Privacy Policy

Wellness by Rishman is the personal coaching practice of Hrishikesh Babade, who coaches under the name Rishman. The practice is operated by him individually and is based in India, serving clients in India and internationally.

Wellness by Rishman is a fitness and wellness coaching practice. It is not a medical service: nothing on the website or in the app diagnoses, treats, or claims to treat any condition, and nothing described here is medical advice or a medical record.

He is responsible for the personal data described here. Enquiries about this policy, or about the data held about you, go to hbabade@gmail.com.

Nothing here is collected from the public. Every category below except the coaching application exists only once someone has an account — a coaching client’s account, created by the coach, or the anonymous account the app creates when somebody taps Get Started. “Using the app without coaching”, below, describes the second kind.

Coaching application

Submitted from the website by anyone asking to be considered for coaching: name, email address, phone number, country, age range, coaching goals and the free-text answers on the form — what has been tried before, what stopped it, the biggest current challenge, training days per week, support preferences, timing and budget expectations, and preferred coaching format and duration.

The application form does not ask for diagnoses, medications, injuries, medical history or symptoms, applicants are asked not to supply them, and the database has no column for them.

Account

Coaching profile

Height, birth year, activity level and the estimate basis produce a planning estimate. They are not a measurement of your metabolism and are not treated as one.

Body and wellness records

Training

Nutrition

Messages

Messages between you and your coach, and when each was sent and read. Both the app and the website ask you to keep messages focused on coaching and not to include medical records or clinical information.

Health Connect, if you turn it on

Covered in full in section 4.

Using the app without coaching

The app can be used without applying for coaching. Tapping Get Started creates an anonymous account: an identifier held on your device, with no password and no sign-in. There is no way for anyone — including us — to work out who you are from the identifier itself.

The first questions the app asks are your first name and an email address. The name is how the app greets you. The address is kept with your answers as contact information — so we can reach you about your account if we ever need to — and for nothing else: it does not sign you in, it is not used to recover the account, and it is not shared with anyone or used for marketing. It is stored in one spelling (trimmed, lower-case) against your account.

The app also asks for a sex for calculations — male, female, or “prefer not to say”. It is asked only because some fitness formulas need a physiological basis, it is never inferred from your name or anything else, and choosing “prefer not to say” is a complete answer: any calculation that would need it is simply not made. No such calculation is in the app today.

Against the same identifier the app then stores what you tell it and what you do: your goal, experience level, where you train, your equipment, days per week and session length; optionally your year of birth, height and weight, from which it works out a body mass index (BMI) — a figure it shows you alongside a reference range and does not judge, colour or classify — and, if you choose one, an activity level, from which it shows an estimated resting and daily energy figure (BMR and TDEE) worked out with a standard formula. Those are estimates shown for information; the app sets no calorie target from them; which challenges and plans you start and which days of them you finish; the sets and reps you record; and how you say you feel — energy and soreness — on the days you answer.

If you use the habits on Today, the app stores each thing you log — a glass of water, a block of mindful minutes — with its date, and any daily target you set for yourself. The app suggests no target; a target exists only if you choose one.

If you have All Access and use the Nutrition planner, the app also stores what you log for breakfast, lunch, snack and dinner on a given day: which meals from its library, and which single foods at the quantity you entered — 150 g of chicken, one scoop of whey — together with each entry's name, serving and approximate calories and macronutrients as they stood when you logged it. The figures for a food are worked out from the library's reference values for that quantity; you cannot type a calorie in yourself. The totals the app shows for the day are simply those entries added up. That is a record of your own choices from a fixed library: it is not a food diary, it is not a target or a prescription, and it involves no medical or clinical judgement of any kind. It is visible only to you, and it is deleted with the rest of your rows.

Steps and sleep appear here too, either from Health Connect if you connect it or typed in by hand. Section 3 covers that in full and applies the same way whether or not you are a coaching client.

Because the account is anonymous and lives on the device, clearing the app's data or uninstalling it leaves that history unreachable. It is not transferred to a new install and cannot be recovered by us.

Purchases, if you buy All Access

The app offers one optional one-time purchase, All Access, which unlocks the premium plans, the premium challenges and the Nutrition library and planner. It is sold and charged by Google Play, not by us.

We never see your card, your billing address, or your Google account. Google handles the payment and tells us only that a purchase happened. What is stored against your account is the product identifier, the opaque purchase token Google issues, whether the entitlement is active or revoked, and the dates it was granted and — if it is ever refunded — revoked.

That token is checked with Google's own servers before anything is unlocked, and again when the app is reopened, which is how a purchase is restored after a reinstall and how a refund closes access again. It is not shared with anyone, is not used to identify you anywhere else, and is not written to any log.

Not collected. No analytics, no advertising identifiers, no tracking or advertising SDKs, no location, no contacts, no camera, no microphone, no photos or files from your device, and no payment card details. The app requests none of those permissions.

Health Connect is optional. The app works fully without it. If you never connect it, no data is read from it and nothing about it is stored.

If you do connect it, the app asks for exactly two permissions:

• Steps — your daily step count.
• Sleep — your sleep sessions, used for sleep duration.

Nothing else is requested. Not heart rate, not blood oxygen, not distance, not calories, not weight, not exercise sessions, not nutrition, and no medical records.

