Privacy Policy

Last Updated: October 12, 2026

This Privacy Policy explains how RUSTIC WISDOM PRIVATE LIMITED (“Company”, “we”, “our”, or “us”) collects, uses, protects, and manages your information when you use our website (rusticwisdom.in), our mobile application (“App”) and related services (together, the “Services”).

The website collects the details you enter in our enquiry form, webinar registrations and newsletter sign-up. These are routed to our coaches securely through Telegram so that we can call you back and provide relevant information. The website and App run on Amazon Web Services in the Mumbai (ap-south-1) region, India.

This policy is issued under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). By using the Services, you agree to the practices described in this policy.

1. Your Consent

Where we rely on your consent, you give it by submitting a form on the website (enquiry, webinar registration or newsletter), by creating an account in the App, or by granting a permission on your device (for example, health data or photo access). Each form and permission tells you what the information is used for, and this policy describes it in full.

You may withdraw your consent at any time by writing to the Grievance Officer named in section 13, or by revoking the permission in your device settings. Withdrawing consent does not affect processing that has already taken place, and we may still keep information a law requires us to keep.

2. Information We Collect

We may collect the following personal information:

Name
Address
Age
Email address
Phone number
The message, health goal or question you type into our enquiry, webinar or contact forms
In the App: the profile, health history, lifestyle and progress details you enter so that your coach can guide you
In the App: body measurements, weight and the progress photos you upload, meal logs and your daily activity log
In the App: messages, photos and documents you exchange with your coach, and your video sessions with your coach
Payment and order records (we never see or store your card or bank details)

We may also automatically collect limited technical information:

Device type
Operating system version
App version
Crash logs and diagnostics
In the App: your phone's time zone and language setting when you sign in, so we can see which region you use the App from (never GPS; the App does not ask for location access)
Usage analytics

The website does not use advertising or tracking cookies.

3. Health Data

With your explicit permission, the App reads wellness data from Android Health Connect and Apple Health (HealthKit) to help you and your coach track your health progress and the effect of changes to your programme. The categories may include steps, exercise sessions, sleep, heart rate, total calories burned and hydration records.

This access is read-only. We do not modify, delete, or write any data back to Health Connect or Apple Health. Health data is used only inside the App for your progress tracking; it is never sold, shared with advertisers, or used for advertising. You can revoke the permission at any time from your device settings.

The website does not collect any health data.

The App is not a medical device and does not provide medical advice, diagnosis, or treatment.

4. Photo and Media Access

The App may allow users to upload photos or documents when using certain features such as profile updates or communication with coaches.

Media files are accessed only when the user explicitly selects them using the device's system file or photo picker.

The App does not scan, access, or collect photos or videos from your device without your direct action.

5. How We Use Information

We use each category of information for a specific purpose:

Enquiry form (name, email, phone, message): to call you back, answer your question and recommend a suitable programme.
Webinar registration (name, email, phone): to confirm your seat, send the joining details and a reminder.
Newsletter (email): to send you the newsletter you subscribed to, until you unsubscribe.
App account and profile: to provide and operate the coaching programme you have enrolled in, schedule sessions, and let your coach guide you.
Health data (App, with permission): to track your health progress and programme changes, as described in section 3.
Technical and diagnostic information: to keep the Services secure, prevent misuse, fix crashes and improve functionality and performance.
All categories: to communicate with you and to provide customer support.

6. Sharing of Information

We do not sell or rent your personal data.

Information may be shared only:

With our coaches and staff who serve you. Website enquiries are sent to them securely through Telegram so that they can call you back.
With authorized service providers that process data on our behalf: Amazon Web Services (hosting and storage, Mumbai, India), Telegram (coach notifications), and Google Firebase (App crash reporting and push notifications).
From the App, with your coach through Telegram: when you log your day or book a session, a summary (which can include your weight, sleep, steps and water) is sent to your coach as a Telegram message
With Razorpay, to process your payments
With Shiprocket, our delivery partner, when you order a product: your name, phone number and delivery address
With our diagnostic laboratory partner, only when you book a blood test through the App, and only the details needed to schedule and perform the test.
If required by law or valid legal process.

All partners are required to comply with applicable data protection laws and to use the information only for the purpose it was shared.

Client transformations. We publish a client's transformation story, photos or results on our social media handles or website only after obtaining that client's consent. Without consent, we do not post it.

7. Data Security

Encryption in transit (HTTPS/TLS)
Secure cloud storage on Amazon Web Services
Restricted access controls
Periodic security review

While we use reasonable safeguards, no digital platform can guarantee absolute security.

8. Data Retention

We retain personal data only as long as necessary to provide services, comply with legal obligations, and resolve disputes. Specifically:

Website enquiries and webinar registrations: 5 years from our last interaction with you, after which they are deleted.
Newsletter subscription: until you unsubscribe.
Client accounts and programme records, including health data read from your device: while your account is open and your programme is running.
After you delete your account: your login is removed at once. Your profile, programme records, measurements, progress photos, messages and health data are moved to a restricted archive that only authorised staff can open, kept for 5 years from the date your account is deleted so that we can answer a question or dispute about the services we provided, and then permanently deleted.
Payment and invoice records: for 8 years after your last payment, which is the period Indian company and tax law requires us to keep financial records.

You can ask us to delete your data earlier at any time (section 9). We will do so unless a law requires us to keep it.

9. Your Rights

Under the DPDP Act you have the right to:

Access your personal data
Correct inaccurate information
Request deletion of your data
Withdraw optional permissions and consent
Nominate a person to exercise these rights on your behalf if you are unable to

To exercise any right, email the Grievance Officer named in section 13 from the email address registered with us. We will respond within 48 hours on working days. App users can also delete their account from within the App.

If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

10. Children's Privacy

The Services are not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact the Grievance Officer and we will delete it.

11. Where Your Data Is Stored

The personal data you give us is stored in India, on Amazon Web Services in the Mumbai (ap-south-1) region. Crash and diagnostic reports from the App are processed by Google Firebase and may be handled outside India; they do not contain your health data. Coach notifications sent through Telegram, described in the sharing section, are handled on Telegram's servers, which may be outside India.

12. Refund and Cancellation Policy

Due to the nature of our services, there are no refunds or cancellations once an order is placed and the payment has been processed. The full terms are on our Refund Policy page.

13. Grievance Officer and Contact Information

Grievance Officer (DPDP Act): Deepak A
Email: deepaka@rusticwisdom.in
We acknowledge and respond to privacy requests and grievances within 48 hours on working days.

Company: RUSTIC WISDOM PRIVATE LIMITED
Email: contact@rusticwisdom.in
Contact No: +91 90084 82055
Address: 4th Floor, NR Towers, 17th Cross, 19th Main Rd, Sector 4, HSR Layout, Bengaluru, Karnataka, India 560102

14. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top shows the latest revision. Continued use of the Services constitutes acceptance of the revised policy.