Privacy Policy

Last updated: March 4, 2026

Urja ("we", "our", or "us") operates the Urja mobile application and web platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

1. Information We Collect

Account Information

• Phone number (used for authentication via OTP)
• Name
• Age, gender

Health & Fitness Data

• Body measurements (weight, height)
• Fitness goals and activity level
• Workout logs and exercise history
• Nutrition logs (food intake, water intake, calorie tracking)
• Weight progress history
• Gym attendance records

Gym Membership Data

• Gym/organization affiliation
• Membership and subscription details
• Package and billing information

Automatically Collected Information

• Device type and operating system
• App version
• Usage data (pages visited, features used)

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Authenticate your identity via OTP
• Calculate personalized nutrition and fitness targets
• Track your workout progress and attendance
• Connect you with your gym or fitness organization
• Send service-related notifications (e.g., membership reminders)
• Improve and optimize the Service

3. Data Sharing

We do not sell your personal information. We may share your data only in the following cases:

• With your gym/organization: Your gym administrators can view your membership status, attendance, and assigned workout plans.
• SMS provider: Your phone number is shared with our SMS provider solely to deliver OTP codes for authentication.
• Legal requirements: If required by law, regulation, or legal process.

4. Data Storage & Security

Your data is stored on secure servers. We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure token-based authentication (JWT), and database access controls to protect your information.

5. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your account and data
• Export your data

7. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child, please contact us immediately.

8. Third-Party Services

The Service does not include third-party analytics, advertising SDKs, or social media trackers. We do not use Google Analytics, Facebook SDK, or similar tracking services.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via SMS. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

• Email: support@nepalgym.xyz