Privacy Policy

Introduction

Your privacy is important to us.

This Privacy Policy explains how Fit Rewards collects, uses, stores and shares your personal information when you use the Fit Rewards mobile application, website, and related services (collectively, the Service).

We have written this Privacy Policy to help you understand:

• what personal information we collect;
• why we collect it;
• how we use it;
• who we may share it with;
• how we protect it; and
• the choices and rights you have regarding your information.

By creating an account or using the Service, you acknowledge that your personal information will be handled in accordance with this Privacy Policy.

This Privacy Policy should be read together with our Terms of Use.

1. Who We Are

Fit Rewards Limited ("Fit Rewards", "we", "our", or "us") is a company incorporated in New Zealand.

We operate the Fit Rewards platform, which rewards Users for participating in eligible physical activity and provides access to Rewards, Challenges, Prize Draws and other features.

We are committed to protecting your privacy and handling your personal information responsibly.

Fit Rewards is designed for Users in New Zealand and Australia and complies with applicable privacy laws, including the New Zealand Privacy Act 2020. We also take reasonable steps to comply with the Australian Privacy Act 1988 (Cth) where it applies.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details provided at the end of this Privacy Policy.

2. Personal Information We Collect

The personal information we collect depends on how you use the Service and the features you choose to use.

The types of personal information we may collect include:

Account Information

When you create an account, we collect information such as:

• your name;
• email address;
• password (stored securely in encrypted form);
• date of birth;
• sex;
• country or region; and
• any profile information you choose to provide.

You may choose to provide or customise certain profile information, such as a profile image, which may be visible to other Users when you participate in community features.

Health & Activity Information

We collect health and activity information that is necessary to operate the Service. This is explained in more detail in Section 3 below.

Subscription Information

If you subscribe to Fit Rewards Club, we receive information relating to your subscription, including:

• subscription status;
• subscription type;
• purchase platform (Apple App Store or Google Play);
• renewal and expiry dates; and
• transaction identifiers where provided by Apple or Google.

We do not collect or store your payment card details.

Reward Activity

We collect information about how you use the Service, including:

• Fit Points earned and redeemed;
• rewards redeemed;
• Challenge participation;
• Prize Draw entries;
• promotional code redemptions; and
• other activity relating to your use of the Service.

Device & Technical Information

When you use the Service, we may automatically collect information such as:

• device type;
• operating system;
• app version;
• device identifiers;
• IP address;
• language and region settings;
• crash reports; and
• diagnostic information that helps us operate and improve the Service.

Communications

If you contact us or interact with us, we may collect information contained in those communications, including support requests, feedback and survey responses.

3. Health & Activity Information

Because Fit Rewards rewards physical activity, we need to collect certain health and activity information to provide the Service.

Depending on the permissions you choose to grant and the features you use, this may include:

• workouts and activity sessions;
• step counts;
• activity duration;
• activity type;
• activity dates and times;
• approximate location information associated with activities where provided by a connected service;
• age;
• sex;
• optional height;
• optional weight; and
• other activity information you choose to share through supported health and fitness services.

We collect this information to:

• verify eligible activity;
• award Fit Points;
• enable Challenges and Prize Draws;
• personalise your experience;
• monitor the performance of the Service;
• prevent fraud and misuse; and
• improve our products and services.

We only collect the health and activity information that is reasonably necessary to provide the Service.

Health and activity information is handled with additional care because we recognise that it is personal and sensitive.

Information collected through connected health and fitness services is subject to the permissions you choose to grant. You can manage or revoke those permissions at any time through the relevant connected service.

4. How We Use Your Information

We use your personal information to provide, operate and improve the Service.

