Data Notice
Last updated: 28 October 2026
This is the short version of what we do with your personal data, as the Digital Personal Data Protection Act, 2023 asks us to tell you before we collect it. The full detail is in our Privacy Policy. TrainSmarter is operated by Nischal Mohan, sole proprietor, who decides why and how your data is used.
What we collect, why, and who sees it
Name, phone number, password (hashed)
Why: To create your account, log you in and tell you apart from other users.
Who sees it: You, and your trainer or clients if you are attached to them.
One-time code sent by SMS (stored only as a hash, valid 10 minutes)
Why: To confirm the phone number is yours at signup and when you reset a password.
Who sees it: Our SMS provider MSG91 sees your number and the message.
Workouts, meals, body measurements, height, sex, date of birth, macro goals
Why: To run your plans and show progress. This is health data, so it gets the most care.
Who sees it: You, and the trainer you are attached to, for as long as you are attached, plus read-only for 30 days after it ends.
Profile photo (optional)
Why: To show who you are to you and your trainer or clients.
Who sees it: You, your current trainer, or the clients you currently coach. Nobody else.
Who is attached to whom, and when
Why: To show trainers their clients and clients their trainer, and to work out days of access.
Who sees it: The two people involved.
Payment amount, plan, time and Razorpay payment reference
Why: To confirm payments, add days to your balance and keep the financial record the law requires.
Who sees it: Us and Razorpay. We never see your card, bank or UPI app details.
For trainers who joined by a referral link: that you bought days, when, and how many
Why: To pay the referrer their reward.
Who sees it: The trainer who referred you. Nothing about your clients or health data.
Error reports and a few usage events (an internal account number and your role only)
Why: To fix bugs and learn which features are used.
Who sees it: Our monitoring tools Sentry and PostHog. They never get your name, phone number, health data or anything you typed.
What we do not do
- We do not sell your data or use it for advertising.
- We do not record your screen or run advertising trackers.
- We do not collect data from anyone under 18.
Your consent and your rights
- You agree to this when you tick the box at signup. You can withdraw consent at any time just as easily: tap Delete my accountunder Profile → Account and enter your password. Your data is deleted straight away, except payment records the law makes us keep.
- You can correct your details in the app, and ask us for a copy of your data by messaging us from your account’s phone number.
- Questions or complaints go to our Grievance Officer (see Contact Us). If we do not resolve it, you may complain to the Data Protection Board of India.
- If your data is ever part of a security incident, we will tell you.