For a coaching client, steps and sleep duration appear on the Track screen and are visible to your coach as part of your coaching, so that your training and recovery can be discussed with something more than memory. For someone using the app without coaching they appear on Today and Progress and are visible only to you. That is their only use in either case.

• The app only ever reads. It never writes to Health Connect.
• The app does not read Health Connect in the background. Data is read while you are using the app, and it does not hold the background health permission.
• Health data is never sold, and it is never used for advertising or for any purpose other than your coaching.
• It is not shared with anyone other than your coach, if you have one. It is not sent to any third party.
• You can withdraw access at any time in Android Settings under Health Connect, or from the Health Connect screen inside the app. Withdrawing stops any further reading immediately.

Steps and sleep already read into your coaching record stay there until deleted as described in section 9.

Every category above exists to deliver coaching to you: to write your programme, to see whether it is working, to adjust it, and to talk to you about it. Nothing is collected for advertising, profiling, resale, or to train any model.

The coaching application exists only to decide whether the programme is a good fit. Submitting one puts you on no mailing list and implies no marketing consent.

For someone using the app without coaching, the same rule applies to a shorter list: your answers choose which plans and challenges are suggested, your progress is shown back to you, and steps, sleep, energy and soreness are used to describe your own day to you. None of it is seen by a coach unless you become a client, and none of it is used to advertise anything.

Purchase records exist to unlock what was paid for, to restore it on a new install, and to close it again after a refund. They are not used for anything else.

Data is held in a hosted PostgreSQL database operated by Supabase. Access is enforced in the database itself by row-level security: a signed-in client account can reach only its own records, and a coach account can reach only the clients assigned to it. That is a database rule rather than something the app chooses to honour, so it applies to every route into the data.

Traffic between your device and the database is encrypted in transit over HTTPS. Passwords are held only as hashes by the authentication provider.

Two, and no others:

• Supabase — database, authentication and file storage. Holds all of the data described above.
• Vercel — hosts the website and its server code. It processes requests in transit; it is not a second copy of your coaching record.

There is no analytics provider, no advertising network, no email marketing platform, no customer-support tool and no third-party nutrition or fitness API. Payments are not processed through this website at all.

Google Play sells and charges for the app's one optional purchase, and confirms to our server that a purchase is genuine. Google is the seller; we receive no payment details from them. Google's own handling of your payment is covered by Google's privacy policy, not this one.

Your coaching data is visible to you and to your assigned coach. It is not shared with any other client, any other coach, or any third party, and it is not sold — including your Health Connect data.

The only other disclosure would be one required by law, and you would be told about it unless the law forbids that.

Coaching records are kept for as long as you are a client, and after coaching ends they are kept so that your history remains available if you return. They are removed when you ask, as described below.

Coaching applications that do not become engagements are reviewed and deleted periodically, by hand rather than automatically.

No fixed retention period is stated here because none is enforced by the system today. Saying “12 months” while nothing deletes anything after 12 months would be inaccurate, and a privacy policy that describes a schedule that does not run is worse than one that describes what genuinely happens.

You can ask, at any time, to:

• see what is held about you;
• have something inaccurate corrected;
• have a copy of your data;
• have your account and coaching data deleted.

How to make a request. Email hbabade@gmail.com from the address on your account, or message your coach in the app. Requests are handled by Hrishikesh personally.

There is no self-service delete button. Deletion is carried out by your coach on request rather than by you from a screen in the app. When it is carried out it removes your account and everything attached to it — profile, engagement, programme, workout logs, nutrition selections, body measurements, recovery entries, check-ins, messages, sessions and any steps or sleep read from Health Connect. It is not reversible.

If you use the app without coaching. The email address on an anonymous account is contact information, not a login: it does not let you prove the account is yours from another device, and it does not let us restore it. The identifier exists only on your device. Uninstalling the app, or clearing its data, cuts the only link to it that exists; after that nobody can reach the history, us included.

Being straightforward about the limit of that: it makes the data unreachable rather than erased from the database. If you want it actually removed, the app can show you your account identifier — open Account from the round profile button at the top of any screen, then “Account identifier” — and emailing it to the address above is enough for us to delete the rows. A purchase record is kept after any such deletion only where Google requires it for refund and tax purposes.

The step-by-step procedure — where the identifier is shown in the app, what to write, what is removed and what remains — is on its own page: Delete your account.

Access is decided in the database by row-level security rather than by the application, and column-level privileges limit which fields any role may write. Coach access is scoped to assigned clients only; holding a coach account is not by itself enough to reach a client’s record. The mobile app ships with no privileged credentials.

No system is perfectly secure, and nothing here should be read as a guarantee.

Coaching is offered to adults. Accounts are not knowingly created for anyone under 18, and the app is not directed at children. If you believe a child has an account, write to the address above and it will be removed.

The practice is based in India and coaches clients internationally, so data may be processed outside your own country — including by the service providers named in section 6, whose infrastructure is operated internationally.

If this policy changes materially, the change is published on this page and takes effect when published. Clients are told about material changes through the app.

Hrishikesh Babade, Wellness by Rishman — hbabade@gmail.com.

See also the terms and the coaching disclaimer.