Privacy Policy

youwillfit is a fitness and wellness service operated by youwillfit sh.p.k., a limited liability company registered in the Republic of Albania. Our tax identification number (NIPT) is M41521019K.

Our registered address is: Rruga Faik Konica, Pallati AL-GI, Hyrja 2, Kati 10, Ap.26, Tirane, Albania.

You can reach us at hello@youwillfit.com. We have not currently appointed a Data Protection Officer. All privacy enquiries and rights requests should be sent to the address above.

When this Policy refers to "youwillfit", "we", "us" or "our", it refers to youwillfit sh.p.k. and its services.

This Privacy Policy explains how youwillfit collects, uses, stores and shares personal data in connection with:

• the youwillfit website and any sub-pages operated by us;
• the future youwillfit mobile application (iOS and Android);
• any email communications, newsletters or other services we provide.

This Policy applies to visitors, early access registrants, newsletter subscribers, contact form users, and future app users worldwide. We acknowledge that mandatory local consumer and privacy laws may apply depending on your location, including but not limited to EU and EEA data protection law, Albanian law on personal data protection, and applicable US state privacy laws.

By using our website or services, or by submitting your personal data through our forms, you acknowledge that you have read this Policy.

The personal data we collect depends on how you interact with youwillfit. In general, we collect:

• Contact and identification data: name and email address;
• Interest and preference data: general fitness goal selected from a predefined list;
• Communication data: messages you send through our Contact form;
• Technical data: IP address, browser type, device type, operating system, pages visited, time on page, referring URLs, and similar usage data collected automatically when you visit our website;
• Consent records: whether and when you accepted or declined marketing communications and any applicable cookie consent.

We also use third-party analytics and advertising tools that may collect additional technical and behavioural data as described in the sections below.

Early Access form

When you register for early access, we collect your first name, email address, and a general fitness goal you select from a list. We use this to manage the early access list, send you launch information and updates, invite you to product testing, and conduct product research. The goal categories are intentionally broad and are not treated as health data.

Where you separately opt in, we may also send fitness content, recipes, product news and promotional offers.

Newsletter

If you subscribe to our newsletter we collect your email address. Newsletters are delivered through Mailchimp and may include product updates, fitness and wellness content, recipes, offers, promotions, and partner-related communications sent by or on behalf of youwillfit. You can unsubscribe at any time using the unsubscribe link in any marketing email.

Contact form

When you use our Contact form, we collect your name, email address and the message you write. We use this data to read and respond to your request and to maintain necessary correspondence records. We may also use it to prevent misuse or spam. Marketing use requires your separate optional consent. Please do not include medical information or other sensitive personal data in your message.

Analytics and advertising technologies

Our website uses Google Analytics, Google Tag Manager, Meta Pixel, Pinterest Tag and Microsoft Clarity. These tools may collect your IP address, device information, browser type, pages visited, and interactions on our website. We also use Google Fonts, which may log your IP address when loading fonts. For more detail, see the Cookie Policy.

The youwillfit mobile application is not yet available. When it launches, it may collect the following categories of information to provide personalised fitness, wellness and nutrition services:

• name and email address;
• age, height and weight;
• fitness goals, activity level and workout preferences;
• completed workouts, progress data and usage history;
• daily energy level and available workout time;
• menstrual-cycle information;
• pregnancy-related information;
• nutrition preferences and activity;
• subscription and transaction status;
• technical device and diagnostic data.

This list describes data the app may collect once launched. The website currently does not collect any of these additional categories.

Certain data the future app may collect — including menstrual-cycle information, pregnancy-related information, health limitations, physical conditions, weight and body-related data used to infer health status, and detailed fitness or nutrition patterns — may constitute special- category personal data or sensitive wellness information depending on applicable law.

We commit to the following in relation to this data:

• Such data will be collected only within the mobile app where relevant to the features being used.
• It will be used to personalise fitness, wellness and nutrition features and may be processed by algorithms and AI-assisted systems.
• Where legally required, explicit consent will be requested separately from acceptance of these Terms. You will be able to withdraw that consent at any time, although doing so may prevent some personalised features from working.
• Health and sensitive data will not be sold to third parties.
• Health and sensitive data will not be used to create advertising profiles or be shared with Meta, Pinterest, Google Ads or equivalent advertising providers.
• Where reasonably possible and appropriate, such data may be anonymised or aggregated for internal analytics and product research.
• Future sharing with trainers, nutritionists or other professionals will require an appropriate legal basis and your clear authorisation.

We use the personal data we collect to:

• manage the early access list and communicate with registrants;
• send product launch updates and early access news;
• send marketing communications where you have opted in (newsletter, promotional content, fitness and wellness content);
• respond to contact and support requests;
• operate, improve and personalise the website and future app services;
• analyse how visitors use the website to improve performance and user experience;
• measure and optimise advertising campaigns and create relevant audiences;
• understand general audience interests for product research and development;
• detect, prevent and investigate fraud, misuse, spam and abuse;
• comply with applicable legal and regulatory obligations;
• establish, exercise or defend legal claims where necessary.

