Privacy Policy

This policy is issued by Murai ("Murai", "we", "us"). It explains how we handle personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

For information about website visitors, people who request a demo, and the owners and staff who hold Murai accounts, we decide why and how the data is used, so we are the Data Fiduciary.

For information about a gym's own members, the gym is the Data Fiduciary and we act only as its Data Processor. That processing is described in our Data Processing Agreement.

• Demo requests: your name, gym name, mobile number, email, city, approximate number of members and branches, and your preferred time to be contacted.
• Accounts: your name, email address, role, sign-in details (passwords are handled by our authentication provider and are not visible to us) and sign-in activity.
• Billing: your business name, GSTIN and billing address, and the status of payments. Card and UPI details are handled by our payment provider and are not stored by us.
• Usage and device data: your IP address, browser type, pages visited and basic diagnostics, collected to keep the Service secure and working.
• Support: the messages you send us and our replies.

• To respond to your demo request and contact you about it, based on your consent.
• To create and run your account and provide the Service, to perform our contract with you.
• To bill you and keep tax and accounting records, as the law requires.
• To keep the Service secure, prevent misuse and fix problems.
• To understand how the Service is used and improve it.
• To comply with legal obligations and respond to lawful requests.

We rely on your consent or on another lawful ground permitted by the DPDP Act. We do not use your information for purposes you have not been told about.

When we ask for your consent, for example when you submit the demo form, we tell you what it is for. You can withdraw your consent at any time by contacting us: email us at contact.murai.app@gmail.com. Withdrawing does not affect what we did before you withdrew, and it may mean we can no longer provide a service that depends on that consent.

We do not sell your personal data. We share it only with:

• service providers who help us run the Service, such as cloud hosting and database, authentication, email and WhatsApp messaging, payment processing, analytics and customer-support tools, each bound by contract to protect it and use it only for us;
• authorities, courts or other parties where the law requires it, or to protect our rights and safety;
• a buyer or successor, if our business is sold or reorganised, who must honour this policy.

If you are a member of a gym that uses Murai, the gym decides what is collected about you and why. Please direct requests about your membership data, such as access or correction, to your gym. We will help the gym respond.

Data is stored with reputable cloud infrastructure providers. It may be processed in locations outside India, and we do so only where the DPDP Act and any restrictions notified under it allow.

We keep personal data only as long as needed for the purpose it was collected for, or as the law requires.

• Demo requests are kept for up to 24 months unless you become a customer.
• Account data is kept while your subscription is active and for a short period afterwards to allow data export.
• Billing and tax records are kept for the period Indian tax law requires.

We use encryption in transit, role-based access, database-level access rules that separate one gym's data from another's, and regular backups. No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authority as the law requires.

Under the DPDP Act you have the right to:

• get a summary of the personal data we hold about you and how we process it;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it by law;
• have your grievance addressed;
• nominate another person to exercise these rights if you die or become unable to.

To use any of these rights, email us at contact.murai.app@gmail.com. We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Our website and accounts are for adults. We do not knowingly collect information about children through our marketing site. Gyms that enrol members under 18 are responsible for obtaining verifiable parental or guardian consent.

We use only the cookies the Service needs to work, such as the one that keeps you signed in and the one that remembers which branch you are viewing. We do not use advertising cookies. If we add analytics that use cookies, we will update this policy and ask for your consent where the law requires it.

We will update the date on this page when we change the policy, and tell you directly about changes that matter.

For any question about your personal data, or to raise a grievance, email us at contact.murai.app@gmail.com. We aim to acknowledge within 48 hours and resolve within 30 days.