Privacy Policy

Setu (“Setu,” “we,” “us”) provides live online fitness classes and 1:1 training with named trainers, delivered through our mobile app. This policy explains what we collect, why, how we share it, and the choices you have. Questions: support@joinsetu.app.

Information we collect

• Account & profile: name, email, time zone, country, fitness goals, and any optional bio or photo you add.
• Health & fitness data(only if you connect Apple Health / Google Health and tap Sync): sleep, resting heart rate, heart rate variability, VO₂ max, steps, active energy, weight, and workout minutes. We read this data; we never write to your Health app.
• Bookings & activity: classes and sessions you book or attend, and social activity (follows, likes, comments) if you use those features.
• Payments: processed by Stripe. We store a record of each transaction (amount, type, status) but never receive or store your full card number — Stripe handles card details directly.
• Device & notifications: a push-notification token (if you allow notifications) so we can alert you about your classes.

How we use your information

• Run the service: scheduling, bookings, payments, and reminders.
• Let your chosen trainer tailor sessions — but only with health data you have explicitly chosen to share (see below).
• Send class reminders and account notifications.
• Keep the service secure and fix problems.

We do not sell your personal information, and we do not use your Health data for advertising or any purpose other than providing the service to you.

Your health data & trainer sharing

Health data is private by default. A trainer can see a given metric only after you explicitly share it with that specific trainer, one metric at a time. You can:

• Choose exactly which metrics each trainer may see.
• Revoke access at any time — sharing stops immediately.
• See an audit log of every time a trainer viewed your data (“Who viewed my data”).

We do not access Apple Health “Clinical Records” (medical records), and Health data is never shared with anyone other than a trainer you have chosen.

Who we share data with

We use a small set of service providers, only to run Setu:

• Supabase — database, authentication, and hosting of your account and app data.
• Stripe — payment processing.
• Apple Health / Google Health — the source of health data you choose to sync.
• Expo — delivery of push notifications to your device.
• Your chosen trainer(s) — only the profile and health metrics you share with them.

We may also disclose information if required by law, or to protect the rights and safety of our users.

Data retention

We keep account and booking data for as long as your account is active. Synced health data is kept as a rolling recent window to power your dashboard and trainer sharing. When you delete your account, we delete your personal data, including health data, except where we must retain limited records (e.g. payment receipts) to meet legal obligations.

Your choices & rights

• Access / correct your profile in the app.
• Revoke health sharing per trainer, any time.
• Turn off notifications in iOS/Android settings.
• Delete your account — email support@joinsetu.app and we will remove your data.

Security

Data is encrypted in transit. Access to your data is restricted by per-user security rules, and trainer access to health data is gated by your consent and logged. No system is perfectly secure, but we work to protect your information.

International users

Setu serves members and trainers across regions, including India and the United States. Your information may be processed in countries other than where you live, with appropriate safeguards.

Children

Setu is not directed to children under 16, and we do not knowingly collect data from them.

Changes

We may update this policy; we will revise the “Last updated” date and, for material changes, notify you in the app.