Privacy policy.
The short version
Your training data is yours. We use it to run Nishaana and show you your progress. We do not sell your personal data, progress photos are private to your account, and usage analytics in the app only run if you say yes.
This policy covers the Nishaana app (app.nishaana.com and the mobile apps) and this website (nishaana.com). They work a little differently, so each is described below.
What we collect when you sign up
Your name, email address, phone number, date of birth and a password (stored only as a secure hash).
Your date of birth is used to confirm you are at least 13 and to calculate calorie targets. Your phone number is used only by the Nishaana team to contact you about your account. We do not use it for marketing texts.
When an account is created, the Nishaana team receives an internal email with the new member’s name, email and phone number.
What you log in the app
Training data (workouts, exercises, sets, programs), nutrition (meals, foods, water), body metrics (weight, measurements, sleep, steps), habits, goals, and anything you choose to upload, such as progress photos.
Body metrics you enter during onboarding (sex, height, weight, activity level, diet and any injuries you mark) are used to build your plan and targets.
If you use friends or squads, the people you connect with can see your display name, streak and shared squad progress. They cannot see your body metrics, meals or photos.
How we use it
To provide the product: log your training, calculate progress and personal records, suggest your next weights, and power features like your daily score.
To send transactional emails you need: email verification, password resets, and replies to messages you send us. We do not send marketing email.
To keep the service secure and reliable, for example rate-limiting sign-ups and logins.
Usage analytics in the app (opt-in)
The web app uses PostHog (hosted in the United States) to understand how people use Nishaana, but only if you tap “Allow” on the analytics prompt. Until you do, PostHog is not loaded at all.
With your permission we record which screens you visit, what you tap, key actions such as starting or finishing a workout, and screen recordings of your session. Everything you type (passwords, email, phone, weights, foods) is hidden in recordings, and so are names and email addresses shown on screen. We identify you to PostHog only by an internal account number, never by your email or phone.
You can change your choice any time in the app under Settings → Privacy, terms & copyright. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as a no and never ask.
Analytics and ads on this website
This marketing website (nishaana.com) uses Google Analytics to measure visits, Microsoft Clarity to understand how pages are used (including session recordings of this website), and Google AdSense to show ads. Fonts are loaded from Google Fonts. These services receive your IP address, browser details and the pages you view, and may set cookies.
You can block these with your browser’s privacy settings or a content blocker, and opt out of personalised Google ads at adssettings.google.com. None of these services run inside the Nishaana app.
Who processes your data
Cloudflare (hosting, database and content delivery for the app and website).
Resend (sending account emails and delivering contact-form messages to us).
PostHog, United States (app analytics and session recordings, only with your consent).
Google (Analytics, AdSense and Fonts, on this website only) and Microsoft (Clarity, on this website only).
We do not sell your personal data and never share identifiable health data with advertisers.
Cookies and local storage
The app stores a sign-in token and your analytics choice in your browser’s local storage. These are needed to keep you signed in and remember your preference. PostHog sets its own cookies or storage only after you allow analytics.
This website’s analytics and ad services may set cookies as described above.
Storage & security
Data is encrypted in transit and at rest. Progress photos are private to your account. We keep your data while your account is active.
Your rights and choices
Export: download everything you have logged from Settings → Account & data in the app.
Delete: permanently delete your account and all its data from the same screen. Deletion cannot be undone.
Analytics: turn app analytics on or off at any time in Settings → Privacy, terms & copyright.
Depending on where you live, you may have additional rights under laws such as GDPR or CCPA. Email us to exercise them.
Children
Nishaana is not for children under 13. We check your date of birth at sign-up and do not create accounts for anyone younger. If you believe a child under 13 has given us personal information, email us and we will delete it.
Changes to this policy
If we make meaningful changes, we will update the date at the top of this page and, where appropriate, tell you in the app.
Contact
Questions about privacy, or a request to access or delete your data? Email hello@nishaana.com.
This policy is a plain-English summary provided for transparency and should be reviewed by legal counsel before launch.