Privacy Policy

NGFIT

Privacy Policy

Effective date: May 10, 2026

NGFIT (“we,” “us,” or “our”) provides a precision-wellness coaching platform. This Privacy Policy explains what information we collect from members and visitors, how we use it, who we share it with, and the choices you have. By creating an NGFIT account or using our services, you agree to this Privacy Policy.

NGFIT is not a medical practice. We do not diagnose disease or medical conditions. We work alongside your primary physician to help you optimize your health. Some of the data we handle (genetic, biomarker, wearable) is health-adjacent; we treat it with the care described below.

1. Information We Collect

1.1 Information You Provide

  • Account information: name, email address, login, password (stored hashed).
  • Profile and onboarding details: goals, lifestyle context, preferences, and any information you choose to share with your coach during discovery calls or check-ins.
  • Content you upload: lab results, biomarker reports, genetic sequencing data, photos, notes, or other documents you provide to your coaching team.
  • Communications: messages you send to your coach or NGFIT support.
  • Payment information: when paid subscriptions launch, billing details are processed by our payment processor (Stripe) and are not stored on NGFIT servers.

1.2 Information Collected Automatically

  • Usage data: log files, IP address, browser type, pages viewed, timestamps. Standard web-server logs.
  • Session cookies: required for login and session continuity. NGFIT does not use marketing or advertising cookies.
  • Plan completion data: when you check off a protocol task in your dashboard or your wearable auto-completes one, we record the completion timestamp, source, and which protocol it relates to.

1.3 Information from Third-Party Integrations

If you connect a third-party account to NGFIT (currently Oura; in the future Polar, Whoop, Garmin, Withings, EliteHRV, Fitbit, Apple Health, or a calendar/task service), we receive data from those services on your behalf and only with your explicit authorization through that service’s OAuth flow. Examples of what we may receive:

  • Sleep data: total sleep duration, sleep score, sleep stages, sleep efficiency, heart rate during sleep, HRV, respiratory rate, body temperature deviation.
  • Readiness/recovery data: readiness score, HRV trend, resting heart rate, recovery indicators.
  • Activity data: steps, calories, workout sessions, intensity metrics.
  • Heart rate time series across the day.
  • User-applied tags (alcohol, illness, travel, period, etc.) you log in your wearable’s app.

You can disconnect any third-party integration at any time from your member dashboard. Disconnecting stops new data from arriving; historical data we have already stored is retained until you request deletion (see Section 7).

2. How We Use Information

  • To provide the NGFIT service: render your dashboard, generate and update your personal protocols, log completions, calculate your momentum score.
  • To enable your coaching team to support you, including reviewing plan items, completions, and (with your permission) call transcripts.
  • To communicate with you: account notices, plan changes, member updates.
  • To improve and secure the service: troubleshoot issues, prevent abuse, analyze usage patterns in aggregate.
  • To comply with legal obligations.

We do not sell your personal information. We do not share your personal information with advertisers or data brokers.

3. Service Providers We Share Data With

We use the following third-party processors. Each only receives the minimum data required to perform its function:

  • WP Engine — website hosting and database. Stores account, plan, completion, and synced wearable data.
  • Todoist — task management. Your protocol items are mirrored as tasks in a member-specific Todoist project.
  • Anthropic — when your coach uses the “Build plan from transcript” feature, the transcript you provide is sent to Anthropic’s Claude API for parsing into action items. Per Anthropic’s API policy, this data is not used to train their models.
  • Wearable providers you connect (Oura, etc.) — we receive data from them; we do not push data to them.
  • Email service — for transactional emails (password resets, account notices). To be selected.
  • Payment processor — Stripe, for paid subscriptions when launched.

4. Data Retention

We retain personal information for as long as your account is active. When you cancel, we retain account data for up to 90 days to allow for reactivation, after which it is permanently deleted unless retention is required by law. Aggregated, de-identified data may be retained longer for service improvement.

5. Security

We protect your data with encryption in transit (TLS/HTTPS), restricted access to production systems, and standard WordPress and WP Engine security practices. No system is perfectly secure; please use a strong, unique password and notify us promptly if you suspect unauthorized access to your account.

6. Children

NGFIT is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

7. Your Rights and Choices

  • Access: request a copy of the personal information we hold about you.
  • Correction: ask us to correct inaccurate information.
  • Deletion: request that we delete your account and associated data, subject to legal retention requirements.
  • Portability: request your data in a structured, machine-readable format.
  • Withdraw consent: disconnect third-party integrations at any time from your dashboard.

To exercise any of these rights, email admin@ngfit.com. We will respond within 30 days.

8. California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, the right to opt out of the sale of personal information (NGFIT does not sell personal information), and the right to non-discrimination for exercising these rights.

9. International Users

NGFIT is operated from the United States. If you access NGFIT from outside the U.S., your information will be transferred to and processed in the U.S., which may have data protection laws different from those in your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify members by email or via an in-dashboard notice. Continued use of NGFIT after a change constitutes acceptance.

11. Contact

Questions, requests, or concerns: admin@ngfit.com.

← Return to NGFIT · Terms of Service
Scroll to Top