Privacy Policy
Last updated: 2026-10-15 ยท Version 2026-10-15.1
Prana Fit keeps your personal and health details on your own device. The app has no servers that store them, and we do not receive them.
Controller: The Paperkind (legal entity name to be confirmed by owner) ("we", "us"), for the Prana Fit website and web app.
1. Data we collect and where it is kept
Prana Fit runs in your browser. The information below is saved only in your browser's local storage on the device you use. It is not sent to us or to any other server. Before it is saved it is encrypted with a key that stays in your browser's IndexedDB storage, so it is not readable as plain text in storage. Encryption on your device protects against casual reading and against other websites. It does not protect against anyone who can use your unlocked device or browser profile, or against harmful code running on this site. Deleting it in Profile, or clearing your browser's site data, removes it and the key.
| Data | What it is used for | Where it is kept |
|---|---|---|
| Profile: name, age, sex, height, weight, daily activity, body type and goal, fitness-check answers, training place and days | Calculating BMI, calorie and protein targets, your starting level and your plan | This browser only |
| Health details you choose to enter: knee or back pain, diabetes, high blood pressure, thyroid, PCOS/PCOD, pregnancy | Adjusting exercise intensity and showing safety notes | This browser only |
| Food details: diet type, cuisine, flavours, cooking time, allergies or intolerances | Meal plans and recipe suggestions | This browser only |
| Activity log: walks, runs, gym, yoga and other sessions, with duration, steps, calories, distance, heart rate and notes | Dashboard, history and streaks | This browser only |
| Weight history, daily water, workout progress and pantry items | Trend charts and "what can I cook" | This browser only |
| Consent record: the date and version of your health-data consent and age confirmation | Showing that you agreed before any health detail was used | This browser only |
Device data: if you connect a Bluetooth heart-rate device, or import an Apple Health or CSV file, the data is read and processed inside your browser. Imported files are not uploaded.
We do not collect accounts, passwords, email addresses, payment details, advertising identifiers, or analytics or tracking data.
2. Legal basis
Your health-related details are processed on your explicit consent. You give that consent on the welcome screen, before any health detail is asked, and you can withdraw it at any time by deleting your data in Profile. Under India's Digital Personal Data Protection Act, 2023, we rely on consent. For users in the EU or UK, Article 6(1)(a) and Article 9(2)(a) of the GDPR and UK GDPR (explicit consent to health data) apply.
3. Sharing and service providers
We do not sell personal data. We do not share your health details, because we do not receive them. The app makes no requests to other servers. The website is delivered by a static hosting service, which receives standard web request logs (such as IP address and browser type) when pages load. The service providers are listed at subprocessors.html.
We disclose information only where the law requires it. We hold no health details on our systems, so there is nothing of that kind to disclose.
4. Retention
Prana Fit has no accounts. We keep your data until you ask us to delete it. Nothing is deleted automatically after a set time: there is no automatic expiry.
Your data stays in your browser on your device. To delete it, open Profile and choose "Delete all my data", or clear this site's data in your browser settings. We do not hold a copy, so we cannot delete it from our side and there is no server-side backup for us to purge.
Logs kept by the hosting provider follow that provider's retention settings, which are listed at subprocessors.html.
5. Your rights
In the app's Profile page you can:
- see everything stored about you on the device;
- export all of it as a JSON file;
- restore it from a backup you made; and
- delete it all, which also withdraws your consent.
Under the DPDP Act and, where it applies, the GDPR or UK GDPR, you may also ask for correction, object to processing, raise a grievance, and (in the EU or UK) complain to a supervisory authority.
We respond within 30 days.
6. Security and breaches
Your data is kept in your browser, separate from other websites. The site is served over HTTPS where the host supports it, uses a Content Security Policy that blocks third-party scripts, and loads no third-party fonts, trackers or advertising. The app has no accounts or passwords.
If we ever hold personal data on our own systems and a personal-data breach affects it, we will notify affected users and the relevant authorities as the law requires. That includes CERT-In within 6 hours for reportable incidents, the Data Protection Board of India, and, where applicable, GDPR regulators within 72 hours.
7. Children
Prana Fit is not for people under 18. The welcome screen asks you to confirm your age, and the app will not collect health details from anyone who says they are under 18. If a child has entered details on a device, delete them with "Delete all my data" on that device.
8. Cookies and similar storage
We set no cookies and load no non-essential scripts. The app uses your browser's local storage, and a key store in IndexedDB, to keep your data on your device in encrypted form. See the Cookie Policy.
9. Grievance officer
Name and address to be published by the Company before launch.
10. Changes
We version this policy (2026-10-15.1) and will tell you in the app about material changes. If a change affects how health details are used, we will ask for your consent again.