Privacy Policy

• You give us: name, mobile number, email address, city/locality you set, profile photo (optional), the memberships you buy, attendance you log, reviews and photos you post, and support messages you send.
• Collected with consent: precise location while you use the “near you” feature (browser/app geolocation). We do not track you in the background — location is used at the moment you ask for nearby gyms.
• Automatic: device and browser type, app version, pages and gyms viewed, referral source, coarse IP-derived city, and crash logs. This is used for security, debugging and aggregate analytics.
• From payment partners: payment status, transaction reference and masked instrument details from Razorpay. Card numbers, CVV and UPI PINs never touch our servers.
• From gyms: your name and phone number are shared with the gym you joined so they can verify and admit you. That is the whole point of the booking.

• To show gyms near you, and to book, confirm and manage your memberships.
• To let gyms verify you at the door (name + phone + active membership).
• To process payments, refunds and invoices, and to keep financial records the law requires us to keep.
• To send service messages about your bookings — OTPs, payment receipts, batch changes, expiry reminders. These are transactional, not marketing.
• To moderate reviews, detect fraud (duplicate accounts, stolen cards, refund abuse) and keep the platform safe.
• With your separate consent, to send product updates and offers. Every such message has an unsubscribe option that works.

We do not sell your personal data, and we do not use it for advertising targeting of third parties.

• The gym you join — name, phone, plan and attendance status needed to deliver the service.
• Payment processors and banks (Razorpay and its network) for transactions and settlements.
• Cloud and infrastructure providers hosting our database and files in India/APAC regions under data-processing agreements.
• Google Maps Platform to render maps and compute distances when you use map/near-you features.
• Law enforcement and courts, when legally compelled, with a written request reviewed by us.

We use a small number of strictly-necessary cookies and browser storage: your login session token, your chosen location and filters for this visit, and basic analytics identifiers. We do not run third-party ad pixels. You can clear site data in your browser at any time; you will simply need to sign in again.

• Account and booking data: while your account is active, and for 8 years after for invoices and financial records required under Indian law.
• Location: used in the moment; coarse city may be stored to answer “near you” faster. Clear it any time from your profile.
• Reviews: kept while the gym listing exists, because they are part of the public record of that gym. You may ask us to update or remove yours.
• When you delete your account, personal data is anonymised or deleted except what statutes (tax, IT Act) force us to retain.

HTTPS everywhere, hashed credentials, OTP-verified sessions, least-privilege access for staff, encrypted database backups, and audit logs for admin actions. No method of transmission is 100% secure — if you have a specific concern, write to support@biceapp.in before sharing anything sensitive.

• Access: get a copy of the personal data we hold about you.
• Correction and erasure: fix wrong details, or ask us to delete your account and data.
• Withdraw consent: stop marketing messages, or revoke location access — the app keeps working with manual city search.
• Grievance: complain to our grievance officer (see below); they are obligated to acknowledge within 48 hours and resolve within 15 days under the SPDI Rules.
• Nominate: under the DPDP Act you may nominate another person to exercise your rights in case of death or incapacity.

Requests: email support@biceapp.in from your registered address with “Privacy” in the subject. We verify identity first, then answer within 30 days. Free of charge for the first request in a 12-month period.

biceapp.in is not for children under 18, and we do not knowingly collect their data. If a child’s account was created, a parent or guardian can write to support@biceapp.in and we will delete it.

Personal data is stored and processed in India. If a future feature involves transferring data outside India, it will happen only with safeguards consistent with Indian law.

Material changes will be announced in-app or by email 7 days before taking effect, and the “last updated” date above will change.

Grievance Officer, biceapp.in — grievance@biceapp.in. Acknowledged within 48 hours and resolved within 15 days, as required by the SPDI Rules. biceapp.in is a product of Elexiss Corporation, a technology company in India, and operates across India. You can also raise it through the Contact page.