Privacy Policy

Introduction

BuddyPT is one of the products offered by VCINCH Technologies Pvt Ltd. BuddyPT provides a software platform that enables health and fitness businesses to manage operations and offer health and fitness coaching, whether in person or online.

Planning workouts and diets, scheduling and sharing content, messaging (in-app, email, SMS, push), logging personal health information, payment services, and offering tools to help businesses communicate, receive analytics, and expand their enterprises are just a few of the services offered by BuddyPT.

We primarily serve as a processor on behalf of Trainers (as defined below), who are responsible for creating and maintaining their own privacy notices for their Clients (as defined below). Only in the limited cases when we are a controller may our Privacy Policy apply (as described below). Trainers and Clients are both covered by the Privacy Policy, but it's vital to distinguish between the two since BuddyPT has different obligations regarding personal information depending on whether you're a Trainer or a Client. If you still have any queries, please email us at support@buddypt.com.

Scope

This privacy statement outlines our practices for gathering, using, maintaining, protecting, and disclosing your information, as well as (where applicable) the types of information we may collect from you or that you may provide when you visit the website www.buddypt.com (the "Website") and/or use our mobile/desktop application (the "App"). The combined App and Website are referred to as the "Platform," and the services made accessible through the Platform are referred to as the "Service."

We may gather information utilizing the Platform through text messages, emails, and other correspondences between you and the Service or us. If our applications or advertisements are displayed on third-party websites or services that you interact with, the privacy policy provided by BuddyPT applies to such interactions.

Information We Collect

Health and Fitness Information

The Platform may collect health and fitness-related information including but not limited to:

• Height
• Weight
• Body measurements
• Body fat percentage
• Progress photos
• Nutrition information
• Activity data
• Heart rate data
• Step count data
• Workout performance metrics

This information is used solely to provide fitness coaching, progress tracking, analytics, communication, and related services through the Platform.

Not Medical Advice

BuddyPT is a fitness coaching platform and does not provide medical advice, diagnosis, treatment, or healthcare services. Any workout programs, nutrition recommendations, AI-generated suggestions, or coaching content available through the Platform are provided for informational purposes only and should not be considered medical advice. Users should consult qualified healthcare professionals before making health-related decisions.

HIPAA Disclaimer

BuddyPT is not designed or marketed as a HIPAA-compliant healthcare platform. The Platform is intended for fitness coaching, wellness services, habit tracking, and related activities. Users, Trainers, and Clients should not upload medical records, medical diagnoses, treatment plans, laboratory reports, insurance records, or other protected health information unless specifically authorized under a separate written agreement with BuddyPT.

How We Use Your Information

We use the personal information we collect to:

• Provide, operate, maintain, and improve the Platform and Service.
• Enable Trainers to deliver coaching, programming, nutrition, and related services to their Clients.
• Process payments, subscriptions, and billing.
• Communicate with you about your account, transactions, security, and product updates.
• Send marketing communications where permitted by law (you may opt out at any time).
• Personalize features, content, and recommendations.
• Detect, investigate, and prevent fraud, abuse, or security incidents.
• Comply with legal obligations and enforce our Terms of Service.

Data Sharing and Disclosure

BuddyPT may share personal information with the following categories of recipients:

Service Providers

We may share information with trusted third-party service providers that help us operate the Platform, including hosting providers, payment processors, analytics providers, email delivery services, customer support tools, push notification services, and infrastructure providers.

Trainers and Authorized Staff

Where you are a Client of a Trainer, your information may be shared with the Trainer and any staff members authorized by that Trainer for the purpose of providing coaching, fitness, nutrition, communication, and related services.

Business Transfers

If BuddyPT is involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy transaction, personal information may be transferred as part of that transaction.

Legal Requirements

We may disclose information if required to do so by law, regulation, court order, governmental request, or when we believe disclosure is necessary to protect our rights, users, or the public.

With Your Consent

We may share information with third parties when you explicitly authorize us to do so.

No Sale of Personal Information

BuddyPT does not sell personal information and does not sell sensitive health-related information to third parties. We do not "share" personal information for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

International Data Transfers

BuddyPT is operated by VCINCH Technologies Pvt Ltd, located in India.

Your personal information may be stored, processed, and transferred to servers and service providers located in India, the United States, and other countries where our infrastructure providers and business partners operate.

By using the Platform, you acknowledge and agree that your information may be transferred to and processed in countries that may have data protection laws different from those in your country of residence.

We take reasonable measures to ensure that personal information remains protected regardless of where it is processed, including contractual safeguards with our service providers.

