Legal

Privacy Policy

Last updated: 3 August 2026

This Privacy Policy is issued by VRATA FITNESS PRIVATE LIMITED ("Vrata", "we", "us", "our"), the company behind the Vrata fitness app ("Vrata", the "App"). It explains what information we collect, how we use and share it, and the choices and rights you have — including how to access and delete your data.

We build Vrata with privacy by design. You make a personal vow, keep it with short micro-workouts, and earn points for every commitment you complete. To do that we collect only the information the App genuinely needs, we keep your fitness and health data private, and we never sell it.

The short version. We collect the account details you give us, the workout and progress data you generate in the App, and basic device and usage data. We use it to run the App, keep your streak, and improve the experience. We do not sell your data. You can export or delete your account and data at any time from the App or by emailing us.

1. Scope of this Policy

This Policy applies to the Vrata App and this website, and forms part of the Vrata Terms of Service you accept when you use the App.
It does not apply to information collected by third parties whose services you reach through the App (for example the Apple App Store or Google Play), which are governed by their own policies.
Terms defined in the Terms of Service carry the same meaning here unless stated otherwise.

2. Information we collect

Account information

When you create an account we collect information you provide, which may include your name or display name, email address or phone number, password (stored only in hashed form), and optionally your date of birth or age band, gender, height and weight where you choose to enter them to personalise your program.

Fitness and activity data

As you use Vrata we collect the data you generate: the vows and commitments you make, micro-workouts you complete, session length and intensity, streaks, freezes, and points earned. This is the core data that makes the App work.

Health and cycle data (sensitive)

If you use Vrata's cycle-aware features, you may choose to enter menstrual-cycle information so the App can honour your phases and protect your streak with cycle-aware rest days. This is sensitive personal / health data. It is optional, is used only to personalise your training and rest, is never used for advertising, and is never sold or shared for marketing. You can delete it at any time.

Device and log data

We collect standard technical data needed to deliver and secure the service: device model and operating-system version, app version, language and time zone, IP address, crash logs, and diagnostic and performance data.

Purchase data

Vrata is free to download. If we offer paid features in future, purchases are processed by the Apple App Store or Google Play. We receive confirmation of a purchase but never your full card or bank details — those are handled by the store and its payment processors.

You can decline to provide optional information; some features may then be unavailable to you.

3. How we use your information

To provide, personalise, and maintain the App — your vows, micro-workouts, streaks, points, and cycle-aware rest days;
To sync your progress across your devices and back it up;
For customer support, security, fraud prevention, and diagnosing crashes;
To understand how the App is used, so we can improve it and build new features;
To send you service-related messages (for example a streak reminder or an important account notice); and
To comply with applicable laws and enforce our Terms of Service.

We rely on your consent for optional and sensitive data, on the performance of our contract with you to run the App, and on our legitimate interests in keeping the service safe and improving it.

4. How we share your information

We do not sell your personal information, and we do not share your fitness or health data for third-party advertising. We share information only:

With service providers who work on our behalf — cloud hosting, crash reporting, and analytics — under contracts that require them to protect your data and use it only for the services they provide to us;
With the app stores and their payment processors, to deliver purchases you make;
Where required to comply with a law, court order, or lawful request from an authority; and
In connection with a merger, acquisition, or reorganisation, in which case we will notify you and your data remains protected under a policy at least as protective as this one.

5. Data retention

We keep your personal information only for as long as your account is active or as needed to provide the App. When you delete your account we delete or irreversibly anonymise your personal data within 30 days, except where we must retain limited records to meet legal, tax, or security obligations. Sensitive cycle data you remove in the App is deleted within 30 days of removal.

6. Your rights and choices — access, export & deletion

You have the right to access, correct, export, and delete your personal information, and to withdraw consent for optional processing. Depending on your jurisdiction (including under India's DPDP Act 2023, the GDPR, and applicable US state laws) you may have additional rights.

How to delete your account and data:

1. In the App, open Settings → Account → Delete Account and confirm; or

2. Email [email protected] from your registered address with the subject "Delete my account".

We will action verified requests within 30 days and confirm by email. This removes your profile, fitness data, and cycle data from our active systems.

7. Security

We use encryption in transit and at rest, access controls, and audit logging to protect your information. No system can be guaranteed 100% secure, but we work continuously to safeguard your data and will notify you and the relevant authorities of a breach where the law requires.

8. Children

Vrata is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us personal information, contact [email protected] and we will delete it.

9. International transfers

We may process and store your information on servers located in India or other countries. Where we transfer data across borders we use appropriate safeguards consistent with applicable law, and by using the App you consent to such transfers for the purposes described here.

10. Third-party links and stores

The App and site may link to third-party services, and Vrata is downloaded from the Apple App Store and Google Play. Your use of those services is governed by their own terms and privacy policies, which we encourage you to review. We are not responsible for third-party practices.

11. Changes to this Policy

We may update this Policy from time to time. We will post the revised version here with a new "Last updated" date and, for material changes, give you notice in the App before they take effect.

12. Contact us

Questions about this Policy or your data? Contact:

VRATA FITNESS PRIVATE LIMITED
Email: [email protected]
Support: vrata.fit/support