NOVA Verse

Privacy Policy

Effective Date: February 27, 2026
Last Updated: February 27, 2026

This Privacy Policy describes how Nova Element Corp d/b/a The NOVA(Verse) and/or NOVA and/or Flourish by NOVA ("Company," "we," "us," or "our") collects, uses, and discloses your personal information when you use our mobile application ("App"), visit our website at thenovaelement.com, visit our website at flourishbynova.com, any of our subdomains, or otherwise interact with our services (collectively, the "Services"). The App is available only within the United States. All personal information is stored and processed in the United States.

IMPORTANT: This App contains faith-based content and community features where users may share personal spiritual experiences, prayer requests, and wellness journeys. Religious and philosophical beliefs are classified as sensitive personal informationunder applicable law. We treat such information with the utmost care and respect, and we provide you with additional rights and protections regarding this data as described in this Privacy Policy.

By using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use the Services.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy within the App and update the "Last Updated" date above. For material changes, we will notify you through the App, by email, or by other communication methods before the changes take effect. Your continued use of the Services following the posting of changes constitutes acceptance of the revised Privacy Policy. We review and update this Privacy Policy at least once every twelve (12) months.

Information We Collect

Information You Provide Directly

Account and Profile Information: Account Eligibility and Community Access. The App is designed as a private community experience. You may create a registered user account only by signing up directly within the App; we do not create accounts for you in any other way. If you choose not to create an account, you may still download and use the App and will have access to all non-account features, but you will not be able to post or participate in community features, which may include giveaways, prizes and other activities.

• Basic contact details (name, email address)

• Account credentials (username, password)

• Profile information, including your name and profile image as displayed on the community wall, if created

• Communication preferences and notification settings

Community and Content Information:

• Posts, comments, and discussions on the community wall and in community groups

• Prayer requests and spiritual testimonies (when voluntarily shared)

• Responses to quizzes and wellness assessments

• Messages and communications with other users

• Feedback and customer support communications

Quiz and Assessment Information:

• Responses to quizzes and wellness assessments embedded within the App, which are powered by Typeform (operated by TYPEFORM SL). When you complete a quiz or assessment, Typeform collects your responses and may automatically collect technical data including a network identifier derived from your IP address (Typeform does not store raw IP addresses), browser type and version, device type, and cookies used to prevent duplicate submissions and store language preferences. Typeform acts as a data processor on the Company's behalf; the Company is the data controller for all quiz response data.

Newsletter Signup Information:

• If you sign up for the NOVA newsletter through the App, your name, email address, and signup source are transmitted to Klaviyo (operated by Klaviyo, Inc.), which acts as our email marketing service provider and data processor. Klaviyo may also collect your IP address and device information at the time of signup for fraud prevention and deliverability purposes. Your newsletter data may be shared across the NOVA and Flourish by NOVA brands, as both are operated by Nova Element Corp.

Giveaway and Promotional Information:

• When you enter a giveaway, sweepstakes, or other promotional campaign administered through the App or linked platforms (including promotions powered by ViralSweep, operated by AppHub LLC), we may collect: name, email address, mailing address, phone number, social media handles, and any other information specified on the entry form. Each promotion will be governed by its own Official Rules, which will disclose the specific data practices applicable to that promotion.

Information Collected Automatically

Device and Technical Information:

• Device type, model, and operating system version

• App version and usage statistics

• Device identifiers (device ID)

• IP address and general location information (city/state level, not precise geolocation)

• App performance data and crash reports

Usage and Analytics Data:

• Features accessed and time spent in different app sections

• Community groups joined and participation levels

• Content viewed and interactions with posts

• User preferences

Device Permissions (When Granted)

• Camera access — for profile photos or content sharing

• Photo library access — for uploading images

• Notification permissions — for community updates and reminders

We do not request or collect precise geolocation data. If this changes in the future, we will update this Privacy Policy and request your permission through your device's settings before collecting such data.

