LEGAL

Privacy Policy

Version 1.0 | September 2026 | Bindpoint Private Limited

1. About This Policy

1.

This Privacy Policy describes how Bindpoint Private Limited ("TrainRu", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you use the TrainRu platform, website, and mobile application (collectively, the "Platform").

2.

By registering on or using the Platform, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.

3.

This Policy applies to all users of the Platform, including Residents and Trainers.

4.

TrainRu complies with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 ("DPDPA"), and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), as amended from time to time.

5.

This Privacy Policy should be read alongside the applicable Terms and Conditions governing your use of the Platform.

2. Data We Collect

1.

Identity data: your name, date of birth, gender, and profile photograph.

2.

Contact data: your phone number, email address, and residential address or apartment details.

3.

Location data: your apartment complex name, area, and approximate geographic coordinates used for Trainer matching.

4.

Health and fitness data: fitness goals, health conditions, injuries, limitations, and other health-related information you voluntarily share with TrainRu or your Trainer.

5.

Financial data: payment transaction references and payout bank account details. TrainRu does not store full card numbers or CVV details. Payment card data is handled directly by Razorpay.

6.

Identity verification data (Trainers): Aadhaar number, PAN number, and copies of identity and certification documents submitted during onboarding.

7.

Usage data: booking history, session records, check-in and check-out times, reviews, and Platform interaction data.

8.

Technical data: IP address, device type, browser or app version, operating system, and user agent information collected at registration and login.

9.

Communications data: messages, support requests, complaint records, and other communications with TrainRu.

10.

We collect personal data directly from you when you register, book a session, contact support, or interact with the Platform. We may also collect certain technical data automatically through your use of the Platform.

3. Purpose and Legal Basis for Processing

1.

TrainRu processes your personal data only for specific, lawful purposes.

2.

Providing the Platform: to create and manage your account, match you with Trainers, process bookings and payments, send confirmations and reminders, and facilitate session coordination.

3.

Safety and verification: to verify Trainer identity and credentials, conduct background checks where applicable, and maintain platform safety.

4.

Communications: to send transactional messages including booking confirmations, OTPs, session reminders, and support responses via SMS, WhatsApp, and email.

5.

Legal and compliance: to comply with applicable Indian law, respond to lawful requests from authorities, maintain required records, prevent fraud, and resolve disputes.

6.

Platform improvement: to analyse usage patterns, improve features, and develop new services using aggregated or anonymised data.

7.

Marketing (with consent): to send promotional communications where you have provided consent. You may withdraw consent at any time.

8.

Health and fitness data is processed solely to facilitate your training sessions and for purposes described in this Policy. It is not used for advertising or sold to third parties.

4. Data Sharing

1.

TrainRu shares your personal data only to the extent necessary and with appropriate safeguards.

2.

With your assigned Trainer: your name, apartment complex name, and booking details are shared with your booked Trainer to coordinate sessions. Your phone number is shared only where necessary for session coordination.

3.

Payment processors: payment data is processed by Razorpay or other payment service providers engaged by TrainRu, subject to their own privacy policies and applicable law.

4.

Communications providers: SMS, WhatsApp, and email notifications are sent through third-party communications service providers engaged by TrainRu.

5.

Cloud and technology providers: your data is stored and processed on cloud infrastructure engaged by TrainRu, including AWS (Amazon Web Services).

6.

Law enforcement and authorities: TrainRu may share data with law enforcement, regulatory authorities, or courts where required by applicable law or a lawful order.

7.

Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

8.

TrainRu does not sell your personal data to third parties. TrainRu does not share personal data with advertisers.

5. Health and Fitness Data

1.

Health and fitness information you provide — including medical conditions, injuries, limitations, medications, and fitness goals — is treated with additional care.

2.

This information is used solely to facilitate your training sessions, enable your Trainer to provide appropriate services, and ensure your safety during sessions.

3.

Health data is shared with your assigned Trainer only to the extent necessary for session delivery.

4.

Health data is not used for advertising, profiling for commercial purposes, or sold to any third party.

5.

You are not required to share health information beyond what is necessary to participate safely. However, withholding relevant health information may affect the safety or quality of your training sessions.

6.

TrainRu applies appropriate technical and organisational safeguards to protect health data.

6. Data Retention

1.

TrainRu retains personal data only for as long as reasonably necessary for the purposes for which it was collected.

2.

Account data is retained while your account is active and for a period thereafter as required for legal, regulatory, fraud-prevention, accounting, dispute-resolution, or audit purposes.

