Version 2.1 | Last Updated: August 24, 2026

This Privacy Policy describes how Novion collects, uses, processes, shares, and protects your information when you use the Novion mobile application, website, and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

1.1 Interpretation

Capitalized terms have the meanings assigned to them in this Policy. These definitions shall have the same meaning regardless of whether they appear in singular or plural form.

1.2 Definitions

For the purposes of this Privacy Policy:

Account means the unique profile created for you to access the Service.
Application means the mobile application titled "Novion" available on iOS and Android platforms.
Company (referred to as "Novion," "we," "us," or "our") refers to Novion.
Device means any device used to access the Service, including mobile phones, tablets, and computers.
Personal Data means information that identifies or can reasonably be linked to an individual.
Health Data means information you provide relating to your physical characteristics, health, nutrition, goals, or activity, including weight, height, food logs, workout data, and progress photos.
Usage Data means data collected automatically through use of the Service, including device information, activity logs, and analytics data.
User Content means photos, images, text, food entries, metadata, or other inputs you upload or submit through the Service.
Star means a fitness creator who publishes content on the Novion platform.
Program means a fitness or wellness program created and sold by a Star.
Website means novionapp.com.
You means the individual using the Service or the organization on whose behalf the Service is used.

2. Types of Data We Collect

We collect the categories of data described below. Certain categories may qualify as health information, sensitive personal information, or biometric-adjacent data under various privacy laws.

2.1 Personal Data You Provide

Account Information: When you register, we collect your name, email address, and password.
Profile Information: Age, height, weight, fitness goals, and other information you choose to provide.
Health and Fitness Data: Workout details, nutrition information, and other fitness metrics you input or generate through the Application.
Photos and Images: Food photos you capture for AI-powered nutritional analysis through our food scanning feature; profile photos you upload as your avatar; body progress photos you record to track physical changes; and images attached to workouts you choose to share. Photos you add to a meal, profile photos, body progress photos, and shared workout images are stored on our servers while your account is active.

2.2 Data Collected Automatically

Usage Information: How you interact with our Application, including features used and time spent.
Device Information: Information about the device you use to access our Application, including device type, operating system, and unique device identifiers.
Advertising Identifier: On the free tier only, your device advertising identifier and basic ad-interaction information are collected by our advertising partner to deliver and measure ads. See Section 18.

2.3 Location Data

When you use our cardio and outdoor workout tracking features (such as running, walking, or cycling), we collect precise location data (GPS) from your device to calculate distance, pace, route, and related workout metrics. With your permission, the Application may continue to access your location in the background during an active cardio session so that distance and route tracking continue accurately when your screen is locked or the app is not in the foreground. Location tracking occurs only during active cardio workouts that you initiate; we do not track your location when you are not recording a workout. Location access is optional and may be declined or revoked at any time through your device settings, in which case cardio distance tracking will be limited to when the app is open. Location and route data associated with your workouts is stored on our servers, linked to your account, used solely to provide your own workout history, and is not shared with other users or used for advertising.

2.4 Voice Input

When you use voice input features (such as voice food search), your microphone audio is processed by your device platform's speech recognition service (Apple or Google) to convert speech to text. Audio is used only for transcription, is not stored by Novion, and voice input is always optional.

2.5 Health Platform Data (Health Connect and Apple Health)

If you choose to connect Novion to your device health platform, we read a narrow set of health records from Health Connect on Android or Apple Health on iOS: heart rate, weight, active calories burned, distance, and exercise sessions. Heart rate is read only. This connection is optional, is off until you enable it, and can be revoked at any time in your device settings. Section 17 describes in full what we read, what we write back, how we use it, and the limits we place on it.

2.6 Advertising Identifier

On the free tier, Novion shows ads served by Google AdMob. The Google Mobile Ads SDK collects your device advertising identifier (the Advertising ID on Android, the Identifier for Advertisers on iOS) and shares it with Google to deliver and measure ads and to detect ad fraud. Novion requests non-personalized ads only, and no health, fitness, or location data is ever shared with advertising partners. Section 18 describes this in full. Pro subscribers see no ads.

3. How We Use Your Information

We use your information for the following purposes:

Providing and improving our Application and services
Personalizing your experience
Generating insights and recommendations based on your health and fitness data
Communicating with you about your account, updates, and new features
Analyzing usage patterns to improve our Application
Displaying advertising on the free tier, as described in Section 18

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

With third-party service providers who help us operate our Application.

