Introduction
Welcome to CoreRush.Fit. CoreRush.Fit is operated by CoreRush Private Limited ("CoreRush", "we", "us"), which is responsible for your personal information. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our platform and use our services.
Information We Collect
We collect the following types of information:
- Personal Information: Name, email address, date of birth, profile picture (if provided)
- Usage Information: Pages visited, features used, bookings, reviews, and preferences
- Transaction Information: Payment methods (processed via secure third-party payment processors), booking history
- Location Information: Device location (if permission granted) to show nearby fitness studios
How We Use Your Information
- Providing and managing our services
- Creating and maintaining your account
- Facilitating bookings and interactions with fitness studios
- Processing payments and confirmations
- Sending communications and updates
- Personalizing your experience
- Analytics and service improvements
- Complying with legal obligations
How We Share Your Information
We may share your information with:
- Fitness Studios: Information shared with studios you interact or book with
- Service Providers: Third parties that process data on our behalf, only to provide their services to us:
- Google (Firebase and Google Cloud): sign-in and cloud storage
- Railway: server and database hosting
- Mixpanel: product analytics
- OneSignal: push notifications
- Cashfree Payments: payment processing
- Legal and Safety: When required to comply with laws, regulations, or legal processes
- Business Transfers: In the event of a merger, acquisition, or sale of assets
We do not sell your personal information to third parties.
Requests from Public Authorities
When a government agency, regulator or other public authority asks us for user data, we follow this process:
- Legal review: We review every request before disclosing any data. We check that it is in writing, comes from an authorised authority, cites a valid legal basis and is limited in scope.
- Challenging requests: If a request is unclear, overly broad or appears unlawful, we ask for clarification or narrowing, decline it, or challenge it through available legal means.
- Data minimisation: When we must comply, we disclose only the minimum data needed to answer the specific request.
- Documentation: We keep a record of each request, including the requesting authority, the date, the legal basis given, the data requested, our response, the reasoning behind it and who handled it.
- User notice: Where the law allows, we notify affected users before disclosing their data.
Data Security
We implement industry-standard security measures to protect your personal information. However, no electronic transmission or storage is 100% secure.
Data Retention and Deletion
In line with the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we retain your personal information only for as long as it is necessary to fulfil the purpose for which it was collected, or for as long as required to comply with applicable law. We do not retain personal data indefinitely. Indicatively:
- Account Information: Retained for as long as your account remains active and the purpose of providing our services is being served.
- Transaction and Booking Records: Retained for the period required to comply with applicable tax, accounting, and other statutory obligations under Indian law (for example, the Income-tax Act and the Companies Act).
- Usage and Analytics Data: Retained only for as long as needed for the purposes described above, after which it is deleted or anonymized.
When the purpose for which your personal data was collected is no longer being served, or when you withdraw your consent (whichever is earlier), we will cease processing and securely delete or anonymize your data, unless we are required to retain it to comply with a legal obligation.
How to Delete Your Data
You can request deletion of your personal data at any time. To do so:
- Delete your account directly from the account settings within the app, or
- Email us at support@corerush.fit with your deletion request.
Upon receiving a verified request, we will delete your personal information within 30 days, except where we are required to retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements. Where data is retained for a legal obligation, it is deleted once that obligation ends.
Your Rights
As a Data Principal under the DPDP Act, 2023, you have the right to:
- Access: Request a summary of the personal data we process about you.
- Correction and Updation: Request correction, completion, or updation of your personal data.
- Erasure: Request deletion of your personal data, subject to legal retention requirements.
- Withdraw Consent: Withdraw your consent at any time, as easily as it was given.
- Grievance Redressal: Raise a grievance with us regarding the processing of your personal data.
To exercise any of these rights, contact us at support@corerush.fit.
Contact Us
For privacy-related questions, contact us at:
support@corerush.fit
CoreRush Private Limited
633 Subash Nagar, Rehari Mohalla
Jammu, Jammu & Kashmir 180005, India