Data Protection and Privacy Policy

This Data Protection and Privacy Policy outlines the types of data collected when you interact with the Platform, the purposes for which the data is used, and the measures taken to protect its security ("Privacy Policy" or "Policy"). Please read this Policy carefully before registering on and using the services of the Platform.

Nox (accessible through the website https://www.app.nox.today or https://www.nox.today ("the Platform"/ "we"/ "us"/ "ours") is committed to protecting the privacy of its users ("User" / "you"/ "yours"). We maintain stringent policies to ensure that all personal information submitted to us by you is securely collected and stored and used. Such information is utilized as may be deemed reasonably necessary by the Platform.

This Policy applies exclusively to the online activities conducted on the Platform and governs the collection and use of information provided by visitors and users of the Platform. It does not extend to any information collected offline or through channels other than the Platform. The Platform employs cookies to improve your browsing experience. By accessing and using the Platform, and by accepting this Privacy Policy, you consent to the use of cookies in accordance with the terms set forth herein.

If you do not agree with the terms outlined in this Privacy Policy, you are advised to discontinue using this Platform immediately. Please note that we reserve our right to modify or update this Privacy Policy at any time, with appropriate notification and consent being taken in case of any significant change. Continued use of the Platform after such modifications or updates will be considered as your acknowledgment and acceptance of the revised Privacy Policy.

1. CONSENT

By registering on the Platform, you hereby confirm that you have read, understood, and consented to this Privacy Policy and agree to its terms. In case you do not agree with the terms or do not wish to provide your consent, please do not register or use the services on our Platform.
By accessing and using our Platform, you acknowledge and consent to the collection, processing, and use of your personal data by the Platform, its partners, and affiliates in accordance with this Policy; including but not limited to your name, email address, phone number, gender, date of birth, profile picture, UPI ID, PAN, proof submissions (such as photos, videos, or written logs), device information, IP address, and usage behaviour, interactions with other accounts, etc.
If you choose not to share the required information, the Platform reserves the right to restrict or deny access to its services. You acknowledge that refusal to provide consent may result in the inability to access or use certain features of the Platform, and you shall not be entitled to raise any claims or objections in this regard.

2. WITHDRAWAL AND DELETION OF CONSENT

Once you provide your personal data and register on the Platform, you retain the right to revoke your consent to the collection, processing, and our use of your personal data provided at any time by submitting a written or electronic request to us on support@nox.today.
Upon receipt of a valid revocation request, we shall acknowledge the request within [30] Business Days and cease processing your personal data unless required to retain it under applicable laws. In such cases, personal data may be retained for compliance with legal obligations, fraud prevention, dispute resolution, regulatory requirements, or protection against legal claims. Once no longer required for such purposes, the data shall be securely deleted or anonymized in accordance with industry standards.

3. INFORMATION COLLECTED BY US

When you register on Nox, we may collect and process personal data, including your name, date of birth, gender, nationality, government-issued identification (such as Aadhar, Passport), proof of address, and contact details.
Please note that all information is collected basis your informed and explicit consent.
These Privacy Policy terms may be periodically reviewed and revised. The revised terms shall be uploaded on the Platform and shall reflect the modified date of the terms.
Types of Proof Collected
1. Users may be required to submit evidence demonstrating progress toward their stated goals. Such proof may include, but is not limited to:
1. Images, videos, or audio recordings, or
2. Written statements or digital declarations, or
3. Workout logs, employment letters, or
4. Any other relevant documents as may be specified.
Submission Frequency and Deadlines
1. Users may be required to submit proof at specified intervals (e.g., daily, weekly, monthly) before a final deadline, as determined by their selected goal structure.
2. Interim deadlines may be set for ongoing accountability, and failure to submit proof within the required timeframe may impact goal validation.
Data Retention and Security
1. Proof submissions are securely stored and retained to facilitate the verification of goal achievement and to maintain platform integrity. Participants must ensure that any and all proofs required to be submitted does not to the extent possible include any personal or sensitive information or data unless the same is mandated under the rules of a Pact.
2. All proof submissions made by Participants in relation to any completed Pact will be stored and made accessible under the "Track Record" section of the respective Pact. These records are intended to ensure transparency, facilitate retrospective accountability, and support future audits or appeals.
3. All proofs will remain accessible in perpetuity, subject to Nox's data retention policies and Applicable Laws. Participants may submit a request for removal of their stored proofs from the Track Record, and Nox may, at its sole discretion, consider such requests on a case-by-case basis. Approval of such removal requests may be contingent upon the closure of any related dispute or audit process.
4. At present, all submitted proofs are verified manually by designated human Verifiers. In the future, Nox may deploy artificial intelligence (AI) or automated verification systems to assist or supplement the verification process. Regardless, Nox shall ensure that each proof is reviewed by a human Verifier at the current stage. In addition to the assigned Verifier, authorized Nox administrators may access, and review submitted proofs where necessary to facilitate operational efficiency, resolve bottlenecks, monitor quality, or address disputes. All such access shall be governed by strict internal protocols to ensure privacy, integrity, and confidentiality of Participant data.
5. Users retain control over their submitted proof and may request deletion of their data, subject to compliance with applicable laws and Nox's data retention policies.
Sharing and Confidentiality
1. Proof submissions are made visible to the Participants of the Pact along with the Verifier of the Pact (if applicable) by default to peruse and also for the verification of evidence and for any other purposes such as but not limited to a dispute as stated in our Terms and Conditions. Additionally, proofs of pacts can be viewed by members of Groups or Communities that such Pacts are tagged to.
2. Nox does not sell or share proof submission data with third parties, except where required by law or with prior user authorization.
By continuing to use Nox, you consent to the collection and processing of proof submission data as outlined in this Policy.

