Privacy Policy

Draft, not in force. This document is still being prepared and has not been reviewed. It does not govern anything. The version and date above are provisional.

This policy explains what NovaZero collects, why, who else sees it, and what you can do about it. NovaZero collects health and body data, so we have tried to be unusually specific rather than unusually broad. If anything here is unclear, write to privacy@novazero.app and we will answer.

The short version

We collect what the app needs to plan your training, log it, sync it between your devices, and show you your progress. Some of that is health data: your body weight, height, body-fat percentage, resting heart rate, sleep, pain you flag, and how you rate your hunger and stress.

We do not sell your data. We do not share it with advertisers. We do not run any analytics or tracking in the app at all. We do not build profiles about you for anyone else's benefit.

You can export your training history and your meals, or delete your entire account, from inside the app, at any time. If you decline an updated version of these terms, the app stays locked until you accept, so email support@novazero.app and we will delete your account for you.

1 · Who we are

Blue Window LLC, a Kentucky limited liability company at 212 N. 2nd St., Suite 100, Richmond, KY 40475, United States, is the business responsible for the personal information described here. Contact us at privacy@novazero.app.

2 · What we collect

Account.

Your email address and authentication credentials, handled by Google Firebase Authentication, plus whether you have verified your email. We never see or store your password. If you sign in with Apple, Apple confirms it's you and gives us your email address, or, if you choose Hide My Email, an address Apple makes that forwards to yours. We do not ask Apple for your name, and Apple never shares your Apple ID password with us. If you sign in with Google, Google confirms it's you and gives us your email address, name and profile picture. We use only your email address: the name and picture stay on your sign-in record with Google Firebase Authentication, are never shown in the app, and are never shared. Google never shares your Google password with us.

Profile and training preferences.

Your display name; training experience level, and the difficulty you last picked for a HIIT circuit; primary goal and focus; training location; days per week and session length; preferred split; priority muscle regions; available equipment and plate and bar inventory; weight and distance units (lb or kg, miles or kilometers); exercises you have chosen to avoid; lifts you have pinned to the top of Progress; app appearance, accent colour and whether Higher contrast is on; your notification preferences; and a record of the tips, notices and cards you have already seen or closed, so the app does not show them to you again, and when the app last asked you to rate it on the App Store, so it does not ask again too soon. A few small settings are kept with them so the app looks the same on every phone you use: which NovaZero Pro offers you have already been shown, today's generated daily workout, rows you have hidden on the Today card, which friend requests you have already been told about, the range you chose for your progress charts, whether Progress counts the work for each muscle group in weight or in sets, the order of the cards at the top of Progress, and when you last opened your friends' activity.

Body and physical characteristics.

Your biological sex, only if you give it (you can choose "Prefer not to say"). Your height. Your date of birth, which you give when you create your account, or, if your account is older, later in Settings ▸ Training profile or on the meal plan generator: it confirms you are 18 or older and gives your age for working out your calories. How much you move on a normal day, leaving out your workouts: mostly sitting, on your feet a lot, or physical work. Your starting body weight and your target body weight, and, if your goal is to lose weight, how fast you want to lose it (gentle, steady or fast).

Body areas to train around.

The body areas you mark as ones to train around. You choose whether to mark any. They are used only to shape what the app suggests.

Training data.

Your workouts, sets, reps, loads, rest times, session notes, routines, templates, plans, personal records, custom exercises, cardio sessions, and the daily cardio minutes you set for a plan. When you set cardio minutes or make a meal plan while no plan is running, we keep those minutes and which saved meal plan it was, so they go onto the next training plan you make.

Meal plans (if you use them).

The meals you plan for each day of the week: their names and times, the foods and amounts you type, any protein, carbs and fat you give for a food, your daily calorie and macro goal, and any meal you mark as eaten or skipped. Also the foods you enter, with their amounts and macros, so you can add them to a meal again. And your saved meal plans: each one's name, its week of meals and daily goal, whether you imported it, generated it, built it yourself or kept it when another meal plan replaced it, and when you saved it and last used it.

Generated meal plans (if you use them).

