Privacy Policy
Introduction
Welcome to Nook. We take your privacy seriously. This policy explains how we collect, use, and protect your personal information.
What We Collect
To provide you with personalized fitness and nutrition coaching, we collect:
- Personal information (name, email, date of birth, biological sex)
- Health metrics (height, weight, waist circumference, pregnancy status)
- Fitness data (workout logs, exercise performance, progress tracking)
- Nutrition information (meal logs, dietary preferences)
- Conversation history with your coach
- Location data (if you choose to share gym or workout locations)
Why We Collect Your Data
The more your coach knows about you, the better the guidance. Your data enables us to:
- Create personalized workout plans adapted to your fitness level and goals
- Provide nutrition advice tailored to your needs
- Track your progress and adjust programs accordingly
- Remember your preferences, limitations, and achievements
- Ensure safe and effective training recommendations
You are always free to decline sharing specific information. However, limiting data may reduce how personalized your coaching experience can be.
AI-Powered Coaching
Your trainers and coordinators are powered by artificial intelligence. All training content is supervised by certified fitness professionals and our customer service team working behind the scenes.
Data Storage & Processing
Your data is stored in France on OVH servers, ensuring compliance with European data protection standards (GDPR).
AI Processing: We use OpenAI's language models to power your AI coach. This means fragments of your conversations are sent to OpenAI's servers in the United States for processing. These fragments may include:
- Your messages and questions to your coach
- Context about your fitness goals and progress
- Health and workout data shared in conversations
OpenAI processes this data according to their privacy policy and data processing agreements. We work with OpenAI under data processing terms that require them to protect your information and not use it to train their models.
Email Communications
We use MailerSend (provided by MailerLite) to deliver transactional emails such as login links, notifications, and account updates. When we send you an email, your email address and message content are processed by MailerSend's infrastructure.
MailerLite is GDPR-compliant and acts as our data processor. You can review their data processing agreement at mailerlite.com/legal/data-processing-agreement.
Payment Processing
We use Stripe to process subscription payments. When you subscribe to a plan, your payment information (credit card details, billing address) is collected and processed directly by Stripe. We never store your complete payment card details on our servers.
Stripe is PCI-DSS compliant and GDPR-compliant. Your payment data is handled according to Stripe's privacy policy. You can review their privacy policy at stripe.com/privacy.
How We Protect Your Data
- All data is encrypted in transit and at rest
- Access to personal information is restricted to authorized personnel only
- We use secure authentication methods
- Regular security audits and updates
- GDPR-compliant data handling practices
Your Rights
Under GDPR and applicable privacy laws, you have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for data processing
- Object to certain types of processing
Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are legally required to retain certain data.
Sharing Your Data
We do not sell your data. We only share your information:
- With OpenAI for AI processing (as described above)
- With payment processors for subscription management
- When required by law or legal process
- With your explicit consent
Cookies
We use only essential cookies necessary for authentication and site functionality. See our Cookie Policy for more details.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the platform.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
Last updated: November 2025