AI Features Disclosure

BuddyPT may provide features powered by artificial intelligence technologies. Information submitted by users may be processed by AI systems to generate recommendations, workout suggestions, nutrition guidance, summaries, or other platform functionality.

AI-generated outputs are automated suggestions and may not always be accurate, complete, or suitable for every individual. Users and Trainers remain solely responsible for reviewing, validating, and approving any recommendations before implementation.

AI-generated content should not be relied upon as medical, nutritional, legal, financial, or professional advice.

Cookies and Analytics

BuddyPT uses cookies, pixels, analytics technologies, and similar tools to:

• Authenticate users
• Maintain sessions
• Improve platform performance
• Analyze user behavior
• Measure advertising effectiveness
• Personalize user experiences

We may use third-party analytics providers including Google Analytics and advertising platforms such as Meta (Facebook) Ads. Users may control cookie preferences through browser settings. Disabling certain cookies may impact functionality of the Platform.

Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

• Access personal information we hold about you
• Correct inaccurate personal information
• Delete personal information
• Restrict certain processing activities
• Request portability of personal information
• Withdraw consent where processing is based on consent
• Opt out of certain marketing communications

To exercise any of these rights, contact us at support@buddypt.com. We may verify your identity before fulfilling a request. You will not be discriminated against for exercising your privacy rights.

U.S. State Privacy Rights

California Residents (CCPA/CPRA)

Residents of California may have additional privacy rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. California residents may request:

• Categories of personal information collected
• Sources of personal information
• Purposes for collection and use
• Categories of third parties receiving information
• Specific pieces of personal information collected
• Deletion of personal information
• Correction of inaccurate information
• The right to limit use of sensitive personal information

BuddyPT does not sell personal information and does not sell or share sensitive personal information for cross-context behavioral advertising.

Other U.S. State Residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port their personal information, and to opt out of targeted advertising, sale of personal data, and certain profiling activities. You may also appeal a denied request by contacting us.

To exercise any U.S. state privacy right, contact support@buddypt.com. An authorized agent may submit a request on your behalf with appropriate proof of authorization.

Children's Privacy

The Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 years of age in compliance with the U.S. Children's Online Privacy Protection Act (COPPA).

If we become aware that personal information has been collected from a child under 13 without appropriate parental consent, we will take reasonable steps to delete such information.

Parents or guardians who believe their child has provided personal information may contact us at support@buddypt.com.

Information Security

BuddyPT implements administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures may include:

• Encryption in transit
• Secure password storage
• Role-based access controls
• Security monitoring
• Backup and recovery procedures
• Multi-factor authentication where applicable

While we strive to protect personal information, no system can be guaranteed to be completely secure.

Security Incident Notification

If BuddyPT becomes aware of a security incident affecting personal information, we will investigate the incident and notify affected users as required by applicable law. Notification may be provided through email, in-app communication, website notices, or other appropriate methods.

Data Retention

BuddyPT retains personal information only for as long as necessary to provide services, comply with legal obligations, resolve disputes, enforce agreements, and maintain business operations. The retention period may vary depending on the type of information involved.

Upon account deletion, certain information may be retained for a limited period where required by law, taxation requirements, fraud prevention purposes, backup systems, or legitimate business interests.

Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is not yet a common industry standard for how to respond to DNT signals, the Platform does not currently respond to DNT browser signals. We do, however, honor recognized opt-out preference signals (such as Global Privacy Control) where required by applicable law.

Collection of Health Information from Apple Health and Google Health

BuddyPT utilizes functionalities provided by Apple Health (iOS devices) and Google Health (Android devices) to access health and fitness data as authorized by our users. Our app collects personal and sensitive user data, including Heart Rate Record and Steps Record. This data is used solely to enhance your fitness experience within the app.

Deletion Policy

BuddyPT is committed to providing users with the ability to control and delete their data. Specifically for the step and heart rate data collected through Apple Health and Google Health:

How We Protect Your Information

While we take every precaution to secure your data, no method of transmission or storage is completely secure. Users are responsible for maintaining the confidentiality of their login credentials.

If you have any concerns about the security of your data, please contact us at support@buddypt.com.

Changes to Privacy Policy

There may be periodic changes to this privacy statement. Please review this Privacy Policy frequently for modifications. By using the Platform after we make changes to this Privacy Policy, you agree to those changes.

We will give you notice via the Service if we materially alter how we use your personal information or how you can exercise your rights. The date this privacy statement was last updated is noted on the first page of this document. It is your responsibility to maintain an active, deliverable email address for us and to regularly review this Privacy Policy to see if there have been any updates.