The choices you make for the meal plan generator: your diet style, the food allergies you tick, the foods you say you don't eat (the foods you block), the foods you star, your meal times, and whether you want the same meals every day. A generated meal plan you haven't saved yet: its meals, amounts and the name you typed, kept until you save it, throw it away or generate another, so you can open it again if the app closes. And, each time you generate one, a record that you agreed to the generator's statements: the date, a fingerprint of the exact statements, your daily calorie and macro target, and the choices above as they were. We keep these records permanently (Section 10).

Pain reports.

If you flag pain during a workout, we store the body areas you selected, the severity you chose, any note you wrote, and when you flagged it. This is your own report, recorded so the app can offer substitutes and update your avoid list.

Goal data (if you set a goal).

Your goal's target weight and date; whether it is a competition, and its division, phases and wrap-up answers; the parts of your plan each phase runs; peak-week checklist progress; which phase-change cards you have closed; and weekly or daily check-ins containing your body weight, body-fat percentage, lean mass, resting heart rate, heart-rate variability, sleep hours, and your own 1–5 ratings of sleep quality, energy, hunger, stress, training quality, and motivation.

Daily recovery ratings.

If you rate your recovery on a goal's screen, we store your 1–5 ratings of sleep quality, energy and muscle soreness, together with hours slept, for each day.

Marketing preference.

Whether you opted in, when you signed up, to occasional product-update emails.

Apple Health data.

See Section 3.

Location.

See Section 4.

Photos, documents, and camera input.

If you use AI Import, the text you paste, or the photo, scanned image, or document you choose, and a record of each import you request. See Section 5.

Social.

If you use social features: your public @handle, your display name, your friend connections and friend requests, the workouts you have shared, your stats card, routines you have sent to or received from a friend, emoji reactions you send or receive, and the people you have blocked. "Workouts friends see" has three answers: Nothing, Highlights (each workout's name, date, duration, total weight, top three lifts and PR count) or Full workout (the highlights plus every exercise with the weight and reps of each set you completed, and which sets earned a personal record). It starts on Highlights when you claim a username, and "Share stats with friends" starts on; you can change either at any time. A workout is shared only if you finished it while sharing was on, and in full only if you finished it while Full workout was on. Moving off Full workout hides every full workout you have shared, older ones included, and deletes those copies. Your notes, pain flags, how hard an exercise felt, and heart rate and calories are never shared, whichever you choose. Your stats card shows friends your streak, your sessions and volume this week, your lifetime session count, and your best lifts.

Reports.

If you report someone, we store who you reported, the reason you chose, your note, where you reported them from, and a copy of their public @handle and display name, and of yours, at that moment. The person you report cannot see any of it. A copy is emailed to our support inbox so that a person reads it the day it arrives, together with your account's email address so that we can reply to you (Section 8).

Devices and notifications.

If you enable push notifications, a Firebase Cloud Messaging token per device together with which alert types you enabled, so our server knows where to send them.

Your notifications list.

A record of what has happened for you in the app, so you can find it after a notification is gone: friend requests and routines sent to you, a friend saving a routine you sent, friends' finished workouts, cheers on your workouts, a due check-in, what's new after an update, and a notice if we removed your username or display name. Each entry holds who it is from, what it is about, when it arrived, and whether you have read it. It is kept whether or not you enabled push notifications, is deleted automatically after 30 days, and only you can read it. A friend's entries are removed when they delete that workout, stop sharing workouts, stop being your friend, or when either of you blocks the other.

Your workout on the Lock Screen.

While a workout is running, NovaZero shows it on your Lock Screen and in the Dynamic Island: the workout's name, the next exercise and set, its weight and reps, the rest countdown, and at the end a short summary. Anyone who can see your phone can read it without unlocking it. It is drawn on your phone from the workout already there, is not sent to us or to Apple, and is removed when the workout ends, 5 minutes after you finish, or when you sign out. You can turn it off in NovaZero under Settings ▸ During a workout ▸ Workout on Lock Screen, or for the whole app in iOS Settings ▸ NovaZero ▸ Live Activities.

Purchases.

