Privacy Policy

This policy explains what information Origofit (“Origofit”, “we”, “us”) collects, how we use and protect it, and the choices you have. Origofit is a fitness, nutrition, and wellness app: it builds you a training plan, lets you log workouts, plans your meals, and offers optional AI coaching. Because it handles fitness and health-related information, we’ve tried to be specific and plain about exactly what we do and — just as importantly — what we don’t.

Information we collect

We only collect what the app needs to work. That is:

• Account details — your name, email address, and a password. Your password is never stored in readable form; we keep only a salted, hashed version of it.
• Your fitness profile— the answers you give during onboarding: your goal, experience level, how many days a week you train and your preferred split, your gym / wake / sleep times, your diet (vegetarian, veg + eggs, or non-vegetarian), and how you mostly eat (home-cooked, tiffin, or mix). If you use the optional “describe yourself” shortcut, the free text you type is included.
• Health-related information — any joints you flag to protect (knee, shoulder, or lower back), which we use to keep unsafe exercises out of your plan, and the workout details you log: exercises, weights, reps, effort ratings (RPE), notes, and dates.
• Plan and activity data — your generated weekly plan, meal selections, water intake, and workout streak.
• Gym membership — if you join a gym with an invite code, we store which gym you belong to, your role (trainee, trainer, or owner), and your assigned trainer, if any.

We do not collect your precise location, your contacts, your photos, or advertising identifiers, and we do not track you across other apps or websites.

How we use your information

• To create and sync your training plan, meals, and logged workouts across your devices.
• To keep flagged-injury exercises out of your plan.
• To show your progress, history, and streak.
• To provide optional AI coaching and the onboarding text shortcut, when you choose to use them.
• For gym members, to let your gym’s trainer or owner set your plan, videos, and rest times, and see the workouts you log.
• To send you essential emails — email verification and password resets.
• To secure your account and prevent abuse (for example, limiting repeated failed sign-in attempts).

We do not use your data for advertising, and we do not sell or rent your personal information to anyone.

How your information is shared

We share data only with the service providers that make the app run, and only as needed. These are:

• Cloudflare— hosts the app and stores your account and fitness data in our database on Cloudflare’s infrastructure.
• DeepSeek— powers the optional AI coach and the onboarding “describe yourself” parser. When you use those features, the relevant information (such as your recent workouts, plan, profile, or the text you type) is sent to DeepSeek to generate a response. If you don’t use these features, no data is sent to DeepSeek.
• YouTube (Google)— exercise demo videos play from YouTube using its privacy-enhanced (“no-cookie”) player, which loads only when you choose to watch a demo.
• Google (Gmail) — delivers our verification and password-reset emails.
• Your gym — if you join a gym, its trainers and owner can see your plan and the workouts you log, in order to coach you.

We may also disclose information if required by law. For clarity, Origofit uses no advertising networks, no third-party analytics or tracking SDKs, no Firebase, and no payment processor.

Data security

All traffic between the app and our servers is encrypted in transit (HTTPS). Passwords are protected with industry-standard salted hashing (PBKDF2-SHA256) and are never stored or transmitted in readable form. Session tokens are stored on our servers only as hashes; on the mobile app, your sign-in token is kept in the device’s hardware-backed secure storage and is excluded from device backups. No method of storage or transmission is ever completely secure, but we take reasonable measures to protect your information.

Your rights and choices

• Access — your plan, profile, and logs are visible to you in the app at any time.
• Correction — you can edit your profile, plan, and logged workouts directly in the app.
• Deletion — you can permanently delete your account and all associated data yourself, at any time, from Account → Delete account in the app. This immediately removes your profile, plan, logged workouts, and preferences from our database. If you manage a gym, or would rather we do it for you, email us at durgaprasad1380@gmail.com.

Data retention

We keep your information for as long as your account is active so the app can work. When you delete your account (or ask us to), we delete your account and its associated profile, plan, and workout data from our database. Transactional email records held by our email provider may persist for a short time in the normal course of email delivery.

Children’s privacy

Origofit is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

International users

Origofit runs on Cloudflare’s global network, so your information may be processed and stored on servers in countries other than your own. By using Origofit, you consent to this processing.

Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “Last updated” date at the top of this page. Significant changes will be reflected here before they take effect.

Contact us

If you have any questions about this policy or your data, email us at durgaprasad1380@gmail.com.