4. HOW THE COLLECTED INFORMATION IS UTILISED

By accessing and using the Platform and its Services, you hereby acknowledge and consent to Nox's use of your data, including, but not limited to, your interactions, submissions, preferences, and engagement patterns for the purpose of improving and enhancing the functionality and performance of the Platform.
The personal information that you are asked to provide may be used for the following purposes:
1. Administration of the Platform.
2. To improve and enhance the Platform based on your preferences and usage in order to constantly improve your browsing and user experience.
3. To send you general or promotional communications, including email notifications, if you have provided explicit consent to receive them. You retain the right to withdraw your consent at any time by contacting us or by unsubscribing to such communications.
4. To verify your identity, maintain accurate records, and ensure compliance with the Platform's Terms, Policies, and applicable laws.
5. To address and resolve any inquiries or complaints you submit through the Platform.
6. To uphold the security of the Platform and implement measures to detect and prevent fraudulent activities in line with the Platform's Policies.
7. To facilitate your access to and use of the services offered on the Platform.
8. To monitor compliance with the Platform's Terms and Conditions/Policies and of applicable laws and regulations.
9. To conduct internal research aimed at developing new features, optimizing user experience, and enhancing the overall effectiveness, fairness, and usability of the Platform and its services.
10. To train machine learning and artificial intelligence (AI) models that may be used to assist in verification processes, detect anomalies or suspicious behaviour, improve user experience, and automate administrative functions.
11. To develop and refine analytical tools and models that provide customized recommendations of Pacts, challenges, or activities tailored to your past behaviour, performance trends, and interests, thereby personalizing your experience on the Platform
We reserve the right to conduct security reviews at any time through modes including but not limited to KYC, VKYC verification processes, to verify your identity, age, registration details, and usage of the services provided on our Platform for compliance with our Terms and Conditions and applicable laws.
By accessing and using our Platform, you consent to our employees, agents, and/ or service providers using and disclosing that information which is required to be divulged to third-parties due to the necessity to validate the information provided.
Any and all data collected from you is merely collected, processed and handled by the Platform. The end user is considered the rightful owner of their personal data, while the Platform merely acts as a custodian or fiduciary of the data without any rights to own such data. We do not market or sell any personal information for monetary gain.
All such use of data shall be compliant with applicable data protection laws and subject to the terms outlined in the Platform's Privacy Policy. Personal data shall not be sold to third parties, and adequate safeguards shall be implemented to ensure data anonymization, security, and integrity during all stages of processing.
Nox may analyse any historical and ongoing Participant submitted data including but not limited to user habits, activity logs, proof submissions, photos, videos, and engagement patterns for the purpose of improving the functionality, performance, and effectiveness of the Pacts, Services and Platform. Such analysis may involve the use of advanced methodologies, including machine learning and artificial intelligence (AI), to derive insights, test new features, and enhance user experience. Where applicable, this may include the training of proprietary or third-party AI models. All data used for research and development will be anonymized and aggregated prior to use, ensuring that no personally identifiable information (PII) is included in such analysis or shared with third parties unless we have obtained your explicit and informed consent to do so. By using the Platform, you consent to the use of your non-identifiable data for such purposes. Should Nox seek to utilize identifiable information for research, AI training, or external collaboration, we will request and obtain your express written consent in advance, in compliance with applicable data protection laws and the Nox Privacy Policy.

