The short version
We collect as little as possible: your email if you join the waitlist, or your gym name + phone number if you're a gym owner asking us to call you. We use it only to contact you about Reppit. We don't sell it. You can ask us to delete it anytime by writing to privacy@reppit.in.
The rest of this page is the longer version, written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Who runs Reppit
Reppit (“we”, “us”, “our”) is currently operated as a sole proprietorshipby Nachappa P R, based in Bengaluru, Karnataka, India. We're in the process of incorporating as a private limited company; when that's done, this policy will be updated to reflect the new legal entity and you'll be notified by email if you're on our waitlist.
For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described in this policy.
2. What we collect
At this stage, Reppit is a pre-launch waitlist page. We only collect the following:
If you join the waitlist
- Email address — so we can tell you when Reppit opens in your area.
- Your selected area (e.g. Rajajinagar) — so we can prioritise which neighbourhood to launch in first.
If you're a gym owner requesting a call
- Gym name
- Mobile number
- Area (e.g. Rajajinagar, Malleshwaram)
Automatically, from your browser
- Basic analytics — pages viewed, approximate location (city level), device type, referrer. We use this to understand which areas to launch in and which gym owners to contact.
- IP address — briefly logged by our hosting provider for security and anti-abuse reasons.
We do not collect payment details, government ID, precise location, health or fitness data, or any sensitive personal data on this page.
3. Why we collect it
- To tell you when we launch. If you join the waitlist, we'll send you one or two emails around launch — that's it.
- To call you back, if you're a gym owner who asked for a call.
- To decide which area to launch in first, based on waitlist density.
- To keep the site safe — logging IPs helps us block spam and abuse.
Under the DPDP Act, the legal basis for this processing is your consent, given when you submit a form on this website. You can withdraw it anytime (see “Your rights” below).
4. Who we share it with
We don't sell your data. We share it only with the small number of service providers we need to actually run the website:
- Our hosting provider (Vercel) — serves the website to your browser.
- Our database provider (Supabase) — stores the waitlist entries and owner leads.
- Our email provider — to send the occasional launch email.
- Our analytics provider (PostHog) — aggregated usage analytics.
Each of these is bound by their own privacy and security terms. We do not share your data with advertisers, data brokers, or any other third party.
5. Where it's stored
Your data is stored on servers operated by the providers listed above. Some of these providers host data outside India. Where that is the case, we rely on standard contractual protections offered by the provider. The DPDP Act currently permits cross-border transfers except to countries specifically restricted by the Government of India, and we comply with that framework.
We apply reasonable security safeguards — encrypted connections (HTTPS), access controls on our database, and the built-in security features of our providers. No system is perfectly secure; we commit to telling you promptly if a breach ever affects your data.
6. How long we keep it
- Waitlist emails: until we launch in your area + 90 days, or until you ask us to delete them — whichever comes first.
- Gym owner leads: up to 12 months, or until you ask us to delete them.
- Analytics / server logs: typically 30–90 days, depending on the provider's default retention.
7. Your rights
Under the DPDP Act, you have the right to:
- Access the personal data we hold about you.
- Correct anything that is inaccurate or incomplete.
- Eraseyour data — we'll remove it unless we're required by law to retain it.
- Withdraw consentat any time. Withdrawal won't affect processing we've already done lawfully.
- Nominate someone to exercise these rights on your behalf in the event of your death or incapacity.
- Complainto the Data Protection Board of India if you believe we've mishandled your data.
To exercise any of these rights, email privacy@reppit.in. We'll respond within 15 days.
8. Children
Reppit is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we've collected data from a minor, please tell us and we'll delete it. Under the DPDP Act, processing children's data requires verifiable parental consent — we avoid it entirely at this stage.
9. Cookies
This site currently uses your browser's local storageto temporarily hold your waitlist submission until we sync it to our backend. We don't use advertising cookies, third-party tracking cookies, or cross-site trackers.
You can clear local storage anytime from your browser settings. Doing so will remove any cached form data.
10. Changes to this policy
We'll update this policy as Reppit evolves — especially once we launch the full product with gym listings, bookings and reviews. The “Last updated” date at the top will always reflect the latest version. For material changes, we'll notify people on our waitlist by email.
11. Grievance officer
In line with the DPDP Act and the IT Rules, we've designated a Grievance Officer to address questions, concerns or complaints about how we handle your personal data.
If you're not satisfied with our response, you may escalate your complaint to the Data Protection Board of India, constituted under the DPDP Act.