4.2 Legal Requirements

When required by law or to protect our rights.

4.3 Business Transfers

In connection with a merger, acquisition, or sale of assets.

4.4 Advertising Partners

On the free tier, your device advertising identifier and basic ad-interaction information are shared with Google AdMob to deliver and measure ads and to detect ad fraud. Novion requests non-personalized ads only. We never share your health platform data, heart rate, workouts, nutrition or food logs, weight, progress photos, or location data with advertising partners. See Section 18.

5. Coaching Relationships & Data Access

Novion offers coaching features that enable Stars (coaches) to work directly with clients through the platform. This section describes how data is shared within coaching relationships.

5.1 Client Consent

When you accept a coaching invitation from a Star, you explicitly consent to sharing certain data with that coach. You must accept the Coach-Client Data Agreement before a coaching relationship is established. You may revoke this consent at any time by ending the coaching relationship.

5.2 Data Visible to Your Coach

When you are in an active coaching relationship, your coach can access the following data:

Workout Logs: Exercise history, sets, reps, weights, and workout completion data
Nutrition Logs: Food entries, calorie intake, and macronutrient data
Weight Tracking: Body weight entries and trends over time
XP Progression: Training consistency metrics and achievement data
Progress Photos: Only if you explicitly choose to share them with your coach through the coaching interface

Your coach cannot access your account credentials, payment information, private messages with other users, or data from other coaching relationships.

5.3 Coach Obligations

Coaches must keep all client data strictly confidential and may only use it for the purpose of providing coaching services within the Novion platform.
Coaches may not share, export, sell, or otherwise disclose client data to any third party.
Coaches may not use client data for marketing, research, or any purpose outside the coaching relationship without the client's separate written consent.
Coaches who violate these obligations may have their accounts suspended or terminated.

5.4 Data Access After Coaching Ends

When a coaching relationship ends (whether by client request, coach cancellation, or subscription expiration), the coach loses read access to the client's data immediately.
Clients retain full access to their own fitness and health data regardless of the coaching relationship status.
Coaching interaction records (messages, notes, assigned programs) are retained by Novion for 90 days after the relationship ends for dispute resolution purposes, after which they are deleted.

6. AI-Powered Food Analysis

When you use our food scanning feature, photos are analyzed by Google's Gemini AI to identify nutritional content and provide accurate food tracking.

6.1 How It Works

Photos you take of food are sent to Google's Gemini AI for analysis
Google AI processes the image to identify the food and estimate its nutritional values
The nutritional data (calories, macros, etc.) is returned and saved to your account
If you add the scanned foods to a meal, the photo is saved with that meal and appears in your meal history for as long as your account is active
If you scan a nutrition label, or scan food and do not add it to a meal, the photo is not saved
Photos saved with a meal are deleted when you delete your account
You can choose not to use this feature and manually enter nutrition data instead

6.2 Your Consent

By using the food scanning feature, you consent to this AI processing. You are not required to use this feature and can opt to manually track nutrition instead.

6.3 Third-Party Processing

Google AI operates under Google's own privacy policies. For more information about how Google processes data, please visit Google's Privacy Policy.

7. Push Notifications and Communications

We may send push notifications to your mobile device to keep you informed about activity relevant to your account. This section describes the types of notifications we send, the data used to deliver them, and how you can manage your preferences.

7.1 Types of Notifications

We may send push notifications for the following purposes:

Coaching Updates: Messages from your coach, new program or meal plan assignments, and coaching relationship status changes
Subscription Updates: Changes to your subscription status, billing reminders, and renewal confirmations
Activity Reminders: Workout reminders, nutrition logging prompts, and streak maintenance alerts
Platform Announcements: New features, service updates, and important account notices

7.2 Data Used for Notifications

To deliver push notifications, we collect and use the following data:

Push Token: A unique device identifier provided by Apple Push Notification Service (APNs) or Firebase Cloud Messaging (FCM) when you grant notification permissions. This token does not contain personal information and is used solely to route notifications to your device.
User ID: Your Novion account identifier, used to determine which notifications are relevant to you based on your subscriptions, coaching relationships, and activity.

