Privacy policy
Written to comply with India's Digital Personal Data Protection Act, 2023.
- Data fiduciary
- Clorse Private Limited
- Meal videos deleted
- 30 days after completion
- Ad measurement
- Only with your permission
01What we collect
StrictWolf is operated by Clorse Private Limited ("we", "us"). This policy covers the personal data we process, why we process it, and the rights you have over it.
- Account data: your name, phone number, and optional email when you sign in.
- Profile and body measurements: weight, height, age, and goal, used to calibrate your meal plan.
- Transformation questionnaire: with your consent, your gender, age, weight, daily routine, fitness goal, previous attempts, and any health conditions you choose to share. We save your progress and the contact details you provide so the StrictWolf team can discuss the program with you.
- Live meal videos: the short videos you record in the app during the program, used to verify your meals against your plan.
- Payment and refund data: handled by our payment processor; we collect the payment and identity details required to process your refunds.
- Optional ad measurement: if you allow it, campaign and click identifiers, browser identifiers, visits to selected public pages, sign-up, checkout and purchase events, and technical information such as browser type and IP address. This helps us connect an ad visit to a later visit or purchase.
02How we use it
We process your data to operate the service: responding to your program enquiry, calibrating your plan, verifying meals against it, and processing your payments and refunds. With your separate permission, we also measure how our advertising performs. We do not sell your data or use it to train third-party models. Your meal videos, body measurements, health details and questionnaire answers are never sent to advertising platforms.
03Analytics and processors
We use privacy-conscious tools to keep the service reliable and understand how it is used, all as data processors on our behalf: PostHog (EU-hosted product analytics and website session replays, linked to a pseudonymous identifier), Smartlook (aggregate session insights to fix usability issues), and Sentry (error monitoring). These are used only to operate and improve the service, never for advertising. You can request deletion of your analytics record along with your account (see below).
PostHog session replays show interactions such as clicks, scrolling, and navigation on our public website. Form inputs and text in forms, purchase sheets, and personal confirmations are masked before collection. Private account pages and embedded payment content are excluded. Replays are retained for up to 30 days.
The transformation questionnaire is excluded from session recordings. Your questionnaire answers are not sent to product analytics. Choosing “Message on WhatsApp” opens WhatsApp with a general enquiry; your health answers are not included in that message.
Meta advertising measurement is separate and optional. If you allow it, we use Meta Pixel on selected public pages and Meta Conversions API for sign-up, checkout and confirmed purchase events. Meta may receive browser and ad-click identifiers, basic technical information, event times and transaction values. Where available, email, phone and account identifiers are hashed before being sent for matching; hashing does not make them anonymous, and Meta can match them to an account. Meta processes the information under its Privacy Policy. We disable automatic form matching and automatic event collection.
Our ad-attribution records expire after 180 days without activity. Raw IP address and browser-agent data are removed after seven days without activity. Browser ad identifiers expire after up to 90 days, and we ask for your ad-measurement choice again after 180 days. Declining does not affect the app, payment or program.
04Meal videos and retention
Meal videos are stored encrypted for the duration of your program and deleted within 30 days of completion. Account and transaction records are kept only as long as required for legal, tax, and accounting obligations.
05Security
Data is stored encrypted, with access restricted to the systems and personnel that need it to operate the service.
06Your rights
You may request access to, correction of, or erasure of your personal data, and you may withdraw consent or raise a grievance. You can delete your account and your data from within the app, or ask us to do it from strictwolf.com/account/delete. To exercise any other right, write to contact@strictwolf.com.
07Consent
We ask for clear, itemised, plain-language consent at onboarding. Nothing is pre-ticked, and you can withdraw consent at any time.
Use “Ad measurement preferences” in the website footer to allow or turn off optional advertising measurement. Turning it off stops new sharing from this browser, clears its advertising identifiers, and requests deletion of its attribution history and unsent events from our system. Information already sent to Meta is governed by Meta’s retention and privacy controls. Your account and payment records remain subject to the retention rules above.
08Grievance officer
Grievance Officer: Shivam Goraksha, contact@strictwolf.com. We acknowledge complaints within 48 hours and aim to resolve them within one month.
09Changes
We may update this policy; material changes move the date at the top of this document.