Where applicable data protection law requires a legal basis for processing personal data, we rely on the following:

• Consent — for sending marketing communications, optional cookies and similar technologies, and for explicit consent to process sensitive health data in the future app. You may withdraw consent at any time.
• Performance of a contract or pre-contractual steps — for processing necessary to provide the services you have requested, such as managing your account or processing a subscription.
• Legitimate interests — for operating and improving our website and services, preventing fraud and misuse, and conducting product and market research, where those interests are not overridden by your rights.
• Compliance with legal obligations — where we are required to process data to meet a legal or regulatory requirement.
• Protection of vital interests or legal claims — where necessary to protect safety or to establish, exercise or defend a legal claim.

We do not rely on legitimate interests as a basis for processing special- category data where explicit consent is required by applicable law.

We may send marketing emails about fitness and wellness content, product updates, recipes, promotions and offers from youwillfit, and partner-related content sent by or on behalf of youwillfit.

We will only send you marketing communications where you have given your consent or where another lawful basis applies and is permitted by applicable law.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us at hello@youwillfit.com. Unsubscribing from marketing does not affect transactional messages related to your account or early access registration.

We use Mailchimp to manage and send marketing emails. Mailchimp processes data on our behalf in the United States.

We may use non-sensitive personal data — including contact data, interests, and behavioural data collected through cookies and pixels — for:

• measuring the effectiveness of advertising campaigns;
• creating and targeting custom or lookalike audiences;
• personalising the ads you see on third-party platforms;
• product research and campaign optimisation.

These activities involve Meta Pixel and Pinterest Tag, which may process IP addresses and device identifiers. Health data and sensitive wellness data will not be used for any advertising purposes.

Use of advertising technologies depends on consent where required by applicable law. See the Cookie Policy for details on how to manage your preferences.

We use cookies and similar technologies including pixels, tags, local storage and session storage. These are described in detail in our Cookie Policy, which covers:

• the categories of cookies we use (Strictly Necessary, Analytics, Functional, Advertising);
• the specific tools and their purposes;
• how to accept, reject or manage your preferences;
• the effect of blocking certain cookies.

The future mobile app may use rule-based algorithms, recommendation systems, AI-assisted content generation and automated matching between user information and available content to provide personalised fitness, wellness and nutrition guidance.

We want to be transparent about the limitations of these systems:

• Outputs from automated systems may be imperfect or not suitable for every individual.
• All recommendations are informational and not a substitute for professional advice.
• Users should exercise independent judgement and consult appropriate professionals before making important health or fitness decisions.
• The app is not designed to make medical diagnoses or provide clinical advice.
• No solely automated decision will produce legal or otherwise similarly significant effects on any user.

If you have a concern about a specific recommendation, you may contact us at hello@youwillfit.com.

We work with third-party service providers who may process personal data on our behalf or alongside us. The following table describes our current or expected providers:

GitHub is a development tool and is not intended to receive production user submissions. We share data with service providers only to the extent necessary for the relevant service.

We want to be transparent and precise about this topic:

• youwillfit may in the future sell or share certain non-sensitive personal data — such as contact, interest, audience or interaction data — where permitted by applicable law.
• Before any such activity begins, we will provide any legally required notice, collect consent where required, and provide any legally required opt-out mechanism.
• California residents and users in other applicable US states may have the right to opt out of the sale or sharing of personal data.
• Health data, menstrual-cycle data, pregnancy information and other sensitive wellness data will never be sold.
• We share information with processors and service providers that operate on our behalf, as described in the section above.
• Aggregated or anonymised information that cannot reasonably identify an individual may be used or shared for analytics, research and commercial insights.
• Personal information may be transferred during a merger, acquisition, financing, restructuring or sale of business assets, as described further below.

Do Not Sell or Share My Personal Information — A mechanism for this right will be made available when any relevant sale or sharing activity begins. This is a documented future requirement.

youwillfit is based in Albania and our website and services are accessible globally. Personal data may be transferred to and processed in countries outside your country of residence, including the United States, where many of our infrastructure and service providers operate.

Where personal data is transferred internationally and applicable law requires a transfer mechanism, we will use appropriate lawful mechanisms as required. We do not make specific contractual claims about protections that are not currently in place.

By using our services you acknowledge that your information may be processed in countries where data protection laws may differ from those in your country.

We retain personal data for as long as is necessary for the purposes described in this Policy. The following indicative periods apply:

• Early Access data: up to 24 months after your last meaningful interaction with us, unless you remain a subscriber or become an app user.
• Newsletter subscription: until you unsubscribe, after which we retain a minimal suppression record where needed to honour your opt-out.
• Contact form messages: up to 24 months after the request is resolved, unless longer retention is required for legal or operational reasons.
• Active account data (future app): for the duration of your account.
• Deleted account data (future app): deletion or anonymisation within approximately 30–90 days, except where longer retention is required by law.
• Health and wellness data (future app): while your account and relevant features remain active, or until consent is withdrawn or deletion is requested, subject to necessary legal exceptions.
• Technical logs: generally 6–12 months.
• Cookie consent records: for the period recommended by the selected consent management platform and applicable law.
• Transaction and accounting records: as required by applicable tax, accounting and consumer laws.
• Anonymised data: may be retained longer where it no longer reasonably identifies an individual.

