Privacy policy – Joy Over Fit

This Privacy Policy describes how K to A LLC, doing business as Joy OverFit
(“Company”, “we”, “us”, “our”), collects, uses, and shares information about
you when you use our website joyoverfit.com, purchase our products, or use
the Joy OverFit AI Coach application.

By using our services, you agree to the collection and use of information
in accordance with this policy.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

COMPANY INFORMATION

K to A LLC (DBA Joy OverFit)
30 N Gould St Ste N
Sheridan, WY 82801
United States
EIN: 38-4290603
Email: customer@joyoverfit.com

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

INFORMATION WE COLLECT

2.1 Information You Provide Directly

Full name and email address
Shipping and billing address
Payment information (processed securely by Stripe — we never store
full card numbers on our servers)
Account credentials for the Joy OverFit app
Body data voluntarily entered in the app: weight, body measurements
(waist, arms, chest), age, height
Sleep quality and recovery data collected via the Smart Recovery Band
Food intake and nutritional data entered or scanned in the app
Fitness progress data including workout completion and performance metrics

2.2 Information Collected Automatically

IP address and approximate geographic location
Browser type and version
Device type and operating system
Pages visited and time spent on our website
Referring URLs
Purchase history and browsing behavior on our site

2.3 Information from Third Parties

Payment verification data from Stripe
Shipping and delivery status from our logistics partners

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

HOW WE USE YOUR INFORMATION

We use your information to:

Process, fulfill, and ship your orders
Provide and personalize the Joy OverFit AI Coach experience
Calculate your daily caloric needs using the Mifflin-St Jeor equation
Adapt your workout and nutrition plan based on your recovery data
Send order confirmations, shipping updates, and delivery notifications
Respond to your customer service inquiries
Send you product updates and promotional communications (you may
opt out at any time)
Analyze usage patterns to improve our products and services
Detect and prevent fraud and unauthorized access
Comply with applicable legal obligations

We will NEVER:

Sell your personal data to third parties
Share your health or body data with advertisers
Use your body data for any purpose other than delivering our service

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

HEALTH DATA — SPECIAL PROTECTIONS

The Joy OverFit app collects sensitive health-related data including body
weight, body measurements, sleep quality, heart rate, and daily fatigue levels.

This data is:

Stored with AES-256 encryption
Never shared with any third party
Never used for advertising or profiling purposes
Accessible only by you and authorized Joy OverFit technical staff
for support purposes
Permanently deleted upon written request to customer@joyoverfit.com

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

THIRD-PARTY SERVICES WE USE

5.1 Stripe (Payment Processing)
We use Stripe to process all payments. Stripe is PCI-DSS compliant.
Your full card details are never stored on our servers.
Stripe Privacy Policy: stripe.com/privacy

5.2 Meta Pixel (Facebook/Instagram Advertising)
We use the Meta Pixel to measure the effectiveness of our advertising
campaigns. This may collect information about your browsing behavior on
our site. You can opt out via your Facebook ad preferences.

5.3 WooCommerce (Order Management)
We use WooCommerce to manage orders and customer accounts.

5.4 Logistics Partners
We share your name, address, and order details with our shipping partners
solely for the purpose of fulfilling and delivering your order.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA RETENTION

Order and billing data: retained for 7 years (legal requirement)
App health data: retained while your account is active, deleted within
30 days of account closure upon request
Marketing data: retained until you unsubscribe
Website analytics: retained for 26 months

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

YOUR RIGHTS

You have the right to:

Access a copy of all personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your personal data (“right to be forgotten”)
Opt out of marketing emails at any time via the unsubscribe link
Request that we restrict processing of your data
Receive your data in a portable format

To exercise any of these rights, contact us at:
customer@joyoverfit.com

We will respond within 30 days of receiving your request.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Our website uses the following types of cookies:

Essential cookies: required for the website to function (cannot be disabled)
Analytics cookies: help us understand how visitors use our site
Marketing cookies: used to deliver relevant advertising

You can manage your cookie preferences through your browser settings or
via our cookie consent banner. Disabling certain cookies may affect
your experience on our site.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA SECURITY

We implement industry-standard security measures including:

SSL/TLS encryption for all data transmission
AES-256 encryption for stored health data
Regular security audits
Limited staff access to personal data on a need-to-know basis
Two-factor authentication on all administrative systems

However, no method of transmission over the Internet is 100% secure.
We cannot guarantee absolute security but commit to notifying you
within 72 hours of becoming aware of any data breach affecting your data.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

CHILDREN’S PRIVACY

Our products and services are intended for adults aged 18 and older.
We do not knowingly collect personal data from anyone under 18.
If you believe a minor has provided us with personal data, contact us
immediately at customer@joyoverfit.com and we will delete it promptly.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the
California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know whether personal information is sold or disclosed
Right to opt out of the sale of personal information
Right to equal service and price

We do not sell personal information. To exercise your CCPA rights,
contact us at customer@joyoverfit.com

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you
of significant changes by email or by posting a prominent notice on our
website at least 30 days before the changes take effect.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

For any privacy-related questions or requests:

K to A LLC (DBA Joy OverFit)
30 N Gould St Ste N
Sheridan, WY 82801
United States
Email: customer@joyoverfit.com
EIN: 38-4290603