Depending on how you use Fit Rewards, we may use your information to:

• create and manage your account;
• verify your identity and maintain account security;
• track eligible physical activity;
• calculate and award Fit Points;
• enable Challenges, Prize Draws and rewards;
• process Fit Rewards Club subscriptions and Sponsored Memberships;
• communicate with you about your account and the Service;
• provide customer support;
• improve and develop new features;
• monitor the performance, reliability and security of the Service;
• detect and prevent fraud, misuse or other unauthorised activity;
• comply with legal and regulatory obligations; and
• protect the rights, property and safety of Fit Rewards, our Users and our partners.

Where practical, we use aggregated or de-identified information for reporting, analysis and product improvement.

We do not sell your personal information or disclose it to third parties for their own independent marketing or advertising purposes. We only share personal information where it is necessary to provide the Service, operate a Sponsored Membership, fulfil a reward you have chosen to redeem, comply with legal obligations, or as otherwise described in this Privacy Policy.

Leaderboards & Community Features

Fit Rewards may include community features such as leaderboards that allow Users to compare their activity and progress with other Users.

Depending on the feature, other Users may be able to see limited information about you, such as your first name, profile image, activity totals, ranking or other information that is displayed within the Service.

We design these features to share only the information reasonably necessary for the feature to operate. The information displayed may change as new community features are introduced.

Where available, you may be able to manage certain privacy or visibility settings within the Service.

5. Connected Health & Fitness Services

Fit Rewards allows you to connect supported health and fitness services so that eligible activity can be verified and rewarded.

Direct Integrations

Fit Rewards currently integrates directly with:

• Apple Health; and
• Health Connect.

If you choose to connect one of these services, Fit Rewards will only access the information that you authorise through your device and the permissions you grant.

You can change or revoke these permissions at any time through your device settings or the relevant health platform.

Supported Third-Party Integrations

Fit Rewards also supports selected third-party health and fitness services, including:

• Garmin;
• Google Health (including Fitbit); and
• other supported services that we may make available from time to time.

Some supported integrations are facilitated by trusted technology providers. This currently includes Spike API, which securely transfers authorised activity information from supported third-party services to Fit Rewards.

Spike API only transfers information that you have authorised through the relevant health or fitness service.

Removing a connected service or revoking permissions will prevent new activity information from being shared with Fit Rewards. It will not automatically delete information that has already been collected. Information already collected will continue to be handled in accordance with this Privacy Policy.

Because these services are operated by third parties, your use of them is also subject to their own privacy policies and terms of use.

6. Sponsored Memberships

Some Users receive access to Fit Rewards Club through a Sponsored Membership provided by an employer, health insurer, gym, sporting organisation, community organisation, event organiser or another approved Fit Rewards partner.

Where your account is linked to a Sponsored Membership, we may share personal information with the sponsoring organisation where it is reasonably necessary to administer the sponsored programme, verify eligibility, measure participation, provide programme reporting, or deliver the services associated with that programme.

The information shared with a sponsoring organisation may vary depending on the programme and the services they have chosen to provide. We will only share information that is reasonably necessary for the operation and administration of the sponsored programme and that is consistent with this Privacy Policy.

Depending on the nature of the programme, this may include information such as:

• whether your account has been activated;
• your membership status;
• participation in Challenges or campaigns;
• aggregated engagement statistics;
• programme reporting, including individual or aggregated participation and activity metrics where this forms part of the sponsored programme and has been communicated to you; and
• other information that you have been notified may be shared.

Unless otherwise stated or where it is necessary for the operation of the sponsored programme and has been communicated to you, we do not share optional height, optional weight or detailed health and activity information beyond what is reasonably necessary to administer the programme. Wherever reasonably practicable, we use aggregated or de-identified information for reporting.

Where reporting is provided, we aim to use aggregated or de-identified information wherever reasonably practicable.

7. Analytics & Service Improvement

We use trusted technology providers to help us operate, secure and improve the Service.

These providers currently include:

• Firebase Analytics, which helps us understand how Users interact with the Service, identify crashes, monitor performance and improve the overall User experience; and
• Google Cloud, which provides the infrastructure used to securely host and process much of the information used by the Service.