We periodically review retention periods and may shorten them where appropriate.

We use reasonable technical and organisational measures designed to protect personal data, which may include HTTPS encryption, protected administrative access, restriction of access based on need, Supabase security controls, Row Level Security where implemented, logging and monitoring, multi-factor authentication where enabled, and backups where configured.

Not all of the above measures are necessarily enabled in every environment or at every stage of the service. No online system can guarantee absolute security.

If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will take appropriate steps as required by applicable law. We are in the process of establishing formal incident-response procedures.

Depending on applicable law and where it applies, you may have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you.
• Correction: to request correction of inaccurate or incomplete data.
• Deletion: to request that we delete your personal data, subject to legal exceptions.
• Restriction: to request that we restrict processing in certain circumstances.
• Objection: to object to processing based on legitimate interests or direct marketing.
• Portability: to receive a copy of data you have provided to us in a structured, machine-readable format.
• Withdrawal of consent: where processing is based on consent, to withdraw that consent at any time without affecting lawfulness of prior processing.
• Opt-out from marketing: at any time through any email unsubscribe link or by contacting us.
• Opt-out from sale or sharing: when any such activity begins (see Sale and sharing section).
• Complaint: to submit a complaint to a supervisory authority (see section 21 below).

Currently, all rights requests can be made by email to hello@youwillfit.com. Future in-app tools may make some requests available directly inside the app. We will respond to requests within the timeframe required by applicable law.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• the right to know the categories and specific pieces of personal information we have collected, the purposes for which it is used, and the categories of third parties with whom it is shared or sold;
• the right to delete personal information, subject to exceptions;
• the right to correct inaccurate personal information;
• the right to opt out of the sale or sharing of personal information;
• the right to limit use and disclosure of sensitive personal information;
• the right not to receive discriminatory treatment for exercising these rights.

Other US states including Virginia, Colorado, Connecticut, Texas, and others have enacted privacy laws that may provide similar rights including access, deletion, correction, portability, opt-out from sale and profiling for advertising, and an appeal right where a request is denied.

To submit a request, please email hello@youwillfit.com with "Privacy Request" in the subject line and the right or rights you wish to exercise.

If you are located in the European Union, European Economic Area, United Kingdom or Republic of Albania, you have rights under the GDPR, UK GDPR, or equivalent national law. These include the rights described in section 19 above, plus the right to lodge a complaint with a supervisory authority.

youwillfit is established in the Republic of Albania and is subject to Albanian law on personal data protection. EU/EEA residents may also have the right to lodge a complaint with the supervisory authority in their country of habitual residence. The Albanian supervisory authority is the Information and Data Protection Commissioner (Komisioner për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave — IDPC).

We encourage you to contact us first at hello@youwillfit.com before lodging a supervisory complaint, as we will try to resolve concerns promptly.

Our services are not intended for children under the age of 16. Users must be at least 16 years old to use forms, register for early access, create an account, or use personalised services. Users aged 16 or 17 should use the services with the involvement and permission of a parent or legal guardian.

General informational pages on the website may be viewed without age restriction.

We do not knowingly collect personal data from children under 16. If a parent or guardian believes that a child under 16 has submitted personal data to us, they may contact us at hello@youwillfit.com to request deletion.

The youwillfit Blog is publicly accessible and may include articles written by youwillfit or external contributors. Blog articles are informational. Authors' opinions do not necessarily represent professional medical advice or the official position of youwillfit.

Articles may include affiliate links. Where an article includes affiliate links or represents a sponsored relationship, this will be disclosed where applicable.

We may use analytics tools to understand how Blog content is read and shared, in accordance with this Policy.

Users may share links to Blog articles through social networks. Sharing a link does not grant permission to reproduce or republish article text or other content.

In the event of a merger, acquisition, investment, restructuring, financing or sale of all or part of youwillfit's assets or business, personal data we hold may be among the assets transferred to or reviewed by the relevant third party. We will notify users where required by applicable law and this Policy will continue to govern such data.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data practices. The "Last updated" date at the top of this page will be updated accordingly.

For significant changes, we will provide reasonable prior notice through the website or by email where appropriate. Continued use of our services after a change to this Policy constitutes acceptance of the updated terms, except where applicable law requires your affirmative consent.

If you have any questions about this Privacy Policy, wish to exercise any of your rights, or want to raise a concern, please contact us:

youwillfit sh.p.k.
Rruga Faik Konica, Pallati AL-GI, Hyrja 2, Kati 10, Ap.26, Tirane, Albania
hello@youwillfit.com

We will try to respond to all legitimate requests within 30 days, or within the period required by applicable law. We have not appointed a Data Protection Officer. If your concern is not resolved to your satisfaction, you have the right to submit a complaint to a relevant supervisory authority as described in section 21.