Whether you have an active NovaZero Pro entitlement. Your subscription is verified on your device by Apple's StoreKit and cached there. We do not receive your purchases from Apple. Your account keeps one note about them: whether it had NovaZero Pro the last time the app checked, so that when a subscription ends the app tells you once, on whichever phone you use. If we give you NovaZero Pro for free, that grant is recorded on our servers. We never receive your payment card details, billing address, or Apple ID. Apple handles all of that.

Support correspondence.

If you email us, we keep the message and our reply.

3 · Apple Health

Connecting Apple Health is optional and entirely under your control. iOS asks you to approve each data type individually, and you can change or withdraw any of it at any time in the Health app. NovaZero cannot see what you have not approved, and cannot tell the difference between "you said no" and "there is no data".

What we read from Apple Health:

workouts; active energy burned; Apple exercise time; step count; walking and running distance; heart rate; body mass; your Activity ring goals; body-fat percentage; lean body mass; resting heart rate; heart-rate variability (SDNN); and sleep analysis.

What we write to Apple Health:

your finished lifting and cardio workouts, the active energy they burned, walking, running and cycling distance, the GPS route of an outdoor cardio session, and, from the Apple Watch app, the heart rate recorded during a session, so your training counts toward your rings and appears in Apple Fitness.

You choose what is written.

A setting decides for every session, and the screen after a finished workout or tracked run lets you save or hold back that one session. Switching it off there removes that session from Apple Health.

What we copy into your NovaZero account:

your morning body weight and body-fat percentage. This happens only while Apple Health is connected and a plan of yours has a goal or you have set a target weight. NovaZero then copies one morning reading of each per day, from the last 35 days, into your account on our servers (Google Firebase, see section 8), when you sign in, each time you open the app, and when you set a goal. It does this so your goal's pace, your Progress trends and your check-ins use your scale's readings without you typing them in. A weight you enter yourself for a day takes the place of the Apple Health one for that day. Deleting one of these copied entries in NovaZero does not stop the copy: the next one writes it again. To stop it, remove the goal and the target weight, or turn off NovaZero's access to body weight and body fat in the Health app. Entries already copied stay in your account until you delete them or your account.

What we do with it:

show your full day of training in one place, estimate calories, count your cardio workouts toward your plan's daily cardio minutes and show your average over the last four weeks, pre-fill check-ins so you do not retype numbers you already have, and calculate recovery and readiness views.

What we never do with it:

we never use health or fitness data for advertising or marketing, never sell it, never use it for data mining, and never share it with third parties for their own purposes.

Your phone's backup:

NovaZero does not put Apple Health data in iCloud itself. The app does keep files on your phone: an offline copy of your account so it works without a connection, and the workouts, check-ins and other changes that are waiting to upload. They can hold numbers that came from Apple Health, such as a workout's heart rate or a weight filled into a check-in. Those files are part of the app's data, so if your phone backs up to iCloud or to a computer, they are included in that backup, under your Apple account.

Values read from Apple Health that you save into a check-in are stored in your NovaZero account as part of that check-in. Morning weight and body fat are copied into your account as described above. Any other value used only to pre-fill a screen is not stored.

4 · Location

If you start an outdoor run, walk, or ride with GPS tracking, NovaZero uses your device's precise location while that workout is active to measure distance and pace and to draw your route. iOS asks your permission the first time and shows the location indicator throughout.

Where your route goes.

The full-precision route, with its timestamps, is written to Apple Health on your device when that workout is saved there, and attached to it, which is what lets Apple Fitness show you the map. A simplified outline of the same route is also saved to your NovaZero account (the path is smoothed to roughly 10 metres and capped at 500 points) so that NovaZero can draw your route map itself, on any of your devices. The rest of what we store is the session summary: duration, distance, pace, and average heart rate.

About background tracking.

While a session you started is running, location updates continue even if your phone is locked or you switch apps. That is what lets NovaZero keep measuring a run you are actually on. Tracking stops the moment you finish the session. NovaZero only ever requests “While Using the App” permission; it never asks for “Always” access, and it never starts tracking on its own.

We do not use location for any purpose other than the workout you started, and we do not use it to target anything at you. You can decline location access and still use every other part of NovaZero; you will simply enter distance manually.

