Privacy Policy

Dizios is a product of Vikrama Innovations Private Limited, a company registered in India (GSTIN 06AAKCV5577A1Z7).

Registered address: 2nd Floor, No. 2921, Sector 46, near Amity Global School, Gurugram, Haryana 122001, India.

In this policy, "Dizios", "we" and "us" mean Vikrama Innovations Private Limited. "You" means anyone who uses Dizios: a studio owner or staff member, a trainer or teacher, a member, or a visitor browsing without an account.

For India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the data fiduciary for data we collect for our own purposes, such as your account, discovery and trainer profiles. When a studio adds its members and runs its business on Dizios, the studio decides why that member data is used, and we process it on the studio's behalf under our Data Processing Agreement (dizios.com/legal/dpa).

If you only browse (guest)

You can look at studios, trainer profiles and the exercise library without an account. We collect:

• basic device and app information, and approximate location from your IP address;
• your precise location only if you tap "use my location" and allow it. We use it to show what's near you. We don't store it against you as a guest;
• studios and trainers you save as favourites. These stay on your phone until you sign in.

If you have an account (everyone)

• Name, phone number, and email (optional);
• your login details. You sign in either with a one-time code (OTP), which we send to your phone by WhatsApp or SMS, or with your Google account. We store each code only in scrambled (hashed) form, and only for a few minutes until it is used or expires;
• your profile photo, if you add one;
• your app settings and notification preferences.

Members

• Membership details from your studio: plan, start and end dates, payments, attendance and check-ins.
• Fitness details you choose to give us: goals, experience level, equipment you have at home, body measurements, workouts you log, progress photos.
• Health details you choose to give us: injuries, pain, medical conditions, pregnancy, allergies, and similar. We treat these as sensitive. We ask for them only to keep your plan safe, and you can skip them.
• Ratings you give a studio or trainer, and any comment you add.
• Enquiries and trial bookings you send to a studio or trainer.

Trainers and teachers

• Professional profile: headline, bio, disciplines, languages, experience, the studios you work at, service modes (studio, home, online, park), price range, availability, and the area you serve (a centre point and radius).
• Certificates you upload, including the document and its registry or certificate number, so we can check them.
• Portfolio entries, such as before-and- after results. These are only shared when the client has consented.
• Work data: your clients, the plans you approve, sessions, the notes you write, the enquiries you receive and how quickly you respond, and ratings from your clients.
• Payout details you choose to add, such as a UPI ID. We store this privately and do not show it publicly.
• Optional self-declared gender. It is used only for the "women trainer" filter.

Studio owners and staff

• Your name and contact details, your studio's details (address, location, photos, timings, plans, GSTIN), and the members, staff and trainers you add.
• Billing details for your Dizios subscription. Card and bank details are handled by Razorpay. We never store them.

Collected automatically

• Device type, operating system, app version, IP address, crash reports and error logs;
• how features are used, such as screens opened and actions taken, to fix problems and improve Dizios.

We do not use your data for advertising, and we do not build profiles about you to sell.

Dizios uses AI to draft workout and yoga plans, summarise progress, and flag possible safety issues. To do this, we send the details needed for that task (for example your goal, level, equipment and any injuries) to our AI provider, OpenAI, through its business API. Under its business terms, OpenAI does not use that data to train its models. We do not send your name or phone number with these requests.

• A trainer approves AI plans before they reach you, wherever a trainer is assigned.
• AI can be wrong. Treat it as a helpful draft, not medical advice. Dizios is not a medical device and does not diagnose or treat any condition.
• We may use anonymised, aggregated data (which cannot identify you) to improve our features.

Your studio. If you are a member, your studio's owner and the staff they authorise can see your membership, attendance and payments. They can see your health details only if you have shared them with the studio. Studios never see other studios' members.

Your trainer. A trainer sees the members assigned to them, and only while that relationship is active. When it ends (for example, the trainer leaves the gym), their access to your data ends too. Independent trainers see only clients who have agreed to train with them.

The public, only for what is meant to be public.

• Studio pages: name, photos, address and map pin, timings, plans and facilities, and the average rating once there are at least 5 verified ratings.
• Published trainer profiles: only what the trainer chooses to publish, plus badges for checks we have actually done, and the average rating once there are at least 5 verified ratings.
• What is never public: a trainer's phone number, email, UPI ID, certificate documents and exact service location. People see only the area name and an approximate distance.
• Individual member ratings are never shown with your name to the public. Trainers see only averages, never who gave which rating. Studio owners can see individual studio ratings so they can respond.

Service providers. Each one uses data only on our instructions and only to provide its service to us:

When the law requires it. We share data if a valid legal order or a lawful request from an Indian authority requires it. We share the minimum needed.

To protect someone. If someone's life or safety is at risk, we may share relevant information with the people who can help.

If the business changes hands. If Dizios is merged or sold, your data moves with it under the same protections, and we will tell you first.

We store data on servers in India and with the providers listed above. Some providers may process data outside India. When that happens, we use providers with strong security, and we follow any restrictions the Government of India notifies under the DPDP Act.

• Active accounts: while your account is active.
• After you delete your account: we delete or anonymise your personal data within 90 days.
• Invoices and payment records: kept for 8 years, as Indian tax law requires.
• Data under a legal hold or dispute: kept until it is resolved.
• Studio records: if your studio stops using Dizios, we keep its records for 90 days so it can export them, then delete them.

• Data is encrypted in transit (HTTPS) and sensitive data is protected at rest.
• Access is role-based: owners, staff, trainers and members each see only what their role allows.
• Only a few team members can access personal data, only when needed, and their access is logged.
• We take regular backups and test them.
• If there is a breach: if a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires, explain what happened, and say what we are doing about it.

You can:

• access a summary of your personal data and how we use it;
• correct or update inaccurate data;
• delete your account and data. You can do this in the app (Profile > Delete account) or at admin.dizios.com/account-deletion. We confirm the request and complete it within 90 days, except for records the law makes us keep;
• withdraw consent at any time, for example by removing health details, turning off location, unpublishing a trainer profile, or muting trainer suggestions. Withdrawing doesn't affect what was done before;
• nominate someone to exercise your rights if you die or become unable to;
• complain to us (section 11) and, if you are not satisfied, to the Data Protection Board of India.

To use any of these rights, use the app settings or write to us (section 11). We may ask you to confirm your identity first.

If you are a studio's member, some requests about your membership records go through your studio. We'll help you with that.

Dizios is meant for people aged 18 and above.

• Under 18: a person under 18 may use Dizios only through a studio, with the verifiable consent of a parent or guardian.
• What we never do with children's data: track them, profile their behaviour, or show them targeted content.
• If we learn we collected data without consent: if we learn that a child under 18 has given us personal data without that consent, we will delete it.

If you have a question, request or complaint about your data, contact our Grievance Officer:

Saurabh Kumar, Director and Grievance Officer
Vikrama Innovations Private Limited
2nd Floor, No. 2921, Sector 46, near Amity Global School, Gurugram, Haryana 122001
Email: grievance@dizios.com

We acknowledge complaints within 48 hours and aim to resolve them within 15 days. For general questions, write to hello@dizios.com.

On our website and dashboard we use cookies and similar tools to keep you logged in, remember your settings, and understand how the site is used. We do not use advertising cookies. You can block cookies in your browser, but some parts of the dashboard may stop working.

We will update this policy as Dizios changes. If a change is significant, we will tell you in the app or by message before it takes effect. The date at the top shows the latest version.