1. Scope

This Privacy Policy explains how Niibu Inc. and its affiliates collect, use, disclose, store, and otherwise process personal information in connection with the Niibu website, mobile applications, support channels, booking flows, subscriptions, communications, and related services.

This Privacy Policy applies to visitors, customers, account holders, and other individuals whose personal information is processed in connection with Niibu's consumer-facing marketplace platform. If Niibu introduces separate privacy terms for a specific product, program, or jurisdiction, those terms may supplement this Privacy Policy.

2. Who We Are

Niibu Inc. is a Delaware corporation and the operator of the Niibu platform. For purposes of applicable privacy law, Niibu Inc. is generally the controller of the personal information described in this Privacy Policy unless a different role is expressly stated.

If you have privacy questions, you may contact Niibu at privacy@niibu.com.

3. Information We Collect

3.1 Information You Provide Directly

• Account and profile information, such as your name, email address, phone number, password, city, language preference, and profile preferences.
• Booking and service information, such as requested services, appointment details, scheduling preferences, notes, communications, ratings, reviews, and support requests.
• Subscription and billing information, such as selected plan, renewal status, invoices, transaction history, billing address, and limited payment-related metadata.
• Identity or verification information where needed for fraud prevention, safety, legal compliance, or higher-risk transactions.
• Communications you send to Niibu, including messages to customer support, survey responses, feedback, and marketing preferences.
• Information you voluntarily provide in forms, waitlists, promotions, referrals, or other interactive features.

3.2 Information Collected Automatically

• Device and browser data, such as IP address, device identifiers, operating system, browser type, app version, language settings, and time zone.
• Usage data, such as pages viewed, session events, taps, clicks, search actions, referral URLs, approximate location inferred from IP, and timestamps.
• Log, diagnostic, and performance data used to operate, secure, troubleshoot, and improve the platform.

3.3 Information From Other Sources

• Payment processors and financial service providers.
• Marketing, analytics, and advertising partners.
• Authentication, fraud prevention, and security vendors.
• Public sources and service providers where needed to verify identity, prevent abuse, or comply with law.
• Mobile platform providers or external services if you subscribe or pay through them.

4. Health and Fitness Data

If you choose to connect the Niibu mobile application to Health Connect on Android or Apple Health through Apple's HealthKit framework on iOS, Niibu may access health and fitness data only after you grant permission. This access is optional and is used only for the user-facing features described below.

4.1 Data We Access

Depending on the permissions you grant and the data available in Health Connect or Apple Health, the app may access:

• Steps and physical activity.
• Heart rate.
• Active calories.
• Dietary energy.
• Hydration and water intake.
• Sleep data.

4.2 How We Use Health and Fitness Data

Niibu uses this data solely to display your wellness dashboard and provide health and wellness insights within the app. The data is processed locally on your device. Niibu does not use health and fitness data for advertising, marketing, sale, or any unrelated purpose.

4.3 Permissions and User Control

Niibu requests access through the permission controls provided by Android or iOS. You choose whether to grant access and which data types Niibu may access. You can change or revoke permissions at any time through Health Connect's app-permission settings on Android or the Health app or Health privacy settings on iOS. Revoking a permission stops Niibu from accessing that data in the future and may cause related dashboard or insight features to be incomplete or unavailable.

4.4 Storage, Retention, Deletion, and Sharing

The Niibu app processes health and fitness data locally on your device. Niibu does not upload this data to, or store it on, Niibu's servers and does not maintain a server-side copy.

Niibu does not sell, rent, disclose, or share this data with third parties, including advertising, analytics, cloud-hosting, or customer-support providers.

You can manage or delete the underlying records using Health Connect or Apple Health. Revoking Niibu's permission prevents future access but does not delete records stored by Health Connect or Apple Health. Deactivating or deleting a Niibu account does not affect records held by those platform services. Because Niibu does not store this health and fitness data on its servers, there is no server-side health-data copy associated with your Niibu account to retain or delete.

4.5 Security

Access to health and fitness data is controlled by the permission and security mechanisms of your device and the applicable platform. Niibu requests only the data types needed for the wellness dashboard and health insights and keeps processing on-device.

5. How We Use Information

• To create and administer accounts and subscriptions.
• To provide the platform, process bookings, coordinate services, and deliver customer support.
• To process payments, prevent fraud, manage disputes, and protect the integrity of the platform.
• To personalize experiences, recommendations, search results, and customer communications.
• To measure performance, troubleshoot technical issues, improve features, and develop new services.
• To send administrative notices, service-related communications, security alerts, and transaction messages.
• To send marketing communications where allowed by law and subject to your choices.
• To enforce terms, protect rights, investigate misuse, and comply with legal or regulatory obligations.

6. Legal Bases for Processing

Where privacy laws require a legal basis, Niibu generally relies on one or more of the following:

• Performance of a contract — such as providing the services you request and administering your subscription.
• Legitimate interests — such as improving the platform, preventing fraud, securing systems, and understanding user engagement.
• Consent — where required by law, including for optional access to health and fitness data, certain cookies, or optional marketing activities.
• Legal obligations — such as recordkeeping, tax, accounting, consumer protection, and response to lawful requests.