5 · AI Import, photos and documents

AI Import is a NovaZero Pro feature, for a training programme or a meal plan. When you use it, the text you paste, or the photo, image, or document you select, is transmitted to Google and processed by Google's Gemini models through Firebase AI Logic, which returns a structured routine, plan, or meal plan that NovaZero saves to your account.

Google receives the content you submit and nothing that identifies you: no account ID, email address, or sign-in token is sent with it. Each request also carries what every request from the app carries: a token that proves it came from the genuine NovaZero app (App Check), the app's own identifiers and version number, and, as with any internet connection, your device's IP address.

For a meal plan, only what you submit is sent. Your saved foods and your other meals are not: matching the imported foods to your saved foods happens on your device afterwards. Where your meal plan gives no protein, carbs, or fat for a food, the model works them out, and the app marks those numbers as estimates for you to check.

Generating a meal plan, also a NovaZero Pro feature, sends Google less. Google receives your daily calorie, protein, carbs and fat target, your meal names and times, and the kinds of meal on our list that the foods fitting your choices can make (an oats bowl, tacos), each with those foods, and which of those foods you starred, and its model picks a kind of meal and its foods for each meal. Google does not receive your allergies, your diet style, the foods you said you don't eat, your weight, or anything that identifies you: the app uses those to take foods off the list before it is sent, and works out every amount itself. If Google's model doesn't answer, the app builds your plan on your device and nothing more is sent.

What we keep in your account is the routine, plan, or meal plan the import produced. We do not keep the photo, image, or document you selected. The text you paste, what is sent for a generated meal plan, and the answer Google's model returns, are kept in our Firebase service logs for 30 days so that we can find out why an import failed or came back wrong, and are then deleted automatically. Those log entries are not linked to your account: they hold no account ID, email address, or sign-in token. Google's handling of the content it receives is governed by Google's terms for that service.

To apply the monthly import allowance (Terms, Section 11), we keep a count of the workout and meal plan imports your account has used this month, and a record of each import you request: whether it was a workout or a meal plan, when you asked, whether it could be read, and how much processing Google's model reported using for it (its token counts). This record contains nothing you submitted. We use it only to apply the allowance and to understand what AI Import costs to run, and it is deleted with your account.

Only submit material you have the right to submit, and do not include medical records or other people's personal information. Camera access is used only when you choose to photograph a programme.

6 · What we do NOT collect

We want to be explicit, because many apps in this category do collect these things:

• No analytics and no tracking. NovaZero contains no analytics SDK, no crash-reporting SDK, and no advertising SDK. We do not log which screens you open or which buttons you tap. We do not use the App Tracking Transparency framework because we do not track you.
• No advertising identifiers, no cross-app or cross-site tracking, and no advertising networks.
• No contacts, microphone, or photo-library access beyond the single image you pick for an import.
• No location access outside a workout you started, and never “Always” permission.
• No payment information.
• No sale of personal information, ever.

7 · How we use your information

We use what we collect to: create and secure your account; send you product-update emails if you asked for them; store, sync and back up your training across your devices; generate and adapt training plans, cardio prescriptions and macronutrient targets; work out how many calories you burn in a day from your weight, height, age, sex, how much you move and the workouts you log, and suggest a daily calorie and macro goal from that; add up your planned meals against your daily goal; calculate your progress, personal records, adherence and recovery views; pre-fill screens so you retype as little as possible; deliver the notifications you asked for; operate social features with the people you connected to; verify your NovaZero Pro entitlement; prevent abuse and enforce our Terms; respond to your support requests; and comply with law.

We rely on your consent for health data and location, on the performance of our contract with you for the core service, and on our legitimate business interests for security and abuse prevention. You can withdraw consent at any time as described in Section 11.

