Nova Privacy Policy

Effective Date: April 1, 2026

Your privacy matters to us. This Privacy Policy explains what information Nova collects, why we collect it, how we use and share it, and the choices and rights you have. It applies to your use of the Nova mobile app, website, and related services (the "Platform"). We handle your personal data in line with Egypt's Personal Data Protection Law No. 151 of 2020 and its Executive Regulations.

If you have questions about this Policy or your data, you can reach us using the details in Section 10.

1. Who We Are

Nova is a fitness and wellness marketplace based in the Arab Republic of Egypt. For the purposes of data protection law, Nova is the controller of the personal data described in this Policy, which means we decide why and how it is processed. You can contact us about privacy matters at support@jointhenova.com.

2. Information We Collect

We collect information in three ways: what you give us, what we collect automatically, and what we receive from others.

Information you give us

Account information. When you register directly, we collect your name, email address, and password.

Profile information. You may choose to add details such as your gender or preferences. Some Partners offer women-only Sessions, and where that applies, we use this information only to enable eligible bookings.

Communications. When you contact Nova support, we keep a record of your messages so we can help you and improve our service.

Information we collect automatically

Booking and usage data. We collect information about the Sessions you book, your Credit transactions, cancellations and no-shows, and your interactions with Partner studios through the Platform.

Location data. If you enable location access, we use your device location to show nearby studios and relevant Sessions. You can turn this off at any time in your device settings.

Device and technical data. We collect standard information such as device type, operating system, app version, device identifiers, session duration, and feature usage, to keep the Platform secure and to improve it.

Cookies, identifiers, and analytics technologies. We and our service providers use cookies, software development kits (SDKs), and similar technologies to understand how the Platform is used, to measure the performance of our marketing, and to attribute app installs. Where required, we ask for your permission before using technologies that track you across other apps or services, and you can manage these choices in your device settings.

Information we receive from others

Sign-in providers. If you register or log in through Google or Apple, we receive basic account details from them, such as your name and email address, according to your settings with that provider.

Paymob. Our payment provider sends us the result of your payments and related transaction records, such as amounts, dates, and the plan or pack purchased. Paymob collects and handles your card details directly. Nova does not receive or store your full card number.

Sensitive data

We do not ask you for medical or health information. Egyptian data protection law treats some information as sensitive, and we are mindful that the Sessions you book could suggest things about your health or beliefs. We use this information only to provide the Platform, and never to make decisions that would unfairly affect you. If you choose to share health details directly with a Partner studio, that is between you and the studio.

3. How We Use Your Information and Our Lawful Basis

Egyptian data protection law requires us to have a lawful basis for each way we use your data. We use your information as follows:

• To create and manage your account and provide the Platform, on the basis of performing our contract with you.
• To process your bookings, Credits, cancellations, and Memberships, on the basis of performing our contract with you.
• To process payments and keep financial records, on the basis of performing our contract and meeting our legal obligations.
• To send you transactional messages such as booking confirmations, cancellations, and receipts, on the basis of performing our contract with you.
• To send you marketing or promotional messages, only where you have given consent, which you can withdraw at any time.
• To show you nearby studios using your location, on the basis of the consent you give through your device.
• To keep the Platform secure, prevent fraud and abuse, and improve our service, on the basis of our legitimate interest in running Nova safely and well.
• To comply with the law and to establish or defend legal claims, on the basis of our legal obligations and legitimate interests.

4. How We Share Your Information

We share your personal data only as described here:

Partner studios. When you book a Session, we share the details the Partner needs to manage your attendance, such as your name and booking information. Partners are independent businesses and handle the data they receive under their own responsibility.

Paymob. Our payment provider receives the information needed to process your payments and manage billing.

Service providers. We work with trusted vendors who help us run the Platform, such as hosting, analytics, customer support, and notification services. They may only process your data on our instructions and under confidentiality obligations.

Legal and safety. We may disclose data where required by law, by a competent authority or court, or to protect the rights, safety, and security of Nova, our Members, or Partners.

Business transfers. If Nova is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, and we will let you know.

We do not sell your personal data.

5. International Data Transfers

Some of our service providers may process or store data outside Egypt. Egyptian law places specific conditions on transferring personal data abroad. Where we transfer your data outside Egypt, we do so only in line with those legal requirements, including obtaining the necessary approvals and your consent where required, and putting appropriate safeguards in place to protect your information.

6. Data Retention

We keep your account data for as long as your account is active. After you delete your account, we may keep certain records where the law requires it, such as financial and transaction records for tax and accounting purposes, generally for up to seven years. When data is no longer needed, we delete it or anonymize it.

7. Your Rights

Under Egyptian data protection law, you have the right to:

• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• request deletion of your account and data, subject to records we must keep by law;
• object to or ask us to restrict certain processing;
• withdraw consent at any time, where we rely on your consent;
• receive your data in a usable form where applicable.

You can delete your account at any time from within the app in your account settings. When you delete your account, we remove or anonymize your personal data, except for records we are required by law to keep, as described in Section 6. To exercise any of your other rights, contact us using the details in Section 10. We will respond within the timeframes required by law. You also have the right to raise a concern with the Personal Data Protection Center, Egypt's data protection authority.

8. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and encryption at rest, access controls, and ongoing monitoring. No method of transmission or storage is completely secure, but we work continuously to protect your information. If a data breach affects your personal data, we will act in line with our legal obligations, including notifying the authority and affected Members within the timeframes the law requires.

9. Changes to This Policy

We may update this Policy from time to time. If we make a material change, we will notify you through the app or by email before it takes effect. The "Effective Date" at the top shows when the current version came into force.

10. Contact

For any privacy questions or to exercise your rights, contact Nova:

• Email: support@jointhenova.com
• Phone: +20 101 563 0667
• Or through the support section of the app

Account Deletion

You can delete your Nova account at any time from within the app. Visit our account deletion page for step-by-step instructions, details on what data is removed, and what may be retained for legal or compliance purposes.

Contact Us

If you have questions about this policy or how your data is handled, please contact us at support@jointhenova.com.