Privacy Policy

Feel Alive ("we", "us") decides why and how your personal data is used on feelalive.in and at our events. We handle personal data in line with India's Digital Personal Data Protection Act, 2023 and its Rules.

Depending on what you do, we collect:

• Event registration: your name, phone number, email, skill level, the time you accepted the safety waiver, and a screenshot of your payment for paid events. The screenshot can show payment details such as your name or UPI ID, so please crop out anything you are not comfortable sharing.
• Group registration: the same details (name, phone, email, skill level, waiver) for each extra person you register, which you give on their behalf.
• Waitlist: your name, phone number and email.
• WhatsApp community signup: your email and phone number.
• Request an event: your name, phone, email, the area you want a session in and, if your device location was available, its coordinates.
• Rewards account: your email and sign-in details from Google or our emailed link, plus anything you add to your profile: name, phone number, date of birth, Instagram handle, profile photo and daily step goal.
• Buddy referrals: who you say you are bringing or coming with, matched only with another Rewards member who confirms.
• Attendance: the sessions you attend and the amount you paid, kept by our team so we can run events and Rewards.
• Steps (optional, health data): if you connect Google Health, your daily step totals for the current month and an encrypted access token. We read nothing else from Google Health.
• Location: if you allow your browser to share your location, we use it to show distance to venues and to suggest a zone of Bengaluru. It is stored in your own browser for up to a week. It is only sent to us when you submit something that uses it, such as the "Bring Feel Alive to your area" button or the request-an-event form.
• Device and approximate city: when you submit a registration or WhatsApp signup form we record your device type and operating system, and your approximate city based on your IP address.
• Security logs: your IP address and, for blocked or rate-limited attempts, the email you typed, so we can prevent abuse.

We do not use advertising cookies, analytics trackers, ad pixels or session replay on this website. The only cookies are the ones needed to keep you signed in.

• to register you for events, confirm your payment and spot, and contact you about them
• to run our WhatsApp community and invite you to it
• to keep attendance records and work out costs and demand for sessions
• to run your Rewards account, award points and free sessions, and show the steps leaderboard
• to decide where to hold new events, using the requests and location clicks you send us
• to keep the service safe, including rate limiting and fraud checks
• to meet legal obligations

We do not sell your data and we do not share it with advertisers or marketers.

We rely on your consent, which you give when you submit a form or connect a service, and on legitimate uses the law permits, such as keeping records and preventing abuse. You can withdraw consent at any time (see section 7).

We use a few service providers who process data for us. Each only receives what it needs.

• Supabase: database, file storage and sign-in. Our project is hosted in Tokyo, Japan.
• Vercel: website hosting. Our servers run in Tokyo, Japan, and Vercel keeps standard request logs.
• Google: Sign in with Google, Google Maps on the Locations page, and, only if you connect it, the Google Health API. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your step data only to show your progress and the leaderboard, and never for advertising.
• ipapi.co: receives your IP address from our server when you submit a registration or signup form, and returns your approximate city.
• WhatsApp: if you join our community or group, WhatsApp's own terms and privacy policy apply to what you share there.
• Resend: sends sign-in emails for our team. It does not receive member data.

Because some of these providers are outside India, your data is transferred and stored abroad. Event hosts and our team see registration and attendance details for the events they run. We may also disclose data when the law or a court requires it.

Feel Alive's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google Health data only to show your daily step totals to you and on the Feel Alive steps leaderboard.
• On the leaderboard, other members see only your display name and your step totals. We never show your email or any other Google Health data.
• We do not sell Google user data, and we do not use or transfer it for advertising, including personalised or retargeted ads.
• We do not transfer Google user data to anyone except to run this feature (our hosting and database providers above), to comply with the law, or as part of a merger or sale with notice to you.
• Our team does not read your Google Health data except where needed for security, to investigate abuse, or to comply with the law.
• We do not use Google user data to train AI or machine learning models.

You can disconnect Google Health at any time on your Rewards profile page, which deletes your stored steps and access token. You can also revoke access in your Google Account settings.

If you register a group, you are giving us other people's details. Please make sure they are happy for you to do this and have seen this policy. If you believe someone gave us your details without asking you, contact us and we will remove them.

• Registration, attendance and payment records: kept while we need them to run events, handle refunds and keep accounts, then deleted or anonymised when you ask or when they are no longer needed.
• Rewards account and profile: kept until you ask us to delete your account.
• Steps data: deleted when you disconnect Google Health, and we refresh it monthly. Your daily step goal is kept with your account.
• Security logs: kept for at least one year, as the Rules require, then deleted.
• Payment screenshots: kept while needed to check the payment and settle any refund query.

We may keep a backup copy of core records for safety. If you ask us to delete your data we will also remove you from backups when they are next refreshed.

You can ask us to:

• tell you what personal data we hold about you and how it is used
• correct or complete data that is wrong
• erase your data, unless we must keep it by law
• withdraw your consent, for example by disconnecting Google Health or asking us to delete your account
• name another person to exercise your rights if you die or cannot act yourself

Email us at the address in section 8 from the email or phone number you registered with, so we can confirm it is you. We will aim to acknowledge your request within 3 working days and resolve it within 7 working days. Withdrawing consent does not affect what we did with your data before then.

Grievance Officer: Keerthan K, Feel Alive

Email: keerthan@ascnd.build

If you are not happy with our response, you can complain to the Data Protection Board of India once it is operating for complaints.

Our database is access-controlled, payment screenshots are stored privately, Google Health tokens are encrypted, and staff sign-in needs a second step. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your data we will tell you and the Data Protection Board as the law requires.

Feel Alive events and Rewards are for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think we have, tell us and we will delete it.

We may update this policy as the service changes, for example when we add new features. The date at the top shows the latest version. We will make significant changes clear on the website.