Effective date: 1st January, 2026

1. Who we are AllDays Tech Ventures LLP Registered office: 501, 501, 503, Parmeshwari Centre, 18 Dalmia Estate, Mulund West, Mumbai - 400080, India GSTIN / CIN / PAN: [insert here] Privacy contact: info@alldays.club Support contact: info@alldays.club

This Privacy Policy explains how AllDays (“we”, “us”, “our”) collects, uses, shares and protects personal data when you use the AllDays mobile app, website and services (the “Platform”) in India. By using the Platform you accept this Policy and our Terms & Conditions.

2. Scope This Policy applies to individuals in India who use the Platform to search, book or attend fitness and wellness Sessions offered by third-party studios and trainers (together, “Vendors”).

3. Data we collect A. Data you provide directly

• Identity and profile: name, username, profile photo, date of birth (optional), gender, preferences.

• Contact: email address, phone number, address (if provided).

• Bookings: session bookings, attendance records, cancellations, reviews and ratings, messages to Vendors/support.

• Payment-related: transaction records and payment references. (We do not store full card details unless expressly stated; payments are processed by our payment partners.)

• Health & fitness: any health conditions, injuries or fitness goals you voluntarily share.

• Verification: KYC documents if required for promotions or verification.

• Communications: customer support interactions, feedback and complaints.

B. Data collected automatically

• Device and usage: device type, operating system, app version, IP address, logs and crash reports.

• Location: approximate location via IP; precise GPS only if you permit it.

• Cookies and tracking: analytics, performance and advertising data.

C. Data from third parties

• Social login providers, payment gateways, analytics providers, public sources and partners.

4. How we use your data We use personal data to:

• Provide, operate and improve the Platform and services (create accounts, manage bookings, confirmations).

• Process payments, refunds, taxes and prevent fraud.

• Personalize recommendations and send service-related messages.

• Communicate marketing offers (with your consent where required).

• Respond to legal requests, enforce Terms and protect rights.

• Conduct analytics, research and product improvements.

5. Legal basis (India context) We process personal data based on:

• Contract performance: to fulfil bookings and payments you request.

• Consent: where you give explicit consent (marketing, health data).

• Legal compliance: to comply with applicable Indian laws (tax, record-keeping).

• Legitimate interests: for fraud prevention, security and service improvement, balanced with your rights.

6. Sharing and disclosure We may share personal data with:

• Vendors: your name, contact, booking details and any health information you consent to share so Vendors can deliver Sessions.

• Service providers: payment processors, hosting providers, analytics and customer support vendors.

• Affiliates and partners: where necessary to operate the Platform.

• Law enforcement or government authorities: when required by law.

• Business transfers: in connection with mergers, acquisitions or sales.

• Aggregated/anonymized data: for analytics that do not identify you.

7. Retention We retain personal data as long as needed to provide services, meet legal obligations and resolve disputes. Financial and tax records are typically retained for 7 years unless a different period is required by law. Other personal data is deleted or anonymized when no longer required.

8. Security We use reasonable technical and organisational measures (encryption in transit, access control, secure servers) to protect data. No system is completely secure; we will notify affected users and authorities where required in case of a data breach.

9. Cross-border transfers Data may be processed in India and in other countries by service providers. We use contractual safeguards to protect transfers.

10. Your rights (India) You may have the right to:

• Access copies of personal data we hold about you.

• Correct inaccurate or incomplete data.

• Request deletion (subject to legal retention obligations).

• Restrict or object to certain processing.

• Withdraw consent where processing is based on consent.

• Request portability of your data in a machine-readable format.

To make a request, email privacy@... [insert] with subject “Data Subject Request” and provide your name, registered email and phone. We may require ID to verify your identity. We will respond within applicable legal timelines.

11. Children Our Platform is not intended for children under 13. We do not knowingly collect personal data from children. If we learn we have collected a child’s data without parental consent, we will delete it.

12. Cookies and tracking We use cookies and similar technologies for functionality, analytics and advertising. You can manage cookie settings through your browser or device.

13. Marketing communications You can opt out of marketing messages at any time via unsubscribe links or account settings. Transactional messages (booking confirmations, safety notices) are necessary and cannot be opted out of.

14. Changes to this Policy We may update this Policy. We will post the updated Policy with the effective date. For material changes we may notify you by email or in-app notice.

15. Contact For privacy queries or to exercise your rights: privacy@... [insert] For support: support@... [insert] Legal notices: AllDays Tech Ventures LLP, 501, 501, 503, Parmeshwari Centre, 18 Dalmia Estate, Mulund West, Mumbai – 400080, India.