Privacy Policy — ATNAC Fitness Studio

Last Updated: January 15, 2026

1. Introduction

Welcome to ATNAC Fitness Studio ("ATNAC", "we", "us", or "our"), operated by AIWENS Technologies. We provide a performance and health monitoring ecosystem through our web application, mobile-friendly dashboard, and WhatsApp-integrated logging system.

We act as a Data Fiduciary under the Digital Personal Data Protection Act (DPDPA) 2023 of India. This Privacy Policy explains how we collect, process, store, and protect your personal and health-related data using a privacy-first and minimal-retention approach.

2. Consent & Onboarding

We process personal data only with your free, specific, informed, and unambiguous consent.

  • Consent is obtained during your web registration before any WhatsApp logging or dashboard access begins.
  • You may withdraw consent at any time via your Profile settings or by contacting support.
  • Withdrawal of consent results in service termination and deletion of active health data.

3. Data We Collect

We collect only the minimum data required to provide performance monitoring and readiness insights:

  • Identity: Name, age, gender, and mobile number (linked to WhatsApp)
  • Physical markers: Weight, resting heart rate, blood pressure, body measurements
  • Daily habits: Sleep, hydration, nutrition quality
  • Training data: Duration, intensity, sport type, RPE (Rate of Perceived Exertion)
  • Optional health context: Chronic conditions (e.g., thyroid) or pregnancy, solely for reminder and monitoring purposes

4. Data Processing & AI Analysis

Data sent via WhatsApp (text or voice) is securely parsed and synchronized to your dashboard.

  • AI systems analyze trends and generate readiness scores and summaries
  • All insights are based on self-reported data
  • ATNAC does not provide medical diagnosis, prescriptions, or treatment advice

5. 30-Day Minimal Footprint Data Retention

To protect user privacy, ATNAC follows a strict rolling retention model:

  • Daily logs and WhatsApp message data are permanently deleted after 30 days
  • Once data exceeds 31 days, it is removed from active systems and dashboards
  • Users are notified via WhatsApp 48 hours prior to scheduled deletion

Exceptions: Consent records and access logs are retained for one (1) year as required under Indian law for compliance and audit purposes.

6. Data Storage & Localization

All personal data is stored within India on secure cloud infrastructure located in the AWS Mumbai (ap-south-1) region.

  • AES-256 encryption at rest
  • TLS 1.3 encryption in transit
  • Restricted internal access controls

7. Disclosure to Coaches or Trainers

Your data is shared with a coach or trainer only if you explicitly grant access within your profile.

  • Access can be revoked instantly by the user
  • Coaches are prohibited from downloading or exporting health data
  • Data remains accessible only within the ATNAC platform

8. Your Rights as a Data Principal

Under the DPDPA, you have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request erasure of your profile and health records
  • Nominate another person to manage your data if needed

9. Grievance Redressal

For any concerns regarding data protection or privacy, please contact:

Grievance Officer: ATNAC Privacy Team
Email: atnacfitness@gmail.com

We will acknowledge grievances within 24 hours and aim to resolve them within 30 days.