Who we are
Acmova Private Limited ("Acmova", "we", "us") operates the website acmova.com, the Acmova app, the Acmova for Business console and the Acmova API (together, the "Services"). We are a company incorporated in India (CIN U56102TN2026PTC197533) with our registered office at L-Block, Old No. 8 (New), 26th Street, Anna Nagar East, Chennai 600102, Tamil Nadu, India.
For the personal data described in this policy, Acmova is the "data fiduciary" under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the "body corporate" under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
What this policy covers
This policy applies when you visit our website, write to us, use the Acmova app, connect a wearable device, or use our business or API products. Where a business customer (for example a gym, coach or clinic) gives you access to Acmova, that business may also process your data under its own policy.
Personal data we collect
Information you give us: name, email address, phone number, company name and the content of messages you send us; account details when you sign up; profile details such as age, sex, height, weight, activity level, dietary preferences and goals.
Health and wellness data: if you connect a wearable or health service (currently WHOOP, with others to follow), we receive the data you authorise, which may include recovery, strain, sleep stages and duration, heart rate variability, resting heart rate, respiratory rate, skin temperature, blood oxygen and workout data. If you add them, we may also process data such as body weight and composition, glucose readings, hydration and menstrual cycle phase.
Food and activity logs: meals and drinks you log, photos of meals you choose to upload for analysis, and the nutrition values we estimate from them.
Order information: where you order through a partner merchant, the items ordered, delivery details and transaction references. Card and bank details are handled by our payment partners and are not stored by Acmova.
Technical data: device and browser type, IP address, app version and basic logs needed to run, secure and fix the Services.
Health and wellness data is treated as sensitive personal data under the SPDI Rules. We collect it only with your explicit consent and use it only for the purposes below.
How we use your data
To calculate your daily targets for nutrition, hydration and recovery, show your remaining gap and suggest next steps.
To analyse meal photos you upload and estimate their nutrition.
To show you relevant options from partner merchants, and to pass your order to the merchant you choose.
To provide business customers and API partners with the features they have contracted for, where you have joined their programme.
To reply to your enquiries, provide support and send service messages.
To keep the Services secure, prevent fraud and meet legal obligations.
To improve our models and features using aggregated or de-identified data that does not identify you.
We do not sell your personal data. We do not use your health data for advertising.
Consent and withdrawal
We process your personal data on the basis of your consent, given when you create an account, connect a wearable or upload data, and for certain legitimate uses permitted by law (such as complying with legal obligations).
You can withdraw consent at any time, for example by disconnecting a wearable in the app or by writing to us. Withdrawal stops further processing but does not affect processing already carried out. Some features will not work without the related data.
Who we share data with
Service providers (data processors) who host, operate or support the Services on our instructions, including cloud hosting and database providers, website hosting and content delivery, email providers, and artificial intelligence providers that analyse meal photos. They may only use your data to provide services to us.
Wearable and health platforms such as WHOOP, only to receive the data you have authorised.
Partner merchants you choose to order from, limited to what they need to fulfil your order.
Payment partners to process payments securely.
Business customers (such as your gym, coach or clinic), only where you have joined their programme and agreed to share.
Authorities where required by law, court order or to protect rights and safety.
Where your data is stored
Our primary database is hosted in India. Some of our service providers may process data outside India, as permitted under applicable law, with safeguards in place. We will follow any restrictions the Government of India notifies on transfers to specific countries.
How long we keep it
We keep personal data only as long as needed for the purpose it was collected, or as required by law (for example tax and accounting records). When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it by law.
How we protect it
We use reasonable security practices, including encryption in transit, access controls, row-level security in our database, and limited staff access. No system is perfectly secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.
Your rights
Subject to applicable law, you can: access a summary of the personal data we hold about you; correct or update it; request erasure; withdraw consent; nominate another person to exercise your rights in case of death or incapacity; and raise a grievance with us.
To exercise any right, write to admin@acmova.com from your registered email address. We will respond within the time required by law. If you are not satisfied with our response, you may approach the Data Protection Board of India once it is operational for complaints.
Children
The Services are intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.
Cookies and similar technologies
Our website does not use advertising or tracking cookies. It loads fonts and images from third-party content providers, which receive your IP address in order to deliver them. The Acmova app uses essential storage to keep you signed in.
Changes to this policy
We may update this policy as our Services or the law change. We will post the new version here with a new effective date, and notify you of material changes in the app or by email.