Privacy Policy

[LEGAL BUSINESS NAME] (“Nova”, “we”, “us”) operates this website and provides online fitness coaching and digital training programs. This policy explains how we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Québec's Law 25 where it applies.

1. Information we collect

• Account information: name, email address and password (stored securely by our authentication provider).
• Purchase information: products purchased, subscription status and billing address. Card details are collected and processed by Stripe; we never see or store full card numbers.
• Onboarding information: fitness goals, training experience, equipment, schedule and preferences you provide. Any limitations you choose to share are optional and provided voluntarily.
• Training data: workout logs, progress entries and messages you send to your coach.
• Inquiries: information you submit through our contact forms.
• Technical data: IP address, device and browser information, used for security, rate limiting and (if enabled) analytics.

2. Why we use it

• To create and manage your account and deliver coaching and programs you purchase.
• To process payments, manage subscriptions and send transactional emails (receipts, payment notices, account messages).
• To respond to inquiries and provide support.
• To secure our services, prevent fraud and abuse, and comply with legal obligations.

We collect only what is reasonably needed for these purposes. We do not sell personal information.

3. Consent

We rely on your consent, which you give when you create an account, make a purchase or submit a form. You may withdraw consent at any time, subject to legal or contractual restrictions; withdrawing may mean we can no longer provide certain services. We will only send marketing emails with your express consent, in line with Canada's Anti-Spam Legislation (CASL).

4. Health-related information

Our onboarding form allows you to voluntarily describe physical limitations relevant to training. Providing this is optional and requires your explicit consent. We use it only to adapt your training, restrict access to you and your coach, and do not use it to provide medical advice, diagnosis or treatment.

5. Service providers and cross-border transfers

We use trusted providers to operate our services, including Stripe (payments), Supabase (database and authentication), Resend (email delivery) and Vercel (hosting). These providers may store or process information outside Canada, including in the United States, where it may be subject to the laws of those jurisdictions. We require providers to protect personal information appropriately.

6. Retention

We keep personal information only as long as needed for the purposes above, or as required by law (for example, tax and accounting records). [INSERT RETENTION PERIODS.]

7. Security

We use safeguards including encryption in transit, access controls, row-level database security and limited staff access. No system is perfectly secure; we will notify you and the relevant regulator of breaches where required by law.

8. Your rights

You may request access to, correction of, or deletion of your personal information, and ask questions about our practices, by contacting our Privacy Officer at [PRIVACY EMAIL]. You may also contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

9. Contact

Privacy Officer, [LEGAL BUSINESS NAME], [BUSINESS ADDRESS], [PRIVACY EMAIL].