Information from Third Parties

We may receive information from:

• App stores (Apple App Store, Google Play Store) — download and installation data, app usage metrics

• Our website and membership site integrations — account information if you link your App account to thenovaelement.com or flourishbynova.com

• Social media platforms — basic profile information if you choose to connect a social media account if this service becomes available in the future

• Typeform — quiz and assessment response data, technical metadata (network ID, browser type, device type)

• Klaviyo — email engagement data (opens, clicks, bounces) related to newsletter communications sent on our behalf

• Promotion platform providers — entry data from giveaway and sweepstakes platforms such as ViralSweep (AppHub LLC)

How We Use Your Information

Core App Functions

• Create and maintain your user account

• Facilitate community discussions and participation on the community wall

• Deliver content

• Provide customer support and respond to inquiries

Faith-Based Community Features

• Sacred Content Protection: We recognize that spiritual discussions, prayer requests, and faith-based content are deeply personal. This information is used solely to facilitate meaningful community connections and spiritual growth.

• Enable prayer request sharing and support networks

• Facilitate faith-based discussions

• Provide relevant spiritual content and devotional materials

Communication and Engagement

• Send important account and service notifications

• Deliver community updates and prayer reminders

• Share relevant wellness and faith-based content

• Respond to support requests and feedback

Analytics and Improvement

• Analyze app usage to improve features and user experience

• Conduct research to enhance community safety and engagement

• Monitor for Community Guidelines violations and inappropriate content

• Ensure app security and prevent fraud or abuse

Marketing (With Your Consent)

• Send promotional communications about our services, including newsletters delivered via Klaviyo

• Recommend relevant content based on your interests

• Share information about NOVA and Flourish by NOVA products

• Administer giveaways, sweepstakes, and promotional campaigns

Giveaway and Sweepstakes Administration

• Verify eligibility and select winners

• Fulfill prizes and comply with applicable promotion laws

• With your consent, add your contact information to our marketing email or SMS lists

Faith-Based Content — Special Protections

Sacred Information Commitment. We understand that religious beliefs, spiritual experiences, prayer requests, and faith discussions are among the most personal types of information. Under the California Privacy Rights Act (CPRA), religious and philosophical beliefs are classified as sensitive personal information. We commit to:

• Never selling or monetizing spiritual content, prayer requests, or faith-based discussions.

• Limiting access to faith-based content to authorized personnel only when necessary for community safety or to provide the Services.

• Protecting minority viewpoints while maintaining our Christian community focus.

• Respecting spiritual privacy in all data handling practices.

• Providing you with the right to limit our use and disclosure of your sensitive personal information as described in the "Your Privacy Rights" section of this Privacy Policy.

Community Content and User-Generated Information

When you post content on the community wall — including text, images, comments, and prayer requests — that content is visible to other registered users of the App. You should not share information in community features that you wish to keep private.

By posting content on the App, you grant the Company a non-exclusive, royalty-free license to display, distribute, and reproduce your content solely for the purpose of operating and maintaining the App and its community features. You retain ownership of your content.

When you delete your account, the Company will remove your profile and community posts within thirty (30) days, though cached or archived copies may persist briefly and anonymized references may be retained for community safety or legal compliance purposes. Content that other users have quoted, replied to, or otherwise interacted with may remain visible in anonymized form.

Data Sharing and Disclosure

Service Providers

We share information with trusted third parties who help operate our Services, acting as data processors or service providers on our behalf:

• Cloud hosting and data storage providers — to store and serve App data

• Analytics and performance monitoring services — to analyze App usage and improve performance

• Quiz and assessment platform (Typeform / TYPEFORM SL) — to power embedded quizzes and wellness assessments within the App. Typeform processes quiz responses, technical metadata, and cookies on our behalf under a Data Processing Agreement. Typeform stores data on Amazon Web Services (AWS) servers in the United States, encrypted in transit (TLS 1.2) and at rest (AES-256)

• Email marketing platform (Klaviyo, Inc.) — to manage newsletter subscriptions, deliver email communications, and track email engagement metrics (opens, clicks, bounces). Klaviyo processes subscriber data on our behalf under a Data Processing Agreement and does not sell or share subscriber data for cross-context behavioral advertising

• Customer support platforms — to manage support communications

• Content delivery networks — to deliver App content efficiently

• Promotion and giveaway platforms (ViralSweep / AppHub LLC) — to administer sweepstakes and giveaways

Each service provider is contractually obligated to use personal information only for the purposes of providing services to us and in accordance with this Privacy Policy.

