1. Introduction

Welcome to Re:Move ("we," "our," or "us"). We are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Progressive Web App (PWA) and related services.

2. Data Controller Information

Data Fiduciary: Re:Move
Email: support@rootsera.in
Grievance Officer: support@rootsera.in
Address: Roots Era, Building No./Flat No.: 172
Road/Street: anthiyur main road, old kadayamppatti
City/Town/Village: Andikulam
District: Erode
State: Tamil Nadu
PIN Code: 638312

3. Types of Data We Collect

We collect the following types of personal data:

• Account Data: Email address, username, profile picture (optional)
• Health & Wellness Data: Movement timers, streak data, ritual completions, wellness form responses
• Device Data: Device type, browser, IP address (anonymized), timezone
• Usage Data: App usage patterns, feature interactions (anonymized)
• Location Data: Timezone only (for reminder scheduling)
• Communication Data: WhatsApp number (if provided), notification preferences

4. Purpose of Data Collection

We use your data for:

• Providing personalized movement reminders and wellness tips
• Tracking your streaks and progress
• Sending notifications (with your consent)
• Improving our services (with your consent for analytics)
• Processing payments and managing subscriptions
• Complying with legal obligations

5. Legal Basis & Consent

Under the DPDP Act 2023, we process your personal data based on:

• Consent: For analytics, marketing communications, and optional features
• Legitimate Interests: For service delivery, fraud prevention, and security
• Contractual Necessity: For account management and payment processing

You can withdraw consent at any time by updating your preferences in Settings or contacting us.

6. Data Retention

We retain your data only as long as necessary:

• Account Data: Until account deletion
• Health/Wellness Data: Until account deletion or 7 years (medical record retention)
• Analytics Data: 2 years (anonymized)
• Payment Records: 7 years (legal requirement)

Upon account deletion request, we will delete your data within 30 days, except where retention is required by law.

7. Data Sharing & Cross-Border Transfer

We share data only with:

• Firebase/Google Cloud: Hosting and authentication (US - with adequacy decision)
• Payment Processors: Razorpay/Stripe (India) for payment processing
• Analytics Providers: Only with your explicit consent

We ensure that all third parties comply with data protection standards equivalent to DPDP Act requirements.

8. Your Rights (DPDP Act Section 8)

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request erasure of your data (with exceptions for legal obligations)
• Portability: Receive your data in a machine-readable format
• Withdraw Consent: Revoke consent at any time
• Grievance: File a complaint with our Grievance Officer

To exercise these rights, email us at support@rootsera.in or use the Settings page.

9. Grievance Redressal (DPDP Act Section 10)

If you have concerns about data handling, contact our Grievance Officer:

10. Security Measures

We implement:

• End-to-end encryption for sensitive data
• Secure authentication (Firebase Auth)
• Regular security audits
• Access controls and audit logs
• Data breach notification procedures (as per DPDP Act)

11. Children's Privacy

Re:Move is not intended for children under 13. We do not knowingly collect data from children. If we become aware of such collection, we will delete it immediately.

12. Changes to This Policy

We may update this policy. Material changes will be notified via email or in-app notification. Continued use after changes constitutes acceptance.

13. Contact Us

For privacy-related queries:
Email: support@rootsera.in
Grievance: support@rootsera.in