Privacy Policy

Barood ("we", "us", or "our") is a fitness and wellness platform available on iOS and Android. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the choices you have.

By creating an account or using Barood, you agree to the practices described here. If you disagree, please do not use the app.

1. Information We Collect

Account & Identity

• Email address (for email/password sign-in)
• Name, username, and profile photo (optional, set by you)
• Sign-in provider identifier when you use Google or Apple sign-in
• Phone number (only if you choose to add it)

Health & Fitness Data

• Body weight, height, and body-composition goals you enter
• Calorie intake logs and food diary entries you create
• Workout and exercise session records
• Daily step count and running route data (when you grant motion/location permission)
• Streak history, XP points, and level progress

AI Calorie Camera

When you request food analysis, a compressed copy of your selected photo is uploaded to temporary Firebase Storage and sent through our server to OpenAI to identify foods and estimate nutrition. The app and server attempt to delete the temporary upload after processing; interrupted requests or failed cleanup can leave a copy pending removal. Food-analysis results, saved meal entries and service usage records may be retained separately. OpenAI applies its own API data controls and retention policies; disabling response storage does not guarantee that every provider-side copy is immediately erased. See OpenAI API data controls.

Device & Technical Data

• Device model, operating system version, and language settings
• App version, crash logs, and error reports
• IP address (used for fraud prevention and region detection)
• Firebase installation ID (anonymous session identifier)

Payment Data

Premium subscriptions are processed by the Apple App Store (iOS) or Google Play Store (Android). We do not receive or store your card details. For bKash payments, we collect only your transaction reference number submitted via our WhatsApp support flow. We never see your bKash PIN or wallet credentials.

Content You Create

• Challenge participation records and leaderboard rankings
• Workout program progress and session notes
• Text you submit through in-app feedback or support

2. How We Use Your Data

• Deliver the service: Power your dashboard, calorie tracking, workout plans, challenges, and leaderboards.
• Personalise your experience: Recommend programs, trainers, and articles based on your goals and activity.
• Improve Barood: Analyse aggregated, anonymised usage patterns to make the app faster and more useful.
• Communicate with you: Send transactional notifications such as subscription confirmations, password resets, and streak reminders. We do not send unsolicited marketing emails.
• Safety and integrity: Detect abuse, prevent fraud, and enforce our Terms of Service.
• Legal compliance: Respond to valid legal requests from authorities where required.

We do not sell your personal data. We do not use your health data to serve advertisements.

3. Data Sharing

Service Providers

We share data with trusted third-party processors only as necessary to operate Barood:

• Google Firebase — authentication, Firestore database, cloud storage, and crash reporting
• OpenAI - food-photo and text analysis, nutrition estimates and requested food insights
• Apple & Google — in-app purchase verification
• Firebase Cloud Messaging and Apple Push Notification service - remote notification delivery; some reminders are scheduled locally on your device

Each provider is bound contractually to process your data only for the purpose we specify and to maintain appropriate security standards.

Pro Trainers

If you enrol in a trainer-led program, that trainer can see your program progress (completed sessions, session dates). They cannot see your calorie logs, body weight, or other health data unless you explicitly share it.

Public Profile

Your display name, username, and profile photo are visible to other Barood users on leaderboards and challenge pages. You can restrict your profile visibility in Settings.

Corporate Workspaces

If your employer has set up a Barood corporate workspace, your workspace administrator can see aggregated participation metrics (e.g., how many employees completed a challenge). They cannot see your individual health data or calorie logs.

Legal Disclosures

We may disclose data if required by law, court order, or governmental authority, or if we believe disclosure is necessary to prevent harm.

4. Data Retention

• Account data is retained for as long as your account is active.
• After account deletion, personal data is removed within 30 days, except where retention is legally required.
• Temporary food-photo uploads are targeted for removal after processing. Cleanup failures, provider retention and backup copies have separate retention boundaries; immediate removal of every copy is not guaranteed.
• Aggregated, anonymised analytics data that cannot identify you may be retained indefinitely.

5. Your Rights & Choices

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate data directly in the app under Profile > Edit.
• Deletion: Delete your account via Settings > Account > Delete Account. Personal data is removed within 30 days.
• Portability: Request an export of your data in a machine-readable format.
• Withdraw consent: Revoke health or location permissions at any time in your device settings. Some features may be limited as a result.

To exercise any of these rights, email baroodfitness@gmail.com. We will respond within 30 days.

6. Children's Privacy

Barood is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has created an account, contact us and we will delete it promptly.

7. Security

We use industry-standard safeguards including TLS encryption in transit, Firebase Security Rules for data access control, and limited internal access on a need-to-know basis. No system is perfectly secure; please use a strong password and enable device lock.

8. International Data Transfers

Barood is operated from Bangladesh. Your data may be processed on Google Cloud infrastructure outside Bangladesh, including Singapore and the United States. Where required, we rely on appropriate transfer mechanisms such as standard contractual clauses.

9. Policy Changes

We may update this policy as Barood evolves. When we make material changes, we will notify you via an in-app notification and update the "Last updated" date at the top of this page. Continued use of Barood after the effective date constitutes acceptance.

10. Contact Us

Barood
Dhaka, Bangladesh
baroodfitness@gmail.com