Data Retention Policy

This Data Retention Policy describes how OZAROFIT PRIVATE LIMITED ("Ozaro.fit", "we", "us", or "our") retains, manages, and disposes of personal data collected through the Ozaro.fit platform, including our website, mobile applications, and related services ("Platform").

1. Purpose of Data Retention

Ozaro.fit retains personal data only for as long as necessary to:

• Deliver fitness and wellness services
• Manage user and trainer accounts
• Ensure safety, trust and service quality
• Comply with applicable legal, taxation, accounting and regulatory requirements
• Resolve disputes and enforce platform policies

2. Categories of Data Retained for Users

2.1 Basic Profile Information:

• Mobile number
• Name (if provided)
• Date of birth (if provided)
• Gender (if provided)
• Email address (if provided)
• Session history and support communications

• Retention Period:
• Retained for the duration of the user account and thereafter as required for legal, compliance, audit, or dispute-resolution purposes.

2.2 Health & Fitness Information:

• Height and weight
• Fitness goals
• Injury history
• Medical conditions (self-declared)
• Trainer assessment notes

• Retention Period:
• Retained only for the purpose of delivering personalized fitness services
• Deleted upon user request submitted, subject to operational feasibility
• Not retained beyond necessity once the fitness purpose has ended, unless required for safety or dispute resolution

2.3 Address & Location Information:

• Residential address (for personal sessions)
• Locality (for group sessions)

• Retention Period:
• Retained for active subscriptions and recent service coordination.
• May be deleted or anonymized once sessions are completed or upon valid deletion request, unless required for compliance purposes.

2.4 Transaction & Subscription Data

• Subscription details
• Payment status
• Transaction identifiers
• Invoices and billing records

• Retention Period:
• Retained as required under applicable Indian tax, accounting, and regulatory laws. Such data may be retained even after account deletion requests.

3. Categories of Data Retained for Trainers

3.1 Basic Profile Information:

• Mobile number
• Fullname
• Date of Birth
• Gender
• Email address
• Profile photographs
• Session attendance, performance and rating records

• Retention Period:
• Trainer data is retained for the duration of the trainer’s association with Ozaro.Fit and thereafter for as long as required to comply with legal, regulatory, safety, and operational obligations.
• Certain records of session history may be retained even after a trainer account is deactivated or deletion is requested, as per required by law or legitimate business necessity.

3.2 Identity Documents:

• Government-issued ID documents for KYC and compliance
  • Aadhaar
  • PAN
• Professional certifications and credentials
• Background verification metadata

• Retention Period:
• Trainer data is retained for the duration of the trainer’s association with Ozaro.Fit and thereafter for as long as required to comply with legal, regulatory, safety, and operational obligations.
• Certain data, including identity verification documents may be retained even after a trainer account is deactivated or deletion is requested, where retention is required by law or legitimate business necessity.

4. Communications & Support Records

• Support emails
• Service-related communications
• Session reschedule or cancellation records

• Retention Period:
• Retained for a reasonable period to resolve queries, disputes and service-related issues.

5. Analytics & Technical Data

• Aggregated usage data
• App performance metrics
• Crash logs and attribution data

6. Account Deletion & Data Erasure

Users and Trainers may request deletion of eligible personal data

• Health and fitness related data will be deleted
• The account will be deactivated and access disabled
• Personal data not required for legal or compliance purposes will be deleted or anonymized
• Data required for legal, tax, audit, fraud-prevention, or dispute-resolution purposes may be retained

✉️ Request via Email 🗑️ Request Deletion via Form

7. Data Storage & Security

• Infrastructure: Data is stored on secure cloud infrastructure hosted in India (AWS region)
• Security Measures: Reasonable technical and organizational safeguards are implemented to prevent unauthorized access, misuse, or loss
• Access Control: Access to personal data is restricted to authorized personnel only

8. Review & Disposal

• Retained data is periodically reviewed
• Data that is no longer required is securely deleted, anonymized, or archived as appropriate
• Disposal procedures follow industry best practices to ensure irreversible deletion

9. Policy Updates

This Data Retention Policy may be updated from time to time to reflect changes in legal, regulatory, or operational requirements. Updates will be published on the Platform. Continued use of the Platform following any policy updates constitutes acceptance of the revised Data Retention Policy.