Push tokens are stored securely in our database and are automatically removed when you log out, delete your account, or revoke notification permissions.

7.3 Managing and Opting Out of Notifications

You have full control over push notifications:

iOS: Go to Settings > Notifications > Novion to disable all notifications or customize which notification types you receive.
Android: Go to Settings > Apps > Novion > Notifications to disable all notifications or manage individual notification channels.
Complete Opt-Out: Denying or revoking notification permissions on your device will prevent all push notifications from Novion. This does not affect your ability to use the Application or access any features.

Disabling push notifications does not unsubscribe you from essential account communications (such as password reset emails or critical security alerts), which are delivered via email.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

9. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including:

Accessing, correcting, or deleting your information
Opting out of certain data collection
Data portability

10. Star and Program Ratings

10.1 Public Rating System

Users can rate Stars and Programs on a 1-5 star scale. This information is used to maintain platform quality and help users make informed decisions.

10.2 Information Collected

Star rating (1-5 scale)
Optional written review
User ID (to prevent duplicate ratings)
Timestamp of rating submission

10.3 Public Visibility

Individual ratings and reviews are publicly visible
Average ratings and rating counts are displayed on Star profiles
Your username (display name) will be shown with your written reviews
Rating submissions are permanent and cannot be edited after 30 days

10.4 Purpose of Collection

Maintain content quality standards
Enable informed user decisions
Enforce Star moderation policies
Calculate quality-based metrics

10.5 Automated Moderation

Ratings are used in automated Star moderation systems. Stars with consistently low ratings (below 2.0 with 10+ ratings) may face temporary suspension. Critically low ratings (below 1.5 with 20+ ratings) may result in permanent account termination.

10.6 Rating Authenticity

We monitor rating activity for fraud and manipulation. Fake ratings, incentivized reviews, or rating manipulation may result in account suspension.

10.7 Data Retention for Ratings

Ratings are retained indefinitely to maintain historical quality metrics. If a Star's account is deleted, ratings are anonymized but aggregate statistics are preserved.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

11.1 Your Rights

Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, as well as the categories of sources, purposes, and third parties with whom we share it.
Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing: We do not sell your personal information. Because Novion requests non-personalized ads only, we also do not share your personal information for cross-context behavioral advertising. You have the right to opt out of any future sale or sharing of your data. See Sections 16 and 18.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

11.2 Categories of Personal Information Disclosed

In the preceding 12 months, we have disclosed the following categories of personal information for business purposes:

Identifiers (name, email) - disclosed to authentication and database service providers
Commercial information (purchase history) - disclosed to payment processors
Health and fitness data, including food photos - disclosed to AI service providers to identify food and estimate nutrition. Photos you add to a meal are also retained on our servers while your account is active
Device identifiers (push tokens) - used for push notification delivery via Apple Push Notification Service and Firebase Cloud Messaging
Geolocation data (precise location collected during cardio workouts you initiate) - disclosed to database hosting service providers to store your workout history; not sold or used for advertising
Health platform data (heart rate, weight, active calories, distance, and exercise sessions read from Health Connect or Apple Health with your permission) - disclosed to database hosting service providers to store your workout history; never disclosed to advertising partners, sold, or used for advertising
Device advertising identifier (free tier only) - disclosed to Google AdMob to deliver and measure non-personalized ads and to detect ad fraud

11.3 Submitting Requests

To exercise your California privacy rights, contact us at: novionapp+privacy@gmail.com. We will verify your identity before processing your request.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR).

12.1 Legal Basis for Processing

Contract Performance: Processing necessary to provide our services to you (account management, fitness tracking, content delivery)
Legitimate Interests: Processing for fraud prevention, security, service improvement, and funding the free tier through non-personalized advertising
Consent: Where you have given specific consent (e.g., AI food analysis, marketing communications)
Legal Obligation: Processing required to comply with applicable laws

12.2 Your Rights Under GDPR

Right of Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Request limitation of how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

12.3 International Data Transfers

Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the European Commission.