7. How We Share Information

Niibu may share personal information only as reasonably necessary for the purposes described in this Privacy Policy. The health and fitness data described in Section 4 is not uploaded to Niibu and is not shared with any of the recipients listed below.

• With independent service providers when needed to fulfill a booking or customer request.
• With payment processors, billing vendors, card networks, and financial institutions to process payments and reduce fraud.
• With cloud hosting, analytics, messaging, customer support, communications, security, and infrastructure providers working on Niibu's behalf.
• With corporate affiliates involved in operating or supporting the platform.
• With legal, regulatory, or government authorities where required by law, subpoena, court order, or to protect rights, safety, or platform integrity.
• In connection with an actual or proposed merger, financing, reorganization, acquisition, sale of assets, or similar corporate transaction.
• With your direction or consent.

8. Cookies and Similar Technologies

Niibu may use cookies, SDKs, pixels, local storage, and similar technologies to remember preferences, maintain sessions, measure traffic, improve performance, and support analytics and marketing activities.

Where required by law, Niibu will provide notice and obtain consent for non-essential cookies or similar technologies. You may also be able to control cookies through your browser or device settings, although certain features may not function properly if some technologies are disabled.

9. Payments, Fraud Prevention, and Security

Payment information is generally collected and processed by third-party payment processors. Niibu may receive limited payment-related information such as payment status, last four digits, card brand, billing country, and dispute information, but Niibu does not typically store full card numbers.

Niibu may use personal information to detect suspicious activity, investigate misuse, prevent fraud, manage chargebacks, secure accounts, and maintain the reliability of the platform.

10. Data Retention

Niibu retains personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, and protect the platform.

The health and fitness data described in Section 4 is not retained on Niibu servers. You can revoke access at any time and manage or delete the underlying records through Health Connect or Apple Health.

Retention periods vary depending on the type of information, the sensitivity of the data, the purpose of processing, and applicable legal requirements. When personal information is no longer needed, Niibu will delete, anonymize, or otherwise de-identify it where appropriate.

11. International Data Transfers

Niibu may process information in the United States and other countries where Niibu or its service providers operate. Data protection laws in those countries may differ from the laws where you live.

Where required by law, Niibu will use appropriate transfer mechanisms and safeguards for cross-border transfers, which may include contractual protections or other legally recognized measures.

12. Your Privacy Rights

Depending on your jurisdiction, you may have some or all of the following rights, subject to legal limitations and verification requirements:

• Access the personal information Niibu holds about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of certain information.
• Object to or request restriction of certain processing.
• Withdraw consent where processing is based on consent.
• Request data portability where applicable.
• Opt out of certain marketing communications.
• Appeal a privacy decision where local law grants that right.

13. Region-Specific Notices

13.1 United States

Residents of certain U.S. states may have rights to know, access, correct, delete, or opt out of certain data uses under applicable state privacy laws. Niibu does not sell personal information for money. Niibu may use information for analytics, service improvement, security, and marketing as permitted by law.

If Niibu engages in any activity that requires a specific opt-out right under applicable state law, Niibu will provide the required mechanism.

13.2 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you may have rights under applicable data protection laws, including rights of access, rectification, erasure, restriction, objection, portability, and complaint to a supervisory authority.

13.3 Canada

If you are in Canada, Niibu processes personal information in accordance with applicable federal and provincial privacy laws. You may request access to or correction of your personal information, subject to applicable exceptions.

13.4 Brazil, Mexico, Argentina, and Other Jurisdictions

If you are located in Brazil, Mexico, Argentina, or another jurisdiction with mandatory privacy rights, Niibu will honor rights and disclosures required by applicable local law to the extent the law applies.

14. Children's Privacy

Niibu is not directed to children and is not intended for individuals who are below the minimum legal age required to use the platform in their jurisdiction. Niibu does not knowingly collect personal information directly from children in violation of applicable law. If you believe a child has provided personal information to Niibu unlawfully, contact privacy@niibu.com.

15. Third-Party Links and Services

The platform may contain links to third-party websites, tools, payment methods, or services. Niibu is not responsible for the privacy practices of third parties. Their privacy policies and terms govern their processing of information.

16. Data Security

For health and fitness data, access is controlled through Health Connect or Apple Health permissions, and processing occurs locally on the user's device as described in Section 4.

Niibu uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and Niibu cannot guarantee absolute security.

17. Changes to This Privacy Policy

Niibu may update this Privacy Policy from time to time. If Niibu makes material changes, it may provide notice by posting the updated policy, updating the effective date, or using other appropriate communications. Your continued use of the platform after the updated policy becomes effective means the updated policy will apply to future processing, to the extent permitted by law.

18. Contact Us

For privacy-related questions or requests, you may reach Niibu through the following channels: