Privacy Policy
Effective date: August 1, 2026 · Last updated: September 4, 2026
South Asian Fitness ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at southasianfitness.com (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information
When you create an account, we collect your email address and display name. If you sign in via Google OAuth, we receive your Google profile information (name, email, and profile photo) as authorized by you during the sign-in process.
Profile & Health Data
During onboarding and through the Service, you may provide personal information including age, sex, height, weight, activity level, fitness goals, dietary preferences, food allergies, cuisine preferences, and weekly budget. This data is used exclusively to calculate your personalized nutrition targets and generate meal plans.
Usage Data
We collect anonymous usage analytics (page views, feature interactions) through PostHog, a third-party analytics provider. This data is aggregated and does not personally identify you.
Cookies & Sessions
We use essential cookies for authentication sessions and CSRF protection. These cookies are strictly necessary for the Service to function and are not used for advertising or tracking purposes.
2. How We Use Your Information
- To calculate your personalized calorie targets, macronutrient goals, and daily budgets using the Mifflin-St Jeor equation.
- To generate AI-powered meal plans and workout routines tailored to your goals, dietary preferences, and cultural food preferences.
- To provide a searchable food library of 200+ South Asian dishes with accurate macro data.
- To track your progress over time and display visual analytics.
- To authenticate your account and maintain secure sessions.
- To communicate essential service updates (we will never send marketing emails without explicit consent).
We do not sell, rent, share, or monetize your personal data with third parties for advertising or marketing purposes.
3. Data Security
We implement industry-standard security measures to protect your data:
- Passwords are hashed using bcrypt with a high cost factor — we never store or can access your plain-text password.
- All authentication uses secure, HttpOnly session cookies with CSRF token protection.
- All communication is encrypted via TLS (HTTPS) in transit.
- Database access is restricted and credentials are never committed to source control.
While we strive to use commercially acceptable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
4. Third-Party Services
We use the following third-party services that may collect or process information on our behalf:
Google OAuth (Authentication)
When you choose "Continue with Google," Google's authentication service provides your name, email, and profile photo. We use this only to create or log in to your account. See Google's Privacy Policy.
Lemon Squeezy (Payments)
Subscription billing and payment processing are handled by Lemon Squeezy. We do not store your credit card information. Lemon Squeezy processes payments in accordance with PCI-DSS standards. See Lemon Squeezy's Privacy Policy.
PostHog (Analytics)
We use PostHog for anonymous product analytics to improve the Service. PostHog collects anonymized usage data (page views, feature interactions) that does not directly identify you. See PostHog's Privacy Policy.
OpenAI (AI Generation)
AI-generated meal plans and workout routines are powered by OpenAI. Your profile data (calorie targets, dietary preferences) is sent to OpenAI's API to generate personalized content. We do not send your name, email, or any directly identifying information. OpenAI does not use API inputs to train its models. See OpenAI's Privacy Policy.
5. Data Retention
We retain your account and profile data for as long as your account is active. If you delete your account, we will remove your personal data from our active databases within 30 days. Anonymized, aggregated analytics data (which cannot be traced back to you) may be retained indefinitely.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Delete your account and associated personal data.
- Export your data in a portable format.
- Object to processing of your personal data.
To exercise any of these rights, please contact us at the email below.
7. Children's Privacy
The Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Email: support@southasianfitness.com
Website: southasianfitness.com