← MyFitFolio

Privacy Policy

Effective from 2026-11-03.

Who holds your data

Automemory Private Limited, trading as MyFitFolio, at First Floor, Olympia Tech Park, Guindy, Chennai, Tamil Nadu 600032.

We decide what personal data this service collects and why. When the relevant provisions of India's Digital Personal Data Protection Act, 2023 commence, that will make us the Data Fiduciary for it. We are describing the role we already play, not a status we already hold — see the next section.

For anything on this page, write to support@myfitfolio.com.

This notice is for the service at https://myfitfolio.com, and that is where it is published. Withdrawing your consent, using your rights and complaining are each set out below, with the address that handles it.

About this notice, and when it starts to bind

This notice is written to the shape the DPDP Rules, 2025 set out for a Data Fiduciary's notice.

Those provisions have not yet commenced. The Rules were notified in November 2025 with a phased schedule: the provisions about notice, consent, security, breach reporting, data-principal rights and grievance redressal all commence together on 13 May 2027. What is in force before then concerns the Data Protection Board itself, not the duties described here.

We have written this notice now anyway, and we mean it now. But we are not telling you that a legal duty applies to us today when it does not, and we are not claiming any status under that Act that has not yet come into existence.

The other rules named further down this page — the ones about e-commerce disclosures and grievance handling — are already in force, and the response times we print are the tightest of those that are.

What we collect, itemised

We collect:

That is the list, and it includes the counts and logs behind the analytics section below. If it needs to grow, this page changes first, and its effective date changes with it.

What we use it for

We use what we collect:

We do not sell it. We do not rent it. We do not hand it to anyone for advertising, and we do not use it to build a profile of you for anyone else's purposes.

If that ever changes, this page changes first and its effective date moves with it. You will not find out from a footnote somewhere else.

The records you hold about other people

This service is built to hold records about the people you serve. Those records are yours. In respect of them, you are the one who decides — and once the DPDP Act commences, you will be the Data Fiduciary for them. We act only on your instructions either way.

Concretely, that means:

If the records you hold are subject to a professional duty of confidence, that duty is yours and we are built not to get in its way.

Who else touches the data

These are the other organisations that process data for us in order to run the service:

Each of them is bound to use the data only to provide their part of the service. If this list changes, this page changes, and the effective date at the top moves with it — so you can always tell whether the list you read last month is the list that applies today.

How long we keep it

We keep your personal data for as long as your account exists, and until you delete it.

Two things outlive that, and we would rather you heard it here. Invoices and payment records, which tax law requires us to keep whether or not you ask us to delete them — those we keep and nothing else. And backups, which roll off on their own schedule: within 90 days of a deletion, the copy is gone from those too.

Deleting your data

Write to support@myfitfolio.com and ask. That mailbox is monitored, and it is the route — there is no form to hunt for, and you do not have to call anyone.

Tell us the account the request is about. We may ask you to confirm you control it, because deleting on the word of someone who does not would be its own kind of failure.

We delete live data within 30 days of confirming the request, and backups within 90 days. We confirm when both are done, and say what was kept and why, if anything was.

If you owe us money, that does not stop a deletion and we will not hold your data to collect it. We keep the invoice, because the law says we must, and nothing else.

Your rights

You can ask us to:

Ask at support@myfitfolio.com — except erasure, which goes to support@myfitfolio.com, the one route named in Deleting your data above. If you write to the wrong address we forward it, and the clock starts the day you wrote, not the day it arrived in the right inbox.

We do not charge for any of this.

Withdrawing your consent

Where we rely on your consent, you can withdraw it. Write to support@myfitfolio.com, or use the setting in your account where one exists.

Withdrawing consent is as easy as giving it was. It does not undo what was lawfully done before you withdrew, and it may mean part of the service stops working — we will tell you which part before it does.

If you have a complaint

Our grievance officer is Automemory Private Limited.

We acknowledge within 48 hours and resolve within 30 days.

That is what Consumer Protection (E-Commerce) Rules 2020 requires of us, and it is the tightest of the windows we have checked. We are not claiming to have surveyed every rule that could ever apply — if we learn that a shorter window binds us, this page changes and the number here comes down.

Going above us

For anything about money or the service itself, you do not have to wait for anything: you can take a complaint to the consumer commission for your district, including online through the e-Daakhil portal, or call the National Consumer Helpline on 1915. Those routes are open today.

For a complaint about your personal data specifically, the Data Protection Board of India is the route once the relevant provisions commence and the Board is able to receive complaints. It cannot take one yet.

We would rather you did not need either. Write to our grievance officer first, and give us the chance to fix it.

Reading this in another language

This notice is published in English.

When section 5(3) of the Digital Personal Data Protection Act, 2023 commences, it will give you the option of receiving this notice in any language listed in the Eighth Schedule to the Constitution. That section has not commenced yet. We are offering that option now anyway, voluntarily and ahead of it becoming a duty — write to support@myfitfolio.com naming the language, and we will provide it.

We have not pre-translated it into all twenty-two. We would rather send you an accurate translation you asked for than publish twenty-two we have not checked.

Analytics

We do not run advertising trackers on this site, and we do not build a profile of you across other people's sites.

Keeping it safe

Access is limited to the people who need it. Data is encrypted in transit. Access to production systems is logged.

We cannot promise that any system is fully secure, and we would not trust a page that told you otherwise. What we can tell you is what we do, and what we will do if it goes wrong: if a breach affects your personal data, we will tell you what happened, what was affected, and what you can do — and we will tell you within 72 hours of finding out, even if we do not yet know the full extent, and we will keep telling you as we learn more. Not once it is tidy.

Changes to this notice

When this notice changes, the effective date at the top changes with it, and the earlier version is kept.

If you want to know what this page said on a particular date, ask at support@myfitfolio.com. Every published version of this page has a receipt behind it, so that question has an exact answer rather than a recollection.