PRIVACY POLICY

Last Updated: December 29, 2025

1. Introduction

Nduro (“we,” “us,” “our”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your data when you use our website, apps, and related services (the “Services”). By using our Services, you agree to the practices described here. If you have any questions, contact us at support@nduroai.com. We may update this policy from time to time. Continued use of the Services after updates means you accept the changes. Please review this page periodically.

2. Information We Collect

We collect the following types of information to provide and improve our Services:

Personal Identifiers: Name, email, date of birth, gender, profile picture, and contact details.
- Purpose: Account setup, communication, personalization.
- Legal Basis: Contract or consent.
Payment Information: We do not store or process your credit card information directly. All In-App Purchases and subscriptions are processed securely by Apple (via the App Store) or Google (via Google Play). We receive only a transaction receipt or token to validate your subscription status.
- Purpose: Verifying active subscriptions and unlocking premium features.
- Legal Basis: Contract.
Health and Fitness Data: Workout data (distance, pace, heart rate, power, cadence), fueling details, injury status, and location data.
- Purpose: Providing personalized training and fueling recommendations via AI.
- Legal Basis: Explicit Consent. (You provide this when you connect your wearable device).
Technical Data: IP address, device information, usage data, cookies, and server logs.
- Purpose: Analytics, service improvement, and security.
- Legal Basis: Legitimate interest.
User Content: Photos, feedback, profile information, and in-app communications.
- Purpose: Community functions and feature use.
- Legal Basis: Consent.
Inferred Data: Insights derived from your inputs and other sources.
- Purpose: Improving AI coaching and personalization.
- Legal Basis: Consent.

3. Apple HealthKit & Wearable Data Restrictions

We connect with Apple HealthKit, Garmin, and other wearable databases to provide our Services. Regarding this data:

No Advertising: We will never use data collected from Apple HealthKit or other wearables for advertising, marketing, or data mining purposes.
No Sale to Third Parties: We will not sell your wearable data to advertising platforms, data brokers, or information resellers.
Context Only: Health data is used strictly for health management, fitness tracking, and AI coaching purposes.

4. How We Use Your Data

To deliver, maintain, and improve the Services.
To generate AI-driven training and fueling recommendations.
To validate your subscription status via Apple StoreKit.
To communicate with you about your account, updates, and support.
To send marketing communications with your consent (you may opt out at any time).
To analyze usage patterns to improve features and user experience.
To comply with legal requirements.
To protect user safety, prevent fraud, and enforce policies.

Important Disclaimer: Fueling and training guidance is provided for informational purposes only. Nduro is not liable for injuries, illness, or adverse effects. Always consult a healthcare professional before making changes to your exercise or nutrition routine.

5. Sharing Your Information

We do not sell or rent your information. We share your data only with trusted third parties when necessary to provide and improve the Services, such as:

Hosting providers for secure data storage.
Apple and Google (for payment processing and subscription management only).
Communication and support tools for customer service.
Analytics providers to improve functionality.
Advertising partners with your consent.
AI partners, using anonymized data, with your consent.
Legal authorities, when required by law.

6. International Data Transfers

Nduro is based in the United States. If you access the Services from the UK or EEA, your data will be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) and the Data Privacy Framework (DPF) to ensure your data remains protected to GDPR standards.

7. Cookies and Tracking

We use cookies and similar technologies to:

Remember your preferences and login details.
Analyze usage and improve Services.
Support app functionality.
Provide personalized marketing with your consent. You can manage cookies in your browser or device settings.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data (Use the "Delete Account" feature in the app settings).
Restrict or object to processing.
Request data portability.
Withdraw consent at any time.
Opt out of marketing communications.
Manage Subscriptions: You must manage your subscription, cancellations, and auto-renewals directly through your Apple ID or Google Play settings, as we do not control your billing data.

9. California Resident Rights (CCPA)

If you are a California resident, you have the right to:

Opt-Out of "Sale/Sharing": Nduro does not sell your personal data. We may "share" data (as defined by CCPA) with analytics providers to improve our app. You may opt out of this by contacting support.
Limit Use of Sensitive Info: You may limit our use of your Health Data strictly to providing the Training Service.

10. Data Retention

We retain personal data only as long as necessary to provide Services, meet legal obligations, resolve disputes, and enforce agreements.

11. Security

We use safeguards including encryption, secure servers, access controls, and audits. While no system is completely secure, we will notify users and regulators of any data breach as required by law.

12. Account Assistance Mode

With your consent, authorized employees may temporarily access your account for troubleshooting. This access is secure, logged, and time-limited.

13. Children’s Privacy

Our Services are not intended for users under 18. We do not knowingly collect data from minors.

14. AI and Automated Coaching

Our Services use artificial intelligence to generate recommendations.

How it Works: We analyze your data to provide probabilistic training schedules. These are not medical prescriptions.
Human Intervention: While the initial plan is automated, you have the right to request a manual review of any significant account action (like a ban) or critical decision by contacting support.
Data Training: We use anonymized, non-identifiable data to improve the underlying logic of our AI models. Your personal data is used solely to generate your own recommendations.

15. Changes

We may revise this Privacy Policy at any time. Major changes will be communicated in the app, by email, or on this page.

16. Contact

Email: support@nduroai.com

PRIVACY POLICY

Cookie Policy