Privacy Policy

1Who we are

Rizono ("Rizono", "we", "us") is an all-in-one fitness app: a calorie and macro tracker with food photo scan, a step counter and GPS activity recording, an exercise library, an activity feed and chat, discovery of gyms and personal trainers, and an equipment marketplace.

Rizono decides why and how your personal data is processed, and is the Data Fiduciary for it under India's Digital Personal Data Protection Act, 2023 (DPDP Act). This policy is written to meet the DPDP Act and the Information Technology Act, 2000. How to reach us is in Contact & grievance officer.

2Who this policy covers

• Our website at rizono.com.
• Our Android apps — the member app (com.rizono.app) and the partner apps for gyms, trainers and suppliers.
• Every account type — Members, Gym owners, Personal trainers and Equipment suppliers.

The rules for using Rizono are in our Terms & Conditions.

3Information we collect

What we collect depends on which features you use:

4How we use it

We process your data with your consent (given when you sign up and turn features on) or where it is needed to provide a service you asked for. We use it to:

5Health data — special care Sensitive

Your weight, medical conditions, food logs and activity are sensitive. We use them only to power your own targets, insights and reports. They are never sold, never used for advertising, and never shared with gyms, trainers or suppliers unless you choose to share something yourself (for example, sending a PDF report to your trainer).

6Food photo scan

When you scan a meal, the photo is sent securely to our server and then to our AI provider, Anthropic, to estimate the foods and nutrition. We don't save the photo — we only keep a count of how many scans you've used each day. Only the foods you choose to add are saved to your log.

7How we share information

We do not sell your personal data. We share it only where needed to run Rizono:

• Gyms and trainers — the details you send when you contact, book or message them.
• Other members — your public profile and anything you post to the activity feed.
• Equipment suppliers — the contact details and message in an enquiry or order you send.
• Service providers — listed in the next section, only for the job they do for us.
• Payment processors — for bookings, orders and partner payouts. We don't store full card numbers.
• Authorities — only when required by law, or to protect the safety of our users.

8Service providers

These companies help us run Rizono. Each receives only what it needs for its task:

9Advertising

The Android member app can show optional rewarded video ads through Google AdMob, only when you choose to unlock something extra (for example, more food scans). The ad network is Google LLC.

What AdMob collects. To serve, measure and prevent fraud on these ads, the Google Mobile Ads SDK may collect your device's advertising ID, IP address (used to estimate approximate location), device and app information, and how you interact with the ads. Google may use cookies or similar identifiers to show you personalised ads based on your interests, or non-personalised ads based on general context.

How Google uses this data. Google processes this information as described in How Google uses information from sites or apps that use its services and in the Google Privacy Policy.

Your choices.

• Where the law requires it (for example in the EEA, UK and Switzerland), the app shows Google's consent form before any ad loads, so you can accept or refuse personalised ads.
• You can turn off personalised ads at any time in Google My Ad Center, or reset or delete your advertising ID in your phone's settings (Settings → Google → Ads, or Settings → Privacy → Ads on newer Android versions).
• Ads are always optional. You never have to watch one to use Rizono's core features.

We never share your health, food or activity data with ad networks or use it for advertising. Ads are not targeted at children. The website shows no ads.

10Android app permissions

You can review or turn off any permission in your phone's settings. The app keeps working with fewer features if you decline.

11Where your data is processed

Rizono is operated from India. Some of our service providers — such as Google and Anthropic — process data on servers outside India. When your data is processed abroad, it stays protected by this policy and by our providers' security commitments, and we follow any restrictions on cross-border transfers notified under the DPDP Act.

12Data security

• All communication with our servers uses HTTPS.
• Passwords are stored hashed, never in plain text.
• Sessions sign out automatically after a period of inactivity.
• Photos are compressed on your device before upload.

No system is 100% secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by law, and tell you what we are doing about it.

13Retention & account deletion

We keep your information while your account is active, so your history and reports stay accurate.

Deleting your account

• Go to Settings → Privacy → Delete account (or ask us using the contact details below).
• Your account is scheduled for deletion after a 30-day grace period, during which you can cancel from the same screen.
• After 30 days, your account and the data linked to it — such as food and diet logs, plans, notifications and device tokens — are permanently deleted.
• We keep a limited record of the deleted account (username, email, account type and basic profile details, without photos) to handle support requests, prevent fraud and meet legal obligations.

We may also keep specific records longer where the law requires it, for example for tax or dispute purposes.

14Cookies

What Rizono stores on your device, and how to clear it, is explained in our Cookie Policy.

15Children's privacy

Under the DPDP Act, anyone under 18 is a child. Rizono is meant for adults. We do not knowingly process a child's personal data without verifiable consent from their parent or legal guardian, and we never track children's behaviour or target ads at them. If you believe a child has given us personal data, contact us and we'll delete it.

16Your rights & choices

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and who we've shared it with.
• Correct or update your data — most of it directly in the app.
• Erase your data by deleting your account (see Retention & account deletion).
• Withdraw consent for any feature at any time, for example by turning off a permission or disconnecting Google. This doesn't affect processing that already happened.
• Nominate someone to exercise these rights for you in case of death or incapacity.
• Raise a grievance with our Grievance Officer, and then with the Data Protection Board of India if you're not satisfied.

To use any of these rights, contact us using the details below.

17Changes to this policy

We may update this policy as Rizono changes. We'll update the date at the top, and for important changes we'll let you know in the app before they take effect.