Information collected through analytics tools helps us understand how features are being used, identify technical issues and improve future versions of the Service.

Where possible, we use aggregated or de-identified information for analytics and reporting.

Our service providers are only authorised to process personal information on our behalf for the purposes of providing services to Fit Rewards. They are not permitted to use your personal information for their own unrelated purposes.

8. Sharing Your Personal Information

We only share your personal information where it is necessary to operate the Service, provide features you have chosen to use, comply with legal obligations, or otherwise as described in this Privacy Policy.

Depending on how you use Fit Rewards, we may share personal information with:

• our trusted service providers who help us operate the Service;
• third-party health and fitness services that you choose to connect;
• Apple or Google in connection with subscriptions purchased through their app stores;
• Reward Partners where necessary to fulfil a reward you have chosen to redeem;
• organisations providing your Sponsored Membership, as described in Section 6;
• professional advisers, auditors or insurers where reasonably necessary;
• government agencies, regulators or law enforcement where required by law; and
• another organisation if Fit Rewards is involved in a merger, acquisition, business sale or restructure.

Where we share personal information, we take reasonable steps to ensure it is only used for the purpose for which it was shared.

We do not sell your personal information to third parties.

9. Reward Partners

Fit Rewards works with Reward Partners to provide discounts, offers, products, services and experiences through the Service.

In most cases, you can browse and redeem rewards without us sharing your personal information with the Reward Partner.

Some rewards require us to share limited personal information so the Reward Partner can fulfil the reward you have chosen to redeem. For example, this may include your name or email address where a reward needs to be delivered directly to you.

We will only share the information reasonably necessary to fulfil the reward.

Once you interact directly with a Reward Partner or visit their website, your relationship with that Reward Partner is governed by their own privacy policy and terms.

Affiliate Links

Some rewards and offers may include affiliate tracking links.

When you choose to use an affiliate link, the relevant affiliate network or Reward Partner may collect information about your interaction with their website or offer in accordance with their own privacy policy.

Affiliate tracking helps us measure the success of our partnerships and supports the ongoing operation of Fit Rewards.

10. Communications

We communicate with you in several ways to help operate the Service and keep you informed.

Service Communications

Some communications are necessary to provide the Service and cannot be opted out of while you continue to use Fit Rewards.

These may include:

• account verification;
• password resets;
• security alerts;
• subscription information;
• reward confirmations;
• Challenge and Prize Draw updates;
• important changes to the Service;
• updates to our Terms of Use or Privacy Policy; and
• other communications necessary to operate your account.

Marketing Communications

We may also send information about:

• new rewards;
• partner offers;
• promotions;
• product updates;
• competitions; and
• other marketing communications.

You can unsubscribe from marketing emails at any time by using the unsubscribe link within the email or by updating your communication preferences where available.

Unsubscribing from marketing communications will not prevent you from receiving essential service communications.

Push Notifications

If you enable push notifications, we may send notifications relating to:

• workout reminders;
• activity tracking;
• rewards;
• Challenges;
• subscription updates;
• account security; and
• other important information about the Service.

You can manage push notification preferences at any time through your device settings.

11. Cookies & Similar Technologies

Our website uses cookies and similar technologies to help provide and improve your experience.

Cookies may be used to:

• remember your preferences;
• understand how visitors use our website;
• measure website performance;
• improve website functionality; and
• support our marketing activities.

You can manage or disable cookies through your browser settings. Disabling some cookies may affect the functionality of our website.

The Fit Rewards mobile app does not use browser cookies. Instead, it uses device identifiers and similar technologies provided by our service providers to support analytics, security and app functionality.

12. Data Storage

We take reasonable steps to ensure that your personal information is stored securely and is only accessible by authorised people who need it to perform their role.

Fit Rewards uses trusted cloud infrastructure and service providers to store and process personal information required to operate the Service.

At the time of publishing this Privacy Policy, much of our personal information is securely stored using Google Cloud infrastructure located in Australia.

