Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account on ZaarviQ™, we collect:

• Name and email address
• Password (stored in encrypted form)
• Profile information you choose to provide, such as age, weight, gender, sport preferences, address, and phone number. Address is used to help you find and connect with nearby coaches and athletes; phone number helps us verify accounts and reduce fake registrations. These profile fields are optional — you can use ZaarviQ without providing them, though some features (such as location-based coach/athlete search) work better when provided.

1.2 Fitness and Health Data from Connected Devices

When you connect a third-party account or service to ZaarviQ™ — such as Garmin Connect, Wahoo Cloud, Apple Health, Google Health Connect, or aggregation services such as Terra — we access the following data through their respective APIs with your explicit authorization:

1.3 Data We Do NOT Collect

• We do not access your Garmin Connect, Wahoo, or other provider login credentials. Authentication is handled through each provider's secure OAuth process.
• We do not collect financial or payment information through device integrations.
• We do not access data from other users through your connection.

1.4 Health Connect Data (Android)

On Android devices, ZaarviQ™ integrates with Google Health Connect to read and write health and fitness data stored on your device. We request access to the following specific Health Connect data types, each for a stated purpose. All Health Connect permissions require your explicit, granular consent before any data is accessed.

Health Connect READ Permissions (16 data types):

Health Connect WRITE Permission (1 data type):

Steps — ZaarviQ™ writes step count data to Health Connect to enable cross-app step tracking. This is the only data type ZaarviQ™ writes; all other permissions are read-only.

Health Connect integration is optional. You can grant or revoke access to individual data types at any time through your device’s Health Connect settings (Settings → Health Connect → App permissions → ZaarviQ). ZaarviQ™ functions fully with .FIT file uploads even without Health Connect access.

1.5 Live Ride Location Sharing (ClubRide)

ZaarviQ™ includes an optional live group-ride feature (“ClubRide”) that lets you ride together virtually with other ZaarviQ™ users. When you create or join a live ride and go live:

• We collect your precise location (GPS) and share it in real time with the other riders in that same ride, so the group can see each other on a shared live map.
• Location is collected only while a live ride is active and you have joined it. It stops when the ride ends, when you exit the ride, or when you close the live ride screen.
• Background location: because your device is typically stowed (pocket or handlebar mount) during a ride, location continues to update while the app is in the background so the group can continue to see you. We request background location permission for this purpose only, and only after showing you a clear disclosure and obtaining your consent.
• Your live location is shared only with riders in the same ride. It is not shared with any other users, not used for advertising, and not sold to third parties.
• Ride photos: if you take or upload a photo during a live ride, the photo is stored on our secure servers and shown to the other riders in that ride. When you upload a photo during a ride, we also record your then-current ride location and timestamp alongside it, so the photo can be associated with the ride. Photos are not used for advertising or shared outside the ride.

ClubRide is optional. If you do not create or join a live ride, no live location is collected or shared, and no background location is used.

2. How We Use Your Data

We use the data collected exclusively for the following purposes:

• Training Analysis: Parsing .FIT files to generate performance metrics, power analysis, pace zones, and training load calculations.
• Performance Tracking: Displaying trends, progress, and historical comparisons of your fitness data.
• Personalized Insights: Providing sport-specific analytics for cycling, running, swimming, and triathlon activities.
• Service Improvement: Aggregated, anonymized data may be used to improve our analytics algorithms.

2.1 App Analytics and Diagnostics

In our mobile apps we use Google Firebase Analytics and Firebase Crashlytics to understand how the app is used and to detect and fix crashes and errors. This may include app usage events, device and app version information, and crash/diagnostic logs. This data is used solely to maintain and improve the app’s stability and performance. It is not used for advertising and is not sold. Firebase processes this data on our behalf as a service provider under Google’s terms.

3. Data from Connected Devices — Specific Provisions

In compliance with device manufacturer developer program requirements:

• Purpose Limitation: Data obtained through device APIs is used solely to provide training analytics services to you within the ZaarviQ™ platform.
• No Secondary Use: We do not use device data for purposes unrelated to the services you have requested.
• No Data Resale: Health and fitness data from any connected device is never sold, licensed, or shared with third parties for their independent use.
• User Control: You may disconnect your device account at any time through your ZaarviQ™ account settings or through your device provider's account permissions.
• Data Deletion: Upon disconnection or account deletion, all device-sourced data is permanently deleted from our servers within 30 days.

4. Data Storage and Security

• All data is stored on secure, encrypted servers.
• Data in transit is protected using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256 encryption.
• Access to user data is restricted to authorized personnel only, on a need-to-know basis.
• We conduct regular security reviews and follow industry best practices for data protection.

4.1 Data Retention

We retain your data for as long as your account is active. If you delete your account:

• All personal data and fitness data is permanently deleted within 30 days.
• Anonymized, aggregated analytics data (which cannot identify you and has been processed through irreversible anonymization) may be retained for service improvement purposes.

5. Data Sharing

We share your data only in the following limited circumstances:

• Service Providers: With trusted infrastructure providers (cloud hosting, database services) who process data on our behalf under strict contractual obligations.
• Legal Requirements: If required by law, regulation, or legal process.
• With Your Consent: If you explicitly choose to share data with a coach, team, or other users within the ZaarviQ™ platform.

6. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of all data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request permanent deletion of your account and all associated data.
• Portability: Request your data in a machine-readable format.
• Revoke Consent: Disconnect third-party integrations at any time.
• Restrict Processing: Request that we limit how we use your data.

To exercise any of these rights, contact us at support@zaarviq.ai.

7. Age Restriction & Children’s Privacy

As outlined in our Terms of Use, ZaarviQ™ is strictly intended for users aged 18 and older.

ZaarviQ™ is intended solely for users aged 18 and older. By creating an account, you affirm that you are at least 18 years of age. You may not create an account or use our services if you are under 18, even with parental or guardian consent. Any person who misrepresents their age to gain access to ZaarviQ™ does so in violation of our Terms of Use and assumes all liability arising from such use. If we discover or reasonably believe that an account holder is under 18, we will immediately terminate the account and permanently delete all associated data without prior notice or liability.

We do not knowingly collect, store, or process personal data from anyone under the age of 18. If any such data is discovered, it will be deleted immediately upon discovery without prior notice. Our platform collects and processes sensitive health and fitness data — including heart rate, power output, training load, physiological metrics, and GPS location data during athletic activities. This data is inherently sensitive and our data processing practices are designed for adult users only.

If you believe that a person under 18 has created an account or provided personal information to ZaarviQ™, please contact us immediately at support@zaarviq.ai. Upon verification, we will promptly delete the account and all associated data.

We do not and will not:

• Knowingly allow anyone under 18 to register for an account
• Knowingly collect personal or biometric data from anyone under 18
• Market our services to anyone under 18
• Share any data with third parties for the purpose of marketing to minors

8. International Data Transfers

Your data may be processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

9. GDPR Compliance (European Economic Area)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following provisions apply under the General Data Protection Regulation (GDPR):

9.1 Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you connect your device account and authorize data access, you provide explicit consent for us to process your fitness and health data.
• Contract Performance: Processing necessary to provide you with the ZaarviQ™ analytics service you have requested.
• Legitimate Interest: For service improvement using aggregated, anonymized data that does not identify you.

9.2 Your GDPR Rights

In addition to the rights listed in Section 6, EEA residents have the right to:

• Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing performed prior to withdrawal.
• Object to Processing: Object to processing based on legitimate interests.
• Lodge a Complaint: File a complaint with your local Data Protection Authority (DPA) if you believe your rights have been violated.
• Data Portability: Receive your data in a structured, commonly used, machine-readable format (e.g., JSON or CSV).

9.3 Data Transfers Outside the EEA

When we transfer personal data outside the EEA, we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.

9.4 Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at dpo@zaarviq.ai.

10. CCPA Compliance (California, USA)

If you are a California resident, the following provisions apply under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

10.1 Your CCPA Rights

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell your personal information. We never have and never will.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

10.2 Categories of Information Collected

10.3 How to Submit a Request

California residents can submit requests by emailing privacy@zaarviq.ai with the subject line “CCPA Request”. We will verify your identity and respond within 45 days.

11. DPDPA Compliance (India)

If you are located in India, the following provisions apply under the Digital Personal Data Protection Act, 2023 (DPDPA):

11.1 Consent and Purpose

• We obtain your free, specific, informed, and unambiguous consent before processing your personal data.
• Data is processed only for the lawful purposes stated in this Privacy Policy (training analytics and performance tracking).
• You have the right to withdraw consent at any time by disconnecting your device account or deleting your ZaarviQ™ account.

11.2 Your Rights Under DPDPA

• Right to Access: Obtain a summary of your personal data being processed and the processing activities.
• Right to Correction and Erasure: Request correction of inaccurate data or complete erasure of your personal data.
• Right to Grievance Redressal: You may raise a grievance with us. If unsatisfied, you may approach the Data Protection Board of India.
• Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.

11.3 Data Fiduciary Obligations

As a Data Fiduciary under DPDPA, QMC Training Intelligence:

• Implements reasonable security safeguards to protect personal data.
• Retains personal data only for the duration necessary for the stated purpose.
• Erases personal data upon withdrawal of consent or when the purpose has been fulfilled, unless retention is required by law.
• Will notify the Data Protection Board of India and affected users in the event of a personal data breach.

11.4 Grievance Officer

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines) Rules, 2021, and the DPDPA 2023, the Grievance Officer details are:

Name: Anand Verma

Designation: Grievance Officer

Email: grievance@zaarviq.ai

We will acknowledge your grievance within 24 hours and resolve it within 15 days from the date of receipt.

12. Cookies and Tracking Technologies

We use essential cookies for authentication and security (session tokens, CSRF protection). These are strictly necessary for the platform to function and do not require consent. We do not use tracking cookies or third-party advertising cookies.

Anonymous, session-scoped visitor analytics (such as page views and time on site) are collected using browser sessionStorage, which is automatically cleared when you close your browser tab. No persistent tracking identifiers are stored on your device.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last Updated” date above. Your continued use of our services after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

QMC Training Intelligence (OPC) Private Limited

Product: ZaarviQ™

Email: support@zaarviq.ai

Website: https://zaarviq.ai

Grievance Officer: grievance@zaarviq.ai (see Section 11.4 for full details)