12.4 Submitting Requests

To exercise your GDPR rights, contact us at: novionapp+privacy@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

13. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:

Account Data: Retained while your account is active. Upon account deletion request, personal data, including every photo and image you have uploaded, is deleted immediately.
Workout and Nutrition Data: Deleted immediately when you delete your account.
Workout Location Data: Workout location and route data is retained as part of your workout history while your account is active and is deleted when you delete your account.
Health Platform Data: Heart rate, weight, active calorie, distance, and exercise-session data synced from Health Connect or Apple Health is retained as part of your workout and weight history while your account is active and is deleted when you delete your account. Deleting your Novion account does not delete records held in Health Connect or Apple Health, which you control in your device settings.
Food Photos: Photos you add to a meal are stored with that meal while your account is active and are deleted when you delete your account. Photos from nutrition label scans, and photos from scans you do not add to a meal, are not stored.
Profile, Body Progress, and Shared Workout Photos: Profile photos, body progress photos, and images attached to workouts you share are retained while your account is active and are deleted when you delete your account.
Payment and Transaction Records: Retained for 7 years after the transaction date as required by tax and financial regulations.
Ratings and Reviews: Retained indefinitely for platform quality purposes. If you delete your account, ratings are anonymized but aggregate statistics are preserved.
Analytics Data: Anonymized and retained for service improvement purposes.
External Subscriptions: Deleting your Novion account removes all data from our servers but does NOT cancel any active subscription billing through Apple App Store or Google Play. You must cancel subscriptions separately through your device settings.
Coaching Data: Coaching interaction records (messages, notes, assigned programs between coach and client) are retained for 90 days after a coaching relationship ends, then permanently deleted. Client fitness and health data remains in the client's own account and is not affected by coaching relationship changes. Coaches or clients may request early deletion of coaching interaction records by contacting novionapp+privacy@gmail.com.

14. Third-Party Service Providers

We work with the following third-party service providers who may process your personal information:

Supabase: Database hosting and user authentication
Stripe: Payment processing for one-time purchases (programs, meal plans) and creator payouts
RevenueCat: Subscription management for in-app purchases; receives limited purchase data from Apple and Google (subscription status, entitlements, transaction IDs) — no payment card details
Google (Gemini AI): AI-powered food image analysis; receives the food photo in order to identify the food and estimate its nutrition. Google's handling of that image is governed by Google's own privacy policy (see Section 6.3)
Google AdMob: Advertising on the free tier; receives your device advertising identifier and basic ad-interaction information to deliver and measure non-personalized ads and to detect ad fraud. AdMob receives no health, fitness, nutrition, or location data.
Sentry: Error tracking and application monitoring
Cloudinary: Media storage and content delivery
Apple & Google: OAuth authentication services and in-app purchase processing

Each service provider is contractually obligated to protect your data and use it only for the specific purposes we engage them for.

15. Cookies and Tracking Technologies

Our Application and website may use cookies and similar tracking technologies:

15.1 Essential Cookies

Required for basic functionality, authentication, and security.

15.2 Analytics Cookies

Help us understand how users interact with our services to improve functionality.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Application functionality.

16. Do Not Sell My Personal Information

We do not sell your personal information. We have not sold personal information in the preceding 12 months and have no plans to do so.

The free tier shows ads served by Google AdMob, which collects your device advertising identifier. Because Novion requests non-personalized ads only, this is not cross-context behavioral advertising, and we do not treat it as a sale or a share of personal information. Your health platform data, heart rate, workouts, nutrition logs, weight, progress photos, and location data are never provided to advertising partners under any circumstances. You can reset or delete your advertising identifier in your device settings, or remove ads entirely by subscribing to Novion Pro. See Section 18.

If this practice ever changes, we will update this Privacy Policy and provide you with the opportunity to opt out before any sale occurs.

17. Health Connect and Apple Health Data

Novion can optionally connect to your device health platform: Health Connect on Android and Apple Health on iOS. The connection is off until you turn it on, is controlled by permissions you grant for each data type, and can be revoked at any time in your device settings. Novion works without it.

17.1 What We Read

With your permission, we read only the following record types:

Heart rate (read only; Novion never writes heart rate back)
Weight
Active calories burned
Distance
Exercise sessions (activity type, start time, and end time)

We do not read steps, sleep, blood pressure, blood glucose, oxygen saturation, body temperature, menstrual or reproductive health, nutrition records written by other apps, or any other health record type. If you decline or revoke a permission, the related feature simply shows less detail; nothing else stops working.

