account. This permanently removes your profile, workouts, sets, metrics and goals, subject to the 30-day purge window described above.
  • Alternatively, email app@ogfit.pro and we will action your request.

Account deletion is irreversible. Please export your data first if you want to keep it.

13. Security measures

We take the security of your training data seriously and apply measures appropriate to a service of this size:

  • all traffic is encrypted in transit using HTTPS/TLS
  • data is stored on Google Firestore, managed, encrypted-at-rest database infrastructure
  • Firestore Security Rules are enforced at the database layer, so every request is scoped to your own account and one user cannot read or write another user's data
  • authentication is delegated to Firebase Authentication using Google Sign-In; we never handle or store your password
  • server-side authorisation checks on privileged operations (such as account deletion), run as Cloud Functions with least-privilege access
  • routine dependency and platform updates

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected users without undue delay and in line with applicable law.

14. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time without affecting prior lawful processing. To exercise any right, email app@ogfit.pro. We do not discriminate against you for exercising your rights.

14.1 If you are in the EEA or UK (GDPR)

You have the rights under Articles 15–22 GDPR, including access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, and the right not to be subject to solely automated decision-making. You also have the right to lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office.

14.2 If you are in California (CCPA/CPRA)

You have the right to know what personal information we collect and how it is used and disclosed, to request deletion, to request correction, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. We do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding 12 months. You may exercise these rights, including through an authorised agent, by emailing us. We will verify your request using your account email address.

14.3 If you are in India (DPDP Act, 2023)

As a Data Principal you have the right to access a summary of your personal data and its processing, the right to correction and erasure, the right to nominate another individual to exercise your rights in the event of death or incapacity, and the right to grievance redressal. Please direct grievances to app@ogfit.pro; if unresolved, you may approach the Data Protection Board of India.

15. Health disclaimer

OG Fit is a self-tracking tool. It is not a medical device and does not provide medical, diagnostic or professional health advice. Nothing in the App should be relied upon as a substitute for consultation with a qualified healthcare professional.

16. Changes to this Policy

We may update this Policy as the App evolves. The "Last updated" date at the top will always reflect the current version. For material changes we will provide reasonable advance notice inside the App or by email, and, where the law requires it, seek your consent again.

Contact

  • Owner / Data Controller: Rahul Gautam (sole proprietor), operating "OG Fit"
  • Address: F1 Dwarika Dham Colony, Meerut 250001, Uttar Pradesh, India
  • Email: app@ogfit.pro
  • Website: https://ogfit.pro/

We aim to respond to all privacy and legal enquiries within 30 days.