Privacy Policy — Traximus

Effective date: 2026-05-05
Last updated: 2026-07-20

1. Who we are

Traximus ("we", "us", "our") is a WhatsApp-based AI fitness companion service operated by Traximus, with correspondence addresses at 89 Vardhman Nagar, Bikaner 334001, Rajasthan, India, and 8-2B, Street 23A, Al Garhoud, Dubai, UAE.

Contact for privacy matters: contact@traximus.fit
Grievance Officer (per the SPDI Rules, 2011): Rahul Upadhyay, contact@traximus.fit — must respond within 30 days.

This Privacy Policy explains what personal data we collect when you use Traximus, why we collect it, how we use and protect it, and what rights you have under Indian law (the Digital Personal Data Protection Act, 2023 — "DPDP Act"; and the Information Technology Act, 2000 with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 — "SPDI Rules"; and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021).

2. What data we collect

2.1 Provided directly by you

When you onboard and chat with Traximus on WhatsApp, you may share:

• Identity: WhatsApp phone number (required), preferred name, age, gender.
• Health & fitness data:
  • Body metrics (height, weight).
  • Fitness goals (weight loss, muscle gain, endurance, etc.).
  • Workout history (exercises, sets, reps, weights, duration).
  • Nutrition data (meals, macros, calories, water intake, supplements).
  • Injuries and medical conditions you choose to share.
  • Photos of meals (when you choose to log via photo).
  • Voice notes (when you choose to log via voice).
• Lifestyle: city/location (free-text from you, not GPS), dietary type (vegetarian, vegan, eggetarian, non-vegetarian), dietary restrictions, allergies.
• Preferences: preferred persona ("commanding officer", "supportive coach", etc.), preferred language, reminder times.
• Free-text messages: anything else you type in WhatsApp chat with Traximus.

2.2 Generated automatically

• Message metadata: WhatsApp message IDs and timestamps (received from Meta Cloud API), required to deduplicate and order conversation.
• Service logs: request timestamps, error events, system-generated identifiers tied to your phone number.
• Usage analytics: message counts, feature usage frequency (workout starts, meals logged, etc.) — no third-party trackers.

2.3 What we do not collect

• We do not access your WhatsApp contacts, status, or chats with anyone other than Traximus.
• We do not access your device camera, microphone, GPS, or files directly — we only see what you choose to send via WhatsApp.
• We do not collect any payment information — Traximus is currently free during early access (see §6).
• We do not track you across other apps or websites.
• We do not use facial recognition or biometric identification on photos you send.

2.4 Categories under SPDI Rules

Under the SPDI Rules, the following categories of data we collect qualify as "sensitive personal data or information":

• Physical, physiological, and mental health condition (height, weight, body metrics).
• Medical records (any conditions or restrictions you share).

We process these only with your consent: sharing a health detail with Traximus is your consent to process it for coaching. You may decline to share any detail, and you can withdraw consent at any time (see §7.4).

3. Why we collect it (purposes of processing)

We do not sell your data, and we do not use it for advertising. Our AI service providers process your messages under their own data-protection terms (see §4 and §10).

4. Who we share it with

4.1 Sub-processors

We use the following third parties to operate Traximus:

Each sub-processor is bound by its own data-protection terms. Our AI service providers may also retain and use submitted content (including to improve their services) as described in those terms.

4.2 We do not share with

• Advertisers, marketers, data brokers.
• Insurance companies (your fitness data stays between you and Traximus).
• Other Traximus users — your data is per-user-isolated.
• Anyone for cross-border transfer except as listed in §4.1 (where the sub-processor is outside India).

4.3 Cross-border transfer

Some sub-processors above (our AI service providers and Meta) process data outside India, including in the United States and China. We rely on those companies' standard data-transfer terms. Under DPDP §16, the Government of India may restrict transfer to specific countries — if any such restriction takes effect, we will switch to compliant alternatives.

4.4 Legal requests

We may disclose your data if required by:

• A valid order from an Indian court or government authority.
• Compliance obligations under the IT Act 2000, DPDP Act 2023, or other Indian law.