17.2 What We Write Back

So that your other health apps stay in sync, Novion writes the activity you record in Novion back to your health platform: exercise sessions, active calories burned, distance, and weight entries you log in Novion. Novion never writes heart rate data, and never writes anything you did not record in Novion.

17.3 How We Use It

Heart rate is used to show average, minimum, maximum, and detailed heart rate for a workout in your own workout history.
Active calories and distance are used to show accurate calorie burn, distance, and pace for your workouts.
Weight is used to keep your Novion weight history current and to recalculate your nutrition targets as your weight changes.
Exercise sessions are used to import workouts you recorded in another app or on a watch, so your Novion history is complete.

Health platform data you sync is stored on our servers, linked to your account, and shown only to you, or to a coach you have explicitly connected under Section 5.

17.4 Limits on Health Platform Data

Health platform data, including heart rate, is never used outside the features described above. Specifically, we never:

Sell it, or share it with data brokers
Share it with advertising networks, or use it for advertising, marketing, or ad targeting of any kind
Send it to our AI providers (AI food analysis receives food photos only, as described in Section 6)
Publish it, or make it visible to other users
Use it for any purpose other than those described in Section 17.3

Health platform data is disclosed only to the database and hosting providers listed in Section 14 that store it on our behalf, and where required by law as described in Section 4.2.

17.5 Your Control and Deletion

Revoke access at any time. On Android, open Health Connect in your device settings and change or remove Novion permissions for each data type. On iOS, open Settings, then Privacy & Security, then Health, then Novion. Revoking stops all further reading and writing immediately.
Deletion is one-directional. Deleting your Novion account deletes the health data synced to our servers, but does not delete anything held in Health Connect or Apple Health. Likewise, deleting records in Health Connect or Apple Health does not delete copies already synced to Novion.
Delete synced data. Delete your account to remove it (see Section 13), or request deletion at novionapp+privacy@gmail.com.

18. Advertising and the Advertising ID

The Novion free tier is funded by advertising. Novion Pro subscribers see no ads.

18.1 Where Ads Appear

On the free tier, ads are served by Google AdMob in the following places:

Interstitial ads at natural breaks, such as after you complete a workout or log or scan a meal, subject to a frequency cap.
App-open ads when you open or return to the Application.
Rewarded ads that you choose to watch in exchange for extra in-app AI usage. Rewarded ads are always optional, and are never required to reach something you have already paid for.

18.2 The Advertising Identifier

To serve ads, the Google Mobile Ads SDK collects your device advertising identifier (the Advertising ID on Android, the Identifier for Advertisers on iOS) together with basic device and ad-interaction information, and shares it with Google. Google uses it to deliver ads, limit how often you see the same ad, measure ad performance, and detect invalid traffic and ad fraud. The advertising identifier is a resettable device-level identifier. It is not your name or email address, and Novion does not use it to identify you inside the Application.

For details on how Google handles this information, see How Google uses information from sites or apps that use our services.

18.3 Non-Personalized Ads Only

Novion requests non-personalized ads only. Ads are selected from general context rather than from a behavioral profile built about you, and ad content is limited to a general audience rating.

We never send your health or fitness data to advertising partners. Advertising partners do not receive your heart rate or any other health platform data, workouts, nutrition or food logs, weight, progress photos, location or route data, name, or email address. The advertising identifier is the only identifier shared for advertising, and no health data is ever attached to it.

18.4 Your Choices

Reset or delete the advertising identifier. On Android, open Settings, then Privacy, then Ads, where you can reset the identifier or delete it entirely. On iOS, open Settings, then Privacy & Security, then Tracking, and Settings, then Privacy & Security, then Apple Advertising.
Remove ads. Subscribing to Novion Pro removes advertising from the Application.

18.5 Children

Ads shown in Novion are limited to content rated for a general audience. As described in Section 19, the Application is not intended for children under 13.

19. Children's Privacy

Our Application is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at novionapp+privacy@gmail.com.

Users between 13 and 18 years of age may use the Application only with parental or guardian consent and supervision, as outlined in our Terms of Service.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

21. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: novionapp+privacy@gmail.com

Mailing Address: 1235 East Blvd, Ste. E #1378, Charlotte, NC 28203

For GDPR-related inquiries, EU residents may also contact their local data protection authority.