Questa pagina è disponibile in inglese.
BTECK ("we", "us") operates nadwati: an app coaches use to run their programs — bookings, live sessions, support and posts — and that their students use to take part. This policy covers the nadwati app, the apps coaches publish with nadwati, and the services behind them.
Coaches and their spaces
Each coach runs their own space. When you join one, that coach and their assistants see your profile and what you do in the space, and they can keep their own notes about you. The coach decides what they record and is responsible for it. Questions about a coach's program or records can go to the coach; we can help with your account.
What we collect
- Your account. Your name, email address and password — stored only as a one-way hash that nobody can read back, us included — and, if you add them, a phone number and a profile photo, along with your time zone and language.
- Spaces. For a coach: the space's name, logo, description, colors, hours and booking settings. For everyone: the spaces you belong to, your role (coach, assistant or student), your enrollment status, the invitations you use, and the tags and private notes a coach and their assistants keep about you.
- Meetings. When a meeting takes place, how long it lasts, what you say it is about, and cancellations with their reasons. The coach and their assistants can also record notes and an outcome for a meeting, which students don't see.
- Live sessions. The sessions a coach schedules, and when you join and leave a session held in a built-in video room.
- Support. Your tickets, your messages and the files you attach to them.
- Posts. The posts a coach publishes, with their images, videos and links.
- Notifications. The notifications shown in the app and your notification settings. If you allow push notifications, a token that lets us reach your device, with its platform and the app's version.
- Devices and sign-in. For each device you sign in on, its platform and the software details it reports, and when your account and your devices were last active.
- Calendar feed. If you subscribe to your meetings from a calendar app, the private link that feed uses.
- Subscriptions. For coaches who pay for a plan: the plan, its status and dates, and the customer and subscription references Stripe gives us. Card details are entered on Stripe's own pages and never reach our servers.
- Calendly. If a coach connects Calendly: the coach's Calendly access token, stored encrypted, and for each booking on the coach's Calendly page the invitee's name, email address, time zone, meeting time and the details they give. If no account uses that email address yet, we create one and email the person a link to set a password.
- Server logs. Each request to our servers is logged with its time, the address requested, the result, the IP address it came from and, when you are signed in, your account and space identifiers. We also use IP addresses to limit repeated attempts, such as password guessing.
We don't sell or rent personal information, we don't show ads, and the app contains no advertising, tracking or third-party analytics tools.
How we use it
- To provide the service: accounts, spaces, bookings and reminders, live sessions, support, posts and notifications.
- To send the emails the service needs, such as confirming your address or resetting your password, and the notification emails you can turn off in Settings.
- To keep the service secure and working, and to prevent fraud and abuse.
- To bill coaches for their subscriptions.
- To answer your requests. Authorized members of our team can access an account or a space when that is needed to give support, keep the service secure or meet a legal obligation; access through our support tools is logged.
- To comply with the law.
Who sees it, and who we share it with
Inside a space. The coach and assistants of a space see its members' profiles, bookings, messages and attendance, and the coach can export the student list — names, email addresses, phone numbers, enrollment and tags. Other members see much less of you: your name in a live session you both attend, for example. A space's public page — its name, logo, description, public posts, the time of its next live session and its open booking times — can be seen by anyone.
Service providers that help us run the service:
- the companies that host our servers and store our backups;
- our email delivery provider;
- Google (Firebase Cloud Messaging) and Apple, which deliver push notifications — the title and text of each notification pass through them;
- Stripe, which handles coaches' subscription payments;
- Calendly, when a coach connects it.
Video. Built-in video rooms run on servers we operate: audio, video and chat pass through them to the other participants and are not recorded. A coach may use a link to another video service instead, such as Zoom or Google Meet, and that service's privacy policy applies there. Likewise, when you book on a coach's Calendly page or open a YouTube link in a post, Calendly's or YouTube's policies apply on their pages.
For legal reasons. When the law requires it, or when it is needed to protect the rights, safety or property of our users, the public or us. If our business is sold or merged, information may be transferred as part of that deal, and this policy keeps applying to it.
How long we keep it
- Your account stays until you delete it. Deleting it removes your name, email address, password, phone number, photo and time zone right away, and signs you out everywhere.
- What happened in a space — meetings, messages and their files, attendance, and a coach's notes — stays in that space's records under "Deleted user", because the coach and the other members rely on them. If you are a coach, deleting your account closes your space for everyone in it, and the space is deleted with everything in it — those records included — 30 days after it closes.
- Uploads that were never attached to a message or a post are deleted after 24 hours.
- Records of the automated notices our servers receive from Calendly, Stripe and the video service are deleted after 30 days.
- Server logs are kept for a limited time and then overwritten.
- Backup copies are overwritten on a rolling schedule, within 90 days.
Security
Connections to our servers are encrypted (HTTPS). Passwords are stored as one-way hashes, a coach's Calendly token is encrypted, and support attachments can only be opened through links that expire after an hour. No system is perfectly secure, so we can't guarantee the security of your information, but we work to protect it.
Children
nadwati is not intended for children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.
Your choices and rights
In the app you can edit your profile, choose which notifications you receive and delete your account. You can also ask us for a copy of your personal information, or ask us to correct or delete it, by emailing contact@nadwati.com. Depending on the state you live in, such as California, you may have further rights under its privacy law, and we won't treat you differently for using them. We may need to confirm it's you before we act on a request. For what a coach records in their space, you can also ask that coach.
Changes to this policy
We may update this policy. If a change is significant, we will tell you in the app or by email before it takes effect. The date at the top of this page shows when it last changed.
Contact us
Email contact@nadwati.com.