Privacy Policy | Khud Se Better

Note for Vinaydeep: fill in SITE.legal in src/consts.ts with your legal name and city before launch. Razorpay will not activate an account while these read TODO.

This policy explains what Khud Se Better collects when you use this website, why, and what control you have over it. It applies to khudsebetter.com and every page on it.

Who we are

This site is run by [your legal name], based in [your city], [your state], India. For any privacy question, email hello@khudsebetter.com.

What we collect

Information you give us

Your email address, if you join the newsletter or request the free guide. This is stored with Brevo, our email provider.
Your name, email and message, if you use the contact form. These are delivered to us through Web3Forms.
Your tracker data — the habits, points and weights you log — but only if you choose to sign in. Signed out, this never leaves your own browser.
Your details for coaching, if you purchase. Payment itself is handled entirely by Razorpay; we never see or store your card or UPI details.

Information collected automatically

Basic analytics through Google Analytics — pages visited, rough location by country, device type and how you arrived. This is aggregated and is not used to identify you personally.
Server logs kept by our host, Cloudflare, including IP address, for security and abuse prevention.

Your tracker data

The weight loss tracker is deliberately built to work without an account. Used signed out, every entry is stored in your own browser using local storage and is never transmitted to us or anyone else.

If you sign in, your entries are stored in our Firebase database so they survive across your devices. Security rules restrict that record so it can only be read or written by your own signed-in account. You can download everything as CSV or a backup file at any time from the tracker itself, and you can ask us to delete it entirely.

We do not sell this data, share it with advertisers, or use it for anything other than showing you your own history.

Why we process your information

To send the newsletter and free resources you asked for.
To reply to messages you send us.
To deliver and support coaching you have paid for.
To keep your tracker history available across your devices.
To understand which content is useful, so we can make more of it.
To meet legal and tax obligations.

Who we share it with

We do not sell your personal information. We share it only with the service providers that make the site work:

Brevo — email delivery and newsletter management
Web3Forms — contact form delivery
Google Firebase — accounts and tracker storage
Google Analytics — anonymous usage statistics
Cloudflare — hosting and content delivery
Razorpay — payment processing

Each of these processes data under its own privacy policy. Some are based outside India, which means your information may be processed abroad.

Cookies and similar technologies

We use a small number of cookies and local storage keys, specifically: your light or dark mode preference, your tracker entries, your sign-in session if you have an account, and Google Analytics measurement cookies.

You can clear or block these in your browser settings. Blocking them will not stop the site working, but it will clear any tracker history saved on that device if you are not signed in.

If advertising is introduced on this site in future, this policy will be updated before any advertising cookies are set.

How long we keep it

Newsletter subscriptions: until you unsubscribe.
Contact messages: up to two years.
Tracker data: until you delete it or ask us to.
Coaching and payment records: as long as Indian tax law requires.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you may ask us to show you the personal data we hold about you, correct anything inaccurate, delete it, or withdraw consent you previously gave. Every newsletter also carries a one-click unsubscribe link.

To exercise any of these, email hello@khudsebetter.com. We will respond within 30 days.

Security

The site is served over HTTPS, accounts are protected by Google's authentication infrastructure, and tracker records are restricted by database rules so one account cannot read another's. No system is perfectly secure, but we take this seriously and will tell you promptly if a breach ever affects your data.

Children

This site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their details, contact us and we will delete them.

Changes

If this policy changes we will update the date at the top of the page, and for significant changes we will say so in the newsletter.