We will not voluntarily disclose to foreign authorities without legal compulsion.

5. How long we keep it

Account deletion: when you request deletion (see §7.4), we delete all of the above within 30 days.

6. Payments

Traximus is currently free during early access. We collect no payment information of any kind.

• If we introduce paid plans in the future, we will update this policy and notify you before any payment data is ever collected.
• Any future payments would be handled by a PCI-DSS-compliant payment processor — we would never see or store your card number, CVV, or UPI PIN.

7. Your rights

Under the DPDP Act 2023, you have these rights. To exercise any of them, message us "privacy" on WhatsApp or email contact@traximus.fit.

7.1 Right to access (DPDP §11)

You can request a summary of the personal data we hold about you. We will provide it within 15 working days.

7.2 Right to correction and erasure (DPDP §12)

You can ask us to correct inaccurate data or erase data that is no longer needed. We will act within 15 working days unless retention is required by law.

7.3 Right to grievance redressal (DPDP §13)

If you have a complaint about how we handle your data:

• First contact our Grievance Officer (see §1) — must respond within 30 days.
• If unresolved, you may approach the Data Protection Board of India under DPDP §27.

7.4 Right to withdraw consent / delete account (DPDP §6(4))

You can withdraw consent at any time by:

• Messaging "delete my account" (or "delete my data") on WhatsApp, OR
• Emailing contact@traximus.fit, including your registered WhatsApp number (we will verify the request via that WhatsApp number before deleting).

We will:

• Acknowledge your request within 48 hours and stop proactive messages.
• Delete all your data within 30 days.
• Confirm deletion in writing.

7.5 Right to nominate (DPDP §14)

You can nominate another individual to exercise your rights in the event of your death or incapacity. Email us their name + relationship + contact.

7.6 Children

Traximus is not intended for users under 18. We do not knowingly collect data from children. If you are a parent/guardian and believe your child has used Traximus, contact contact@traximus.fit and we will delete the account.

8. How we protect your data

• In transit: all communication uses HTTPS (TLS 1.2+) and WhatsApp's end-to-end encryption between you and Meta's servers. Inside our infrastructure, services communicate only over the server's internal interface and are never exposed to the public network.
• At rest: data is stored on our AWS servers in Mumbai, India with strict access controls. Every user's data is isolated at the database level (enforced row-level security), so no user can ever see another user's data.
• Access control: direct production access is limited to the founding team. No third-party engineers, no support outsourcing.
• Authentication of WhatsApp webhook calls: incoming calls are verified using Meta's webhook verification so spoofed messages are rejected.
• Rate limiting: automated abuse-focused message rate limits.
• No payment data on our servers: Traximus is currently free — we hold no payment information.

If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required under DPDP §8(6), without undue delay.

9. Cookies and tracking

Traximus does not use cookies — interaction is via WhatsApp only. The marketing site at traximus.fit uses Plausible Analytics, a privacy-friendly, cookieless analytics tool — no cookies, no cross-site tracking, and no personal data is stored about visitors.

10. AI processing transparency

When you message Traximus, your message and recent conversation history are sent to third-party AI service providers for inference. Specifically:

• The model receives: your current message, your relevant chat history, your fitness profile, and our system instructions.
• The model generates: a reply, and may call internal tools (e.g. log_meal, start_workout).
• Voice notes you send are transcribed, and photos you send are analyzed, by an AI provider.
• Our AI providers may process your messages — including any health, diet, and weight details you share — on servers located outside India, including in the United States and China, under their own data-protection terms.
• We share only what is needed to generate your coaching replies, and we never sell your data.

If you prefer not to have your messages processed by AI, do not use Traximus — there is no way to use the service without AI processing.

11. Updates to this policy

We may update this policy as the service evolves or law changes. Material changes will be communicated to you via WhatsApp at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent change.

12. Governing law and disputes

This Privacy Policy is governed by the laws of India. Any dispute arising from it shall be subject to the exclusive jurisdiction of the courts at Bikaner, Rajasthan.

13. Contact

End of Privacy Policy.