5. DISCLOSING YOUR DETAILS

Personal or sensitive data collected from your device during your use of our Platform will not be stored, recorded, monitored, or shared unless it is essential for ensuring compliance with applicable laws and regulations and our Platform policies, including but not limited to this Privacy Policy and Terms and Conditions, as updated from time to time.
In addition, we may disclose your personal information:
1. As required by applicable law, regulation, or legal process;
2. To establish, exercise, or defend our legal rights, including for law enforcement purposes;
3. When we have a good faith belief that such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or others;
4. In connection with any merger, acquisition, or sale of all or a portion of our assets, in which case we will provide notice before personal information is transferred and becomes subject to a different privacy policy;
5. To authorized third-party service providers who assist us in operating the Platform, conducting our business, or servicing you, provided that such parties agree to keep this information confidential;
6. With your explicit consent or at your direction;
7. To comply with judicial proceedings, court orders, or legal process served on us.
We may also disclose aggregated or anonymized information that does not directly identify you or any other individual user for research, statistical, or marketing purposes.

6. DATA SECURITY AND PROTECTION

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to, encryption, secure data storage, access controls, and regular security assessments.
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data, and you acknowledge and accept the inherent risks of electronic communication and storage.
In the event of a data breach that may affect your personal information, we will notify you and relevant authorities in accordance with applicable laws and regulations.
You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to notify us immediately of any unauthorized use of your account or any other breach of security.

7. DATA RETENTION

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
The retention period for different types of personal information may vary based on the nature of the data and the purposes for which it is processed. Generally, we retain personal information for the duration of your account's existence and for a reasonable period thereafter.
When personal information is no longer required for the purposes for which it was collected, we will securely delete or anonymize it in accordance with our data retention policies and applicable laws.
You may request deletion of your personal information, subject to certain exceptions where we are required to retain data for legal, regulatory, or legitimate business purposes.

8. YOUR RIGHTS

Subject to applicable laws, you may have the following rights regarding your personal information:
1. Right to access: You may request access to the personal information we hold about you.
2. Right to rectification: You may request correction of inaccurate or incomplete personal information.
3. Right to erasure: You may request deletion of your personal information in certain circumstances.
4. Right to restrict processing: You may request restriction of processing of your personal information in certain circumstances.
5. Right to data portability: You may request transfer of your personal information to another service provider in certain circumstances.
6. Right to object: You may object to the processing of your personal information in certain circumstances.
7. Right to withdraw consent: You may withdraw your consent to the processing of your personal information at any time.
To exercise any of these rights, please contact us at support@nox.today. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.
Please note that certain rights may be subject to limitations or exceptions under applicable laws, and we may need to verify your identity before processing your request.

9. THIRD-PARTY SERVICES AND LINKS

The Platform may contain links to third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices or content of these third-party sites or services.
We encourage you to review the privacy policies of any third-party sites or services that you access through our Platform before providing any personal information.
We may use third-party service providers to help us operate the Platform and provide our services. These providers may have access to your personal information only as necessary to perform their functions and are obligated to maintain the confidentiality of your information.

10. INTERNATIONAL DATA TRANSFERS

Your personal information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have different data protection laws than your country.
When we transfer your personal information to other countries, we will protect it as described in this Privacy Policy and in accordance with applicable laws.
By using our Platform, you consent to the transfer of your personal information to countries outside your country of residence, including countries that may not have the same data protection laws as your country.

11. CHILDREN'S PRIVACY

Our Platform is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18 years of age.
If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete such information from our systems.
If you believe that we have collected personal information from a child under 18, please contact us at support@nox.today.

12. CONTACT INFORMATION

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:
Email: support@nox.today
Address: [Company Address]
We will respond to your inquiries within a reasonable timeframe and work to resolve any issues you may have.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make significant changes to this Privacy Policy, we will notify you by posting the updated policy on our Platform and updating the effective date.
Your continued use of the Platform after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Last Updated: [Date]