Privacy Policy
Last Updated: August 15, 2025
This Privacy Policy explains how Fitnexa Inc. and our subsidiaries and affiliates ("DUVA," "we," "us," or "our") collect, use, disclose, and protect personal information in connection with our digital and offline experiences that link to this Policy—including our websites https://duva.com, mobile applications, social media pages, marketing activities, live events, customer-support channels, and any connected products or services (including our sleep earbuds and companion applications).
What personal information do we collect?
Information you share with us
- Account & profile: name, email address, phone number, password (stored in hashed form), country/region, preferred language.
- Orders & fulfillment: shipping and billing details, recipient name, purchase history, product model/serial number, warranty/RMA information, invoices.
- Payments: payment method type and status (e.g., success/failed, refund status). We do not store full payment card numbers; our payment processors handle that securely.
- Customer support & communications: messages you send us (email, chat, forms), call recordings/transcripts where permitted, and your responses to surveys, promotions, or contests.
- Reviews & user-generated content: product ratings, Q&A posts, comments, photos/videos you upload, and (if you choose) your display name or social handle.
- Preferences: marketing subscriptions/opt-outs, cookie settings, notification choices.
Information we collect automatically (when you use our sites/apps/devices)
- Device & usage data: IP address, device identifiers, device type, operating system, browser type, settings, referring/exit pages, pages viewed, time on page, clicks, and crash/performance logs.
- Cookies, pixels, and similar technologies: identifiers stored on your browser or device and related event data for site operation, analytics, and (where permitted) advertising/remarketing.
- Location data: approximate location (e.g., city/country) derived from your IP address.
- Connected devices & firmware: when you pair and use Dvua hardware (e.g., sleep earbuds), we may collect device model, serial number, firmware version, etc.
Health and activity data (if you choose to share)
If you use Duva apps or features related to health and wellness, we may collect sleep-related data, activity logs, or sensor metrics provided by your device.
Information we receive from third parties
- Payment & fraud-prevention partners: limited payment details and risk signals.
- Logistics & service providers: shipping carriers and fulfillment partners may share tracking updates and delivery confirmations.
- Sign-in & social platforms: basic profile information (e.g., name, email, ID) needed to authenticate you.
- Analytics & advertising partners: aggregated identifiers and campaign metrics.
- Retail/marketplace partners: contact and product details to provide support and warranty services.
How We Use Your Personal Information
Provide & fulfill orders: account management, cart, payments, shipping, after-sales service.
Support & communications: respond to inquiries, safety/recall notices, policy updates.
Personalization & marketing: content, recommendations, offers, and remarketing.
Analytics & improvement: statistics, A/B testing, crash/performance monitoring.
Security & fraud prevention: risk scoring, abuse detection, platform security.
Device & firmware maintenance: delivering software/firmware updates.
Compliance & legal obligations: tax, accounting, audit.
Sharing & Disclosure
We do not sell your personal information. We may disclose personal information as follows:
Service providers / processors: Cloud & CDN, hosting, email/SMS, payments, anti-fraud, logistics, analytics/ads.
Advertising & remarketing partners: Where you consent, we may share limited identifiers and event data.
Legal & safety: Compliance with law, enforcing terms, protecting users and our platform.
Business transfers: In connection with mergers, acquisitions, or asset sales.
Cookies & Tracking Technologies
Types: Strictly necessary, preference, analytics, advertising.
Regional differences: EU/UK: set only after consent. U.S.: follow state laws.
Cross-device tracking: With your consent, we may link identifiers across devices.
Managing choices: Use the "Cookie Preferences" link in the footer or browser settings.
Security
We implement TLS, encryption at rest, access controls, logging, staff training, vendor due diligence, and a vulnerability response process.
For hardware products, we provide firmware and security updates.
No method of transmission or storage is 100% secure.
Children's Privacy
The Site and our products are intended for users aged 18 and over.
We do not knowingly collect personal information from children under 13 (U.S.) or minors under the age of digital consent.
If you believe we have collected children's data in error, contact us to delete it.
Changes to This Policy
We may update this policy from time to time. Material changes will be notified via the Site, email, or an in-product notice.
Contact Us
If you have questions about this Policy or our data practices, please contact us:
Email: support@duva.com