8 · Who we share it with

We share personal information only with the service providers that make the app work, and only so they can perform services for us:

• Google Firebase Authentication: account creation and sign-in.
• Google Cloud Firestore: storage and synchronisation of your training data.
• Google Cloud Functions: server-side operations including recording your acceptance of these documents, account-deletion support, and checking names and notes against the list of words we do not allow (Terms, Section 10).
• Google Firebase App Check: verifying that requests come from the genuine app.
• Google Firebase Cloud Messaging: delivering push notifications you enabled.
• Google (Gemini, via Firebase AI Logic): only if you use AI Import or generate a meal plan, and only the content you submit (for a generated plan, your target, meal times, the foods that fit your choices and which of them you starred), with nothing that identifies your account (Section 5).
• Resend: emailing each report you file to our support inbox, which Microsoft hosts. The email holds the report: who was reported and who reported them (names, usernames and account IDs), the email address of the account that reported, the reason, where it was sent from, and the note.
• Apple: App Store distribution, subscription purchase and management, push delivery, and HealthKit. Apple's privacy policy governs what Apple does.

We may also disclose information if we are legally required to, to protect someone's safety, or to enforce our Terms; and, if the business is ever sold or merged, to the acquirer, in which case we will tell you and this policy will continue to apply until it is replaced.

Other users see only what you choose to share: your @handle and display name if you claim one, the highlights of workouts you finished while sharing was on, the full workout (every exercise and set) of workouts you finished while "Workouts friends see" was on Full workout, for as long as it stays on Full workout, and your stats card while "Share stats with friends" is on. Your body data, pain reports, check-ins, meals, the body areas you train around and your email are never visible to other users.

9 · We do not sell or share your data

We do not sell your personal information, and we have not in the preceding twelve months. We do not share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for any purpose other than providing you the app.

Because we do not do these things, there is nothing for you to opt out of, but your right to make that request exists, and Section 11 tells you how.

10 · How long we keep it, and what deleting does

We keep your data for as long as your account exists.

Deleting a workout removes that session and its data from your account.

Deleting your account (Settings ▸ Delete account) permanently erases the data this account owns in our database: your profile and training preferences, workouts, plans with their meals and goals, templates, personal records, cardio sessions, measurements, your saved foods and saved meal plans, goal check-ins, peak-week days, daily recovery ratings, shared workouts (highlights and full) and their reactions, routines you received from friends, friend requests in both directions, your friend connections, your notifications list, the entries your activity put in your friends' notification lists, device registrations, your saved app-state preferences, your AI Import count and the record of each import you requested, your public profile card, and your claimed handle, which is released for others to use, and then closes your login (and, if you signed in with Apple or Google, tells Apple or Google to end NovaZero's access to that sign-in) and wipes the app's data from your device, including the offline copy the app keeps so it works without a connection. Any pending unsynced workouts on the device are purged too. Any other device still signed in to the account is wiped the same way the next time NovaZero opens on it.

Routines you sent to a friend stay with them. A routine you send is theirs once they receive it, and it is not removed when you delete your account.

Deletion is immediate in our live database. Copies already in our backups are erased automatically within 98 days.

What we retain after deletion:

the record that a particular account accepted or declined a particular version of our Terms and Privacy Policy (the date, a hash of the text, how it was accepted, whether you opened each document and scrolled to its end, your confirmation that you met the minimum age, and your marketing-email preference). We keep this as proof of consent for as long as your account exists and for 7 years after it is deleted, because we may need to show it. It contains no training or health data. We also keep, permanently, the record of each meal plan you generated (Section 2): the date, a fingerprint of the statements you agreed to, your target, diet style, allergies and the foods you said you don't eat. It does contain health data. We keep it as the record of what you agreed to and what the plan was built from, and use it for nothing else. We also keep records we are required by law to keep, such as tax records for a purchase. Reports you have filed, and reports filed about you, are kept after either account is deleted, because they are the record of what happened and we may need them to act on a pattern of abuse. Text you pasted into AI Import, and the answers, stay in our service logs until they are deleted automatically 30 days after each import (Section 5); they are not linked to your account.

A free NovaZero Pro grant from us, if you have one, is deleted with your account.

Our servers also keep technical logs of what they do, which are deleted automatically after 30 days. Some entries name your account ID: for example, when a sign-up is refused because the app showed an out-of-date version of the Terms.

Deleting your NovaZero account does not cancel an Apple subscription. Cancel it in your iPhone's Settings, or with the Manage subscription button the Delete account screen shows while your subscription is set to renew.