From time to time, we may use additional trusted service providers to help us operate and improve the Service.

We regularly review our service providers to help ensure they continue to meet appropriate security and privacy standards.

13. Overseas Transfers

Because we use trusted technology providers to operate the Service, your personal information may be processed or accessed in countries other than the country in which you live.

For example, some of our service providers may process information outside New Zealand or Australia while providing services to Fit Rewards.

Where we transfer personal information internationally, we take reasonable steps to ensure that appropriate safeguards are in place and that personal information continues to receive a level of protection that is consistent with applicable privacy laws.

By using the Service, you acknowledge that your personal information may be transferred, processed or stored in accordance with this Privacy Policy.

14. Data Retention

We retain personal information only for as long as it is reasonably necessary to:

• provide the Service;
• maintain your account;
• fulfil our legal, accounting and regulatory obligations;
• resolve disputes;
• enforce our agreements; and
• protect the legitimate interests of Fit Rewards.

The length of time we retain information depends on the type of information and the purpose for which it was collected.

When personal information is no longer required, we will take reasonable steps to securely delete, de-identify or otherwise dispose of it in accordance with applicable laws.

Some information may continue to be retained after your account has been closed where we are required or permitted to do so by law or where it is reasonably necessary for legitimate business purposes.

15. Security

Protecting your personal information is important to us.

We use a range of administrative, technical and organisational measures designed to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

• encryption of data in transit;
• secure cloud infrastructure;
• access controls;
• authentication and authorisation processes;
• monitoring and logging of systems; and
• regular security and maintenance practices.

While we take reasonable steps to protect personal information, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

You are also responsible for helping to protect your account by:

• keeping your password secure;
• not sharing your login credentials; and
• notifying us as soon as possible if you believe your account has been accessed without your permission.

16. Your Privacy Rights

Depending on where you live, you may have rights in relation to your personal information under applicable privacy laws.

These rights may include the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete personal information;
• request deletion of your personal information, where applicable;
• withdraw consent where processing is based on your consent;
• object to or restrict certain processing in circumstances permitted by law; and
• make a complaint about how your personal information has been handled.

If you would like to exercise any of these rights, please contact us using the details at the end of this Privacy Policy.

We may need to verify your identity before responding to your request.

Where permitted by law, we may decline a request or charge a reasonable fee where a request is manifestly unfounded, excessive or otherwise permitted by applicable legislation.

17. Deleting Your Account

You may request the deletion of your Fit Rewards account at any time through the Service or by contacting us.

When your account is deleted:

• your access to the Service will end;
• your Fit Rewards profile will be removed;
• any unused Fit Points will be forfeited in accordance with our Terms of Use; and
• we will take reasonable steps to delete or de-identify your personal information when it is no longer required.

Deleting your account does not necessarily result in the immediate deletion of all personal information.

We may retain certain information where reasonably necessary to:

• comply with legal or regulatory obligations;
• investigate fraud or misuse;
• resolve disputes;
• enforce our agreements; or
• protect the security and integrity of the Service.

Where information is retained for these purposes, it will only be kept for as long as reasonably necessary.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our business, applicable laws, or the way we collect, use, store or share personal information.

Where we make a material change to this Privacy Policy, we will provide reasonable notice where practicable, including by email, through the Service, or by another appropriate electronic method.

The most current version of this Privacy Policy will always be available through the Service and on our website.

By continuing to access or use the Service after an updated Privacy Policy takes effect, you acknowledge that your personal information will be handled in accordance with the updated Privacy Policy.

If you do not agree with any changes, you may stop using the Service and request deletion of your account.

19. Contact Us

If you have any questions about this Privacy Policy, or if you would like to access, correct or request deletion of your personal information, please contact us using the details below.

Fit Rewards Limited
Email: hello@fitrewards.io
Website: www.fitrewards.io
Wellington, New Zealand
NZBN: 9429051376789