3.

Booking and session records are retained for the period required under applicable law and for dispute resolution purposes.

4.

Payment and financial records are retained for the period required under applicable Indian accounting and tax law.

5.

Health and fitness data is retained while your account is active and deleted or anonymised when no longer required for the purposes for which it was collected, subject to any legal retention obligations.

6.

Identity verification documents submitted by Trainers are retained for the period required for platform verification, legal compliance, and dispute resolution.

7.

Technical and usage data may be retained in anonymised or aggregated form for platform analytics and improvement.

8.

When data is no longer required, TrainRu will delete or anonymise it in accordance with applicable law and this Policy.

7. Data Security

1.

TrainRu implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

2.

All data is transmitted over encrypted connections using SSL/TLS.

3.

TrainRu uses OTP-based authentication. Passwords are hashed and not stored in plain text.

4.

Access to personal data is restricted to authorised TrainRu personnel and service providers on a need-to-know basis.

5.

TrainRu conducts periodic security reviews of its systems and processes.

6.

In the event of a personal data breach that is likely to result in a risk to your rights or interests, TrainRu will notify the relevant authority and affected individuals as required under applicable law.

7.

No system can be completely secure. While TrainRu takes reasonable precautions, we cannot guarantee absolute security of your personal data.

8. Your Rights

1.

Subject to applicable law, you have the following rights regarding your personal data.

2.

Access: you may request information about what personal data TrainRu holds about you.

3.

Correction: you may request correction of inaccurate or incomplete personal data. You can update most profile information directly through the Platform.

4.

Deletion: you may request deletion of your personal data by contacting support@trainru.com. TrainRu will delete or anonymise your data where legally permissible. Certain data may be retained where required by applicable law.

5.

Withdrawal of consent: where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

6.

Grievance: you may raise a privacy concern or complaint with the TrainRu Grievance Officer (see Section 11).

7.

Nomination: under the DPDPA, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. Contact support@trainru.com to register a nomination.

8.

TrainRu will respond to rights requests within the timeframe required by applicable law. TrainRu may request reasonable information to verify your identity before processing a request.

9. Cookies and Tracking

1.

The TrainRu website uses cookies and similar technologies to enable platform functionality, maintain sessions, and analyse usage.

2.

Essential cookies are required for the Platform to function and cannot be disabled.

3.

Analytics cookies help TrainRu understand how the Platform is used. These may be disabled through your browser settings.

4.

TrainRu does not use advertising or tracking cookies for third-party advertising purposes.

5.

The TrainRu mobile application may collect device identifiers and usage data for analytics and push notification purposes, subject to your device permissions.

10. Children's Privacy

1.

The TrainRu Platform is intended for users who are 18 years of age or older.

2.

TrainRu does not knowingly collect personal data from individuals under the age of 18.

3.

If TrainRu becomes aware that personal data has been collected from a minor without appropriate consent, it will take steps to delete such data promptly.

4.

If you believe a minor has registered on the Platform, please contact support@trainru.com immediately.

11. Grievance Officer

1.

If you have a complaint, concern, or query regarding this Privacy Policy or the processing of your personal data, you may contact the TrainRu Grievance Officer.

2.

Grievance Officer: Peter Joseph, Bindpoint Private Limited.

3.

Email: peter.joseph@bindpoint.in

4.

Phone: +91 91481 25848

5.

TrainRu will acknowledge your grievance within the period required by applicable law and endeavour to resolve it within the applicable statutory timeframe.

6.

If you are not satisfied with the resolution, you may approach the relevant authority under applicable Indian law, including the Data Protection Board of India once operational under the DPDPA.

12. Changes to This Policy

1.

TrainRu may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law.

2.

Material changes will be communicated through reasonable means such as email, WhatsApp, or an in-app notification before they take effect.

3.

The version number and date at the top of this Policy indicate when it was last updated.

4.

Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised terms to the extent permitted by applicable law.

13. Contact Us

1.

For general privacy questions or to exercise your data rights, contact TrainRu at: support@trainru.com

2.

Bindpoint Private Limited, Bangalore, Karnataka, India.

3.

For urgent privacy or security concerns, you may also contact the Grievance Officer directly at peter.joseph@bindpoint.in or +91 91481 25848.

This Privacy Policy is governed by the laws of India. By using the TrainRu Platform, you acknowledge that you have read and understood this Policy.

Bindpoint Private Limited | Bangalore, Karnataka, India | Version 1.0 | September 2026