This supplement applies to people in New Zealand and forms part of the Global Privacy Notice. It does not limit rights under the Privacy Act 2020 or mandatory rights under the Consumer Guarantees Act where they apply.
GRITFIT collects information directly from you, your use of the app and services you authorise. If another person or service provides your information, GRITFIT will provide notice required by Information Privacy Principle 3A unless an exception applies.
GRITFIT may disclose information to overseas service providers for hosting, secure storage, email, anti-abuse controls and contracted AI language processing. Before an overseas disclosure, GRITFIT must use a basis permitted by Information Privacy Principle 12, which may include comparable safeguards or informed authorisation where appropriate.
You may request access to or correction of your personal information. GRITFIT normally makes the access/correction decision within 20 working days, subject to any permitted extension and notice. You may complain to the Office of the Privacy Commissioner at privacy.org.nz. Contact dpo@gritfit-ai.com first if you would like GRITFIT to address a concern; support@gritfit-ai.com is the backup route.
Health information may also be subject to the Health Information Privacy Code 2020 depending on GRITFIT’s role and the circumstances. Optional health and connected-platform data is requested separately and can be withdrawn. GRITFIT is general fitness software, not a health practitioner or emergency service.