Privacy Policy

Effective Date: January 1, 2026  •  Governing Law: Nevada, USA

NOWFit, Inc. (“NOWFit,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy describes the information we collect, how we use it, your rights and choices, and the measures we take to safeguard it. This Policy applies to both the NOWFit Client App and the NOWFit Coach Platform.

1. Information We Collect

We collect information when you interact with the NOWFit platform as a client or coach. This includes:

1.1 Information Provided by Clients

• Contact Information: Name, email address, phone number
• Demographic Data: Age, gender, height, weight
• Health & Wellness Data: Fitness goals, workouts, nutrition habits, biometric inputs (e.g., heart rate, sleep data, step count), progress photos
• Wearable Integrations: Data from integrated fitness devices via Saha.ai or other APIs (Apple Health, Google Fit, Fitbit, Garmin, WHOOP, etc.)
• Uploaded Content: Check-ins, logs, journal entries, photos, mood scores
• Communication Logs: Messages with coaches, AI chat history, support requests
• App Usage: Features used, time spent, preferences toggled

We categorize data as essential (such as contact info for account creation) or optional (such as wearable integrations, which require separate consent via device permissions).

1.2 Information Provided by Coaches

• Contact & Business Information: Name, email, phone, business name, tax or billing info
• Uploaded Content: Workout plans, media, recipes, documents
• Scheduling & CRM: Client assignments, performance trends, client program modifications
• Communication Records: Messages with clients and platform support

1.3 Automatically Collected Data

• Device and Session Info: IP address, browser/device type, OS version
• App Usage & Analytics: Feature engagement, time in app, completion rates
• Error Reports: Crash logs, debug logs, failed submission records

2. How We Use Your Information

We use your information to:

• Deliver personalized wellness services
• Enable communication between clients and coaches
• Facilitate payment processing and account management
• Track progress, generate reports, and support goal attainment
• Deliver educational, motivational, or supportive AI content (when enabled)
• Improve product functionality through behavioral analytics
• Train our AI engine using anonymized or aggregated data to improve predictions, prompts, and user experience
• Ensure compliance with legal requirements and prevent misuse or fraud

3. Use of AI and Personal Data

If you enable AI features in the Client App, NOWFit may generate:

• Habit reminders and motivational nudges
• Educational prompts, non-medical coaching suggestions
• Mood check-ins and behavior tagging

Whether or not you enable direct AI messaging, your data (when anonymized) may be used to:

• Improve AI model quality and personalization tools
• Enhance coach-facing analytics
• Trigger reminders or content blocks based on your engagement

AI-generated content is informational and is not a substitute for medical advice. You may toggle off AI communication at any time through your app settings. Anonymized data in AI models is not retrievable or re-identifiable and follows standards like removal of direct identifiers per the U.S. National Institute of Standards and Technology (NIST) guidelines. Users can request exclusion from training datasets.

4. How We Share Your Data

We only share your information under specific, lawful purposes:

• With your assigned coach (to deliver services, track progress, update programs)
• With Stripe or other payment processors (for billing and recurring payments)
• With OpenAI and Saha.ai (for AI messaging and wearable integrations), under strict API contracts and encryption
• With third-party vendors for analytics, support, or infrastructure (e.g., AWS, customer support software)
• When required by law (e.g., subpoenas, fraud investigations, platform abuse)

NOWFit does not sell your data to advertisers or brokers. All third parties sign data processing agreements compliant with applicable laws. For a list of sub-processors, please contact privacy@nowfitonline.com.

5. Your Rights

Depending on your location and jurisdiction (e.g., US, Canada, EU), you may have certain rights:

• Access: View a summary of your personal information
• Correction: Update incomplete or inaccurate data
• Deletion: Request permanent removal of data from our systems
• Data Portability: Export a structured copy of your personal data
• Restrict or Object: Control use of your data for specific features
• Withdraw Consent: Toggle off AI features or cancel your account

To exercise these rights, email privacy@nowfitonline.com or submit a request through the app’s support portal. We respond to rights requests within 30–45 days, verifying identity via email or app login.

6. Data Retention & Deletion

Data retention periods vary by category: health data is retained for 12 months post-deletion, while contact info may be kept longer for legal compliance.

• Data is retained for the duration of your account plus 12 months unless longer retention is required by law
• Coaches may retain access to client data during their contractual term
• Deleted accounts are anonymized or removed within 30 days of request

7. Security Measures

We employ technical and organizational security practices:

• TLS encryption for all web and mobile traffic
• Encrypted-at-rest storage for health, payment, and biometric data
• IP whitelisting and access control for internal dashboards
• Daily audits and real-time monitoring of system performance
• Data minimization practices in AI training pipelines

In case of breaches affecting personal data, we notify users and regulators as required (e.g., within 72 hours under applicable laws like CCPA). We conduct regular security audits and follow standards such as ISO 27001.

8. Children’s Privacy

NOWFit is not intended for children under 13. Clients ages 13–17 may use the Service only with verifiable parental consent. Coaches must obtain and store any required legal waivers for minor clients. For clients ages 13–17, coaches must verify parental consent per the Children’s Online Privacy Protection Act (COPPA) in the US or GDPR in the EU, including obtaining and retaining documentation.

9. International Users

NOWFit is hosted in the United States and governed by U.S. law, specifically the laws of Nevada. However, we apply privacy controls to respect:

• GDPR (Europe)
• UK GDPR
• PIPEDA (Canada)
• CCPA/CPRA (California)

If you are located outside the U.S., you acknowledge your data will be processed in the U.S. and may be subject to local data disclosure requests. For transfers to or from the EU/UK, we use Standard Contractual Clauses (SCCs) or equivalent mechanisms to ensure compliance with GDPR/UK GDPR. For Canadian users, we align with PIPEDA requirements. For California residents, we comply with CCPA/CPRA.

10. Cookies and Tracking

NOWFit may use cookies and similar technologies to:

• Authenticate users
• Track session activity
• Analyze feature use
• Measure AI prompt engagement

You may disable cookies via your browser, but this may reduce app performance.

11. Email Communications

By registering, you consent to receive service-related emails (e.g., login alerts, check-in reminders). Marketing emails are optional and require opt-in at registration or via your settings. You can unsubscribe at any time.

12. Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide advance notice via the App or email. Continued use of the platform after updates constitutes acceptance. Material changes include new data uses or sharing practices; we will seek affirmative consent where required by law.

13. Contact Us

If you have questions or want to exercise your rights:

Email: privacy@nowfitonline.com
Mailing: NOWFit, Inc., Nevada, USA

Last Updated: January 1, 2026