11 · Your rights and choices

Wherever you live, you can do all of the following:

• Access and export. Export your workouts, cardio sessions, personal records, body measurements, plans and saved routines, your meals, saved foods and saved meal plans as a file, from inside the app. That export does not yet cover your profile, the body areas you train around, goal check-ins, daily recovery ratings or social data. For a copy of those, email privacy@novazero.app and we will send them to you.
• Correct. Edit your profile, training data and preferences directly in the app. Clearing an answer in Settings ▸ Training profile or Settings ▸ Equipment & limits removes it from your account on every device.
• Delete. Delete individual workouts, or your entire account, from inside the app. If you have declined an updated version of these terms, the app is locked until you accept; email support@novazero.app and we will delete your account.
• Withdraw consent. Turn off Apple Health access in the Health app, turn off location in iOS Settings, turn off notifications, set "Workouts friends see" to Nothing, turn off "Share stats with friends", or stop using a feature. None of this requires contacting us. To stop product-update emails, use the unsubscribe link in any of them or write to privacy@novazero.app.

Depending on where you live you may also have the right to know the categories and specific pieces of information we collect and disclose; to portability; to opt out of sale, sharing, or targeted advertising (we do none); to limit the use of sensitive personal information (we already limit it to providing the app); to non-discrimination for exercising a right; and to appeal a decision we make about a request.

How to make a request.

Use the in-app controls, which are immediate, or email privacy@novazero.app. We will verify that the request comes from you, usually by confirming control of the account email, and respond within 45 days, extendable once by a further 45 days where permitted. An authorised agent may act for you with proof of authority. We do not charge for this, and exercising a right never costs you access, price, or features.

If we say no.

We will tell you why, and you may appeal by replying to that email with "Appeal" in the subject. We will answer an appeal within 45 days. If you are still unsatisfied you can complain to your state Attorney General, or to the Kentucky Attorney General.

12 · Health data: Washington, Nevada, Connecticut

Some of what NovaZero collects is "consumer health data" under Washington's My Health My Data Act, Nevada SB370, and Connecticut's health-data provisions.

We publish a separate Consumer Health Data Privacy Policy covering exactly what those laws require. It is linked separately from ours, in the app and on our website, and it governs that data. Please read it.

In summary: we collect that data only with your consent and only to provide NovaZero to you; we do not sell it; we would never sell it without a separate signed authorisation from you; and you can delete it from inside the app.

13 · Canada

If you are in Canada, we handle your personal information in accordance with PIPEDA and applicable provincial privacy legislation. Your information is stored and processed in the United States by Google Cloud on our behalf, which means it may be accessible to US authorities under US law. By using NovaZero you consent to that transfer. You may withdraw consent by deleting your account, and you may complain to the Office of the Privacy Commissioner of Canada. Québec residents have additional rights, including the right to be informed of automated decision-making. NovaZero's plan generation is automated calculation from data you provide, and it does not produce legal or similarly significant effects.

14 · Security

Your data is protected by Google Cloud's infrastructure security and by per-user access rules that we enforce in our database configuration: only your authenticated account can read or write your data. Requests are attested by Firebase App Check. Data is encrypted in transit and at rest by our provider. Deleting your account also wipes the app's stored data from your devices.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the relevant authorities as required by law.

15 · Children

NovaZero is not directed to anyone under 18 and we do not knowingly collect their personal information. You give your date of birth when you create an account, and we do not create one for anyone it shows to be under 18. If you believe someone under 18 has an account, contact privacy@novazero.app and we will delete it.

16 · Changes to this policy

We may update this policy. When the change is material we bump the version, and the app asks you to review and accept the new version before it continues syncing. If you would rather not accept, you can sign out; choosing not to accept is recorded, the same as accepting. Email privacy@novazero.app to request an export, or support@novazero.app to have your account deleted. The version and effective date are at the top of this document, and we keep previous versions available on request.

17 · Contact

Blue Window LLC
212 N. 2nd St., Suite 100, Richmond, KY 40475, United States
Privacy: privacy@novazero.app
Support: support@novazero.app

We answer privacy mail within 3 business days.