Privacy Policy

At Niftypwm, we are committed to collecting only the information necessary to provide and improve our services. We do not sell, rent, or trade your personal information to third parties.

Personal Information You Provide:

• Account Information: Email address, username, and encrypted password when you register.
• Profile Data: Optional display name, avatar, and preferences you choose to share.
• Communication Records: Messages, feedback, or support inquiries you send to us.
• Payment Information: Billing details processed securely through our PCI-compliant payment partners.

Information Collected Automatically:

• Device Data: Device type, operating system, browser version, and unique device identifiers.
• Usage Analytics: Feature interaction, session duration, and navigation patterns to improve user experience.
• Log Data: IP address, access timestamps, and referral URLs for security and diagnostics.

We use the information we collect for the following legitimate purposes:

• Service Delivery: To create and manage your account, authenticate access, and provide core functionality.
• Personalization: To tailor content, recommendations, and settings to your preferences.
• Communication: To respond to your inquiries, send service-related notifications, and (with consent) marketing updates.
• Security & Fraud Prevention: To detect, investigate, and prevent unauthorized access or malicious activity.
• Analytics & Improvement: To understand usage trends and continuously enhance the Niftypwm experience.
• Legal Compliance: To fulfill our obligations under applicable laws and regulations.

We process your data based on one or more of the following legal grounds: your consent, contractual necessity, legitimate interests, or legal obligation.

We do not sell your personal information. We may share data only in the following limited circumstances:

• Service Providers: Trusted third-party vendors who assist with hosting, analytics, payment processing, and customer support. These partners are bound by strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or governmental authority, and only to the extent necessary.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with appropriate safeguards.
• Consent-Based Sharing: Any other sharing will only occur with your explicit, informed consent.

We implement industry-standard technical and organizational measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction.

• Encryption: All data in transit is protected using TLS 1.2+ encryption. Sensitive data at rest is encrypted using AES-256.
• Access Controls: Strict role-based access controls ensure only authorized personnel can access user data.
• Infrastructure Security: Our servers are hosted in secure, SOC 2 Type II certified data centers with 24/7 monitoring.
• Regular Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing.
• Incident Response: A documented incident response plan ensures rapid action in the unlikely event of a breach.

While no system is 100% secure, we are committed to maintaining the highest standards of data protection and will promptly notify you of any material security incident as required by law.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Portability: Receive your data in a structured, machine-readable format.
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Object: Opt out of processing for direct marketing or legitimate interests.
• Right to Withdraw Consent: Revoke previously granted consent at any time.

To exercise any of these rights, please contact us at vad103pilates@gmail.com. We will respond within 30 days as required by applicable law.

Niftypwm uses cookies and similar technologies to enhance your experience. Here's what we use:

• Essential Cookies: Required for core functionality such as authentication and security. Cannot be disabled.
• Functional Cookies: Remember your preferences and settings for a personalized experience.
• Analytics Cookies: Help us understand how users interact with Niftypwm. Data is aggregated and anonymized.

We do not use third-party advertising cookies or cross-site tracking. You can manage your cookie preferences through your browser settings at any time. Disabling certain cookies may affect functionality.

Niftypwm is not intended for children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take immediate steps to delete such information.

If you are a parent or guardian and believe your child has submitted personal information to us, please contact us at vad103pilates@gmail.com and we will promptly address the matter.

Niftypwm operates globally, and your information may be processed in countries other than your own. When we transfer personal data across borders, we implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs): EU-approved contractual protections for international transfers.
• Adequacy Decisions: Transfers to jurisdictions deemed to provide adequate protection by relevant authorities.
• Supplementary Measures: Additional technical and organizational safeguards as needed.

By using Niftypwm, you acknowledge that your information may be transferred to and processed in countries outside your residence, with protections as described herein.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• We will notify you via email or in-app notification at least 14 days prior to the changes taking effect.
• Continued use of Niftypwm after the effective date constitutes acceptance of the updated policy.

We encourage you to review this policy periodically to stay informed about how we protect your information.