Legal

Privacy Policy

Last updated: June 21, 2026

Introduction

At onlygains.ai, we respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you about how we look after your personal data when you use our AI-powered fitness coaching mobile app and our website, regardless of where you visit from. It will also tell you about your privacy rights and how the law protects you.

Information We Collect

We collect several different types of information for various purposes to provide and improve our services to you:

  • Account Data: Name, email address, phone number, and authentication information collected through Clerk (our authentication provider).
  • Profile Data: Your fitness goals, height, weight, age, fitness level, activity level, workout preferences, dietary restrictions, medical conditions, allergies, and other relevant health and fitness metrics.
  • Fitness Data: Workout logs, exercise data, sets, reps, weights, duration, and performance metrics.
  • Nutrition Data: Meal logs, food intake, calorie tracking, macronutrient information, and dietary preferences.
  • Food Images: Photos you voluntarily submit via the food-photo logging feature. These images are transmitted to OpenAI (via the OpenAI API) for food recognition and nutrition estimation, are not used to train its models, and are retained no longer than 30 days for abuse monitoring before deletion.
  • Assessment Data: Initial assessments, daily check-ins, weekly reviews, and monthly progress assessments.
  • Progress Data: Progress photos, body measurements, weight tracking, and other fitness-related measurements.
  • Communication Data: Messages exchanged through our in-app AI coaching chat, chat history, and support communications.
  • Payment Data: Billing information, payment method details, and transaction history processed securely through Razorpay (we do not store full payment card details).
  • Usage Data: Information on how you use our services, including workout completion rates, engagement metrics, feature usage, and interaction patterns.
  • Technical Data: IP address, browser type, device information, operating system, timezone settings, and other technology identifiers on the devices you use to access our platform.
  • Analytics Data: Website usage patterns, page views, click-through rates, and user behavior analytics collected through Microsoft Clarity and other analytics tools.

How We Use Your Information

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our AI fitness coaching services
  • Generate personalized workout and nutrition plans based on your goals, preferences, and progress
  • Deliver coaching communications and reminders via in-app chat and push notifications
  • Process and track your fitness activities, nutrition intake, and progress
  • Analyze your progress and provide insights, recommendations, and feedback
  • Adapt and update your plans based on your performance and feedback
  • Process payments and manage your subscription
  • Prevent fraudulent transactions and ensure platform security
  • Communicate with you, including sending service updates, reminders, and marketing messages (with your consent)
  • Provide customer support and respond to your inquiries
  • Improve, enhance, and develop new features and services
  • Understand and analyze how you use our services to optimize user experience
  • Comply with legal obligations and enforce our terms of service

AI Processing and Third-Party AI Providers

Our app uses artificial intelligence to deliver core features: generating your personalised workout and meal plan, coaching you via the in-app chat, and recognising food from photos you share. To provide these services, your data is processed by third-party AI platforms.

The AI provider we use is: OpenAI, L.L.C. (GPT models, via the OpenAI API). See OpenAI's Privacy Policy.

Data sent to OpenAI. When you use AI-powered features, the following categories of your personal data are transmitted to OpenAI via the OpenAI API:

  • Health and fitness profile: Age, sex, height, weight, fitness goals, activity level, fitness experience, medical conditions, and dietary allergies or restrictions — collected during your initial assessment.
  • Workout and nutrition logs: Exercise records (exercise name, sets, reps, weight, duration) and meal records (foods eaten, portions, macronutrient data) — collected as you log activity in the app.
  • Food photos: Images you capture or upload when logging meals via photo recognition. These images are transmitted to OpenAI and processed by its GPT models to identify foods and estimate nutritional content. Images sent to the OpenAI API are not used to train its models and are retained no longer than 30 days for abuse monitoring before deletion, under the OpenAI API data usage policy.
  • Assessment responses: Your answers to the initial onboarding assessment, including personal health history and fitness preferences.
  • Coaching chat messages: The content of messages you exchange with the AI coach, including any personal context you share in conversation.
  • Progress context: Summary data about your recent workouts, nutrition adherence, and trend metrics used to personalise coaching responses.

How OpenAI uses the data. The data listed above is sent solely to generate a response to your request (plan generation, coaching reply, or food recognition). Under the OpenAI API data usage policy, OpenAI does not use data submitted via its API to train its models, and processes it under confidentiality obligations consistent with its enterprise terms.

Equal protection. OpenAI is subject to a Data Processing Addendum (DPA) under our OpenAI API agreement that requires security, confidentiality, and data-handling standards equivalent to or exceeding our own obligations to you. We review our AI provider's terms and compliance posture before relying on them for health data processing.

Your consent. Before we send any of your data to OpenAI for the first time, the app will present a clear disclosure screen naming OpenAI as the AI provider and describing what data is shared. You must actively accept this disclosure to use AI-powered features. You can withdraw consent at any time in Settings → AI Data & Privacy — withdrawing consent disables AI features until you re-accept.

No AI training on your personal data. Your identifiable personal data is not used to train AI models. Only anonymised, aggregated insights (never linked back to you) may inform service improvements.

Memory Context Storage

To provide personalised AI coaching that remembers your preferences, goals, and history across sessions, we use Supermemory (api.supermemory.ai), a third-party data processor that stores and retrieves structured memory context.

What Supermemory receives. When you interact with the AI coach, a structured summary of relevant context from your profile and history (including fitness goals, dietary preferences, past coaching notes, and user-stated preferences) is stored in Supermemory under your account ID. This context is retrieved and included in AI prompts to make coaching responses more accurate and personalised.

What Supermemory does not receive. Raw food photos, full workout logs, and payment data are not sent to Supermemory.

Equal protection. Supermemory processes data under a service agreement that requires confidentiality and appropriate technical and organisational security measures. Your memory context is stored under a namespaced key tied to your account and is not accessible to other users or third parties.

Deletion. When you delete your account or withdraw AI consent, your memory context is deleted from Supermemory. You may also request manual deletion by contacting us.

Third-Party Services We Use

We use trusted third-party service providers to help us operate our business and deliver our services:

  • OpenAI, L.L.C. — OpenAI API (AI provider): We use OpenAI's GPT models via the OpenAI API to power AI coaching, plan generation, and food-photo recognition. When you use these features, relevant personal and health data (as described in the "AI Processing and Third-Party AI Providers" section above) is transmitted to OpenAI via secure API. OpenAI processes this data under its Data Processing Addendum and API data usage policy, which prohibit use of your data for model training and require appropriate data security standards. See OpenAI's Privacy Policy.
  • Supermemory (memory context storage): We use Supermemory (api.supermemory.ai) to store and retrieve structured coaching context (fitness goals, preferences, coaching notes) across your sessions. This enables the AI coach to remember prior conversations and provide more personalised guidance. Supermemory processes data under confidentiality obligations and does not share your context with other users or third parties. See Supermemory's Privacy Policy.
  • Clerk: Authentication and user account management. Clerk processes your login credentials and account information in accordance with their privacy policy.
  • Razorpay: Payment processing for subscriptions and purchases. Razorpay handles payment transactions securely and in compliance with PCI-DSS standards. We do not store your full payment card details.
  • MSG91: Messaging provider used to deliver one-time verification codes (OTP) to your phone number for account sign-in and phone verification, including delivery via the WhatsApp Business API. MSG91 processes your phone number solely to send these messages. Codes delivered over WhatsApp are additionally subject to WhatsApp's own privacy policy and terms.
  • Microsoft Clarity: User behavior analytics to understand how users interact with our website. Microsoft Clarity collects anonymous browsing data including mouse movements, clicks, scrolling, and page navigation patterns.
  • Cloud Hosting Providers: We use cloud infrastructure providers to host and store your data securely with encryption and backup systems.

These third-party services have their own privacy policies governing how they handle your data. We encourage you to review their privacy policies to understand their practices.

Data Sharing and Disclosure

We may share your information with:

  • OpenAI, L.L.C. (AI service delivery): We share personal and health data with OpenAI exclusively to process your AI coaching requests, generate workout and meal plans, and perform food-photo recognition. This sharing occurs only when you use AI features and only after you have given explicit in-app consent. OpenAI does not receive payment data, and does not receive data from users who have declined AI consent.
  • Supermemory (memory context delivery): We share structured coaching context with Supermemory to enable personalised AI responses across sessions. Supermemory receives only distilled context summaries (not raw logs or photos) and does not share your data with third parties.
  • Fitness Coaches: If you subscribe to a Coach Managed Plan, your assigned human coach will have access to your profile data, fitness logs, nutrition data, progress information, and communication history necessary to provide personalized coaching services. Coaches are bound by confidentiality agreements.
  • Service Providers: We share data with third-party service providers (listed above) who help us operate our business and administer activities on our behalf, such as payment processing, data analysis, customer support, and messaging services.
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of our users or others.

We do not sell your personal information to third parties for marketing purposes. We do not share your data with advertisers or data brokers.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on secure servers with encryption at rest and in transit. We use industry-standard security protocols and regularly update our security measures.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Data Retention

We retain your personal data for as long as necessary to provide our services to you and fulfill the purposes outlined in this Privacy Policy. We may retain certain data for longer periods if required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes. When you delete your account, we will delete or anonymize your personal data, except where we are required to retain it for legal or regulatory purposes.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request access to your personal data and receive a copy of the data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (subject to legal and contractual obligations)
  • Restriction: Request restriction of processing of your data in certain circumstances
  • Portability: Obtain a copy of your data in a structured, machine-readable format
  • Objection: Object to processing of your data for certain purposes
  • Withdraw Consent: Withdraw consent at any time where we rely on consent to process your personal data

To exercise these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

We use Microsoft Clarity, a user behavior analytics tool that helps us understand how users interact with our website. Microsoft Clarity collects data about your browsing behavior including:

  • Mouse movements, clicks, and scrolling
  • Pages visited and navigation between pages
  • Browser information and device characteristics
  • Time spent on pages and interactions with page elements

This data is collected anonymously and is used to improve our website's user experience. Microsoft Clarity may store and process this data in accordance with their privacy policy, which can be found at Microsoft Clarity's Terms and Privacy.

Children's Privacy

Our services are not intended for use by individuals under the age of 16 without parental consent. We do not knowingly collect personally identifiable information from children under 16. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we take steps to remove that information from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Material changes will be communicated to you via email or through our platform.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Email: support+legal@onlygains.ai
Address: Chaitanya Information Technologies, GROUND FLOOR, Ward No 16,
PALIKA ROAD, SHANTI NAGAR, Durg,
CG, India 490021