NOVA and Flourish by NOVA Integration

As part of our business operations, we may share information between:

• The NOVA(Verse) App and NOVA's and Flourish by NOVA's websites (thenovaelement.com and flourishbynova.com)

• NOVA’s main and membership site and the Flourish by NOVA product platform

• Integrated wellness and supplement recommendation systems

If you use the same email address for your App account and for a purchase or account on a linked website, the Company may associate your App activity with your website activity for purposes of improving your experience, providing customer support, and personalizing content and product recommendations. You may opt out of this cross-property data linkage by contacting us at info@thenovaelement.com.

Legal and Safety Requirements

We may disclose information when required to:

• Comply with applicable laws, regulations, legal processes, or enforceable governmental requests

• Protect the safety and security of our users

• Prevent fraud, abuse, or violations of our Community Guidelines or Terms of Service

• Defend our legal rights and interests

Community Safety

To maintain a safe environment, we may share information with:

• Moderators and community safety teams (Company personnel or authorized contractors)

• Law enforcement (only when legally required or necessary to prevent imminent harm)

• Other users (only information you choose to make public through community features, such as your name and profile image on the community wall)

Information We Do Not Sell

We do not sell your personal information to third parties as "sell" is traditionally defined. We do not share your personal information for cross-context behavioral advertising. We do not run third-party advertisements within the App.

Links to External Websites (NOVA and Flourish by NOVA)

The App contains links to websites operated by Nova Element Corp d/b/a NOVA and Flourish by NOVA, including flourishbynova.com and thenovaelement.com. When you follow these links, you leave the App and your activity becomes subject to the privacy policy of the destination website.

These websites may use cookies, tracking pixels, and analytics tools that are different from those used within the App — including, on flourishbynova.com, tools such as Meta Pixel, Google Analytics 4, Hotjar, and Microsoft Clarity. The Company encourages you to review the privacy policy of each linked website before providing personal information or making a purchase.

While these websites are operated by the same corporate entity, the data collected on each platform is governed by the privacy policy posted on that platform.

Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest

• Regular security assessments and vulnerability monitoring

• Role-based access controls and authentication requirements

• Employee and contractor training on data protection practices

Enhanced Protection for Sensitive Information. Spiritual and religious content — including prayer requests, faith discussions, and testimonies — receives additional access restrictions due to its classification as sensitive personal information under applicable law.

No method of electronic transmission or storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain your personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, and to comply with our legal obligations.

Data Category	Retention Period
Account and profile information	Duration of your account + 30 days after account deletion
Community posts and comments	Duration of your account; deleted upon account deletion unless required for legal compliance or community safety
Prayer requests and faith-based content	Same as community posts; treated with enhanced access restrictions during retention
Device and technical information	12 months from date of collection
Usage and analytics data	12 months from date of collection, then aggregated/anonymized
Customer support communications	24 months from resolution of the support request
Giveaway and promotion entry data	Duration of the promotion + 12 months, or longer if required by applicable promotion law
Quiz and assessment responses (Typeform)	Duration of your account + 30 days after account deletion; Typeform retains data on its servers until instructed by the Company to delete
Newsletter subscription data (Klaviyo)	Duration of your subscription; deleted from Klaviyo within 30 days of unsubscribe or account deletion request
Legal compliance records	As required by applicable law (typically 3–7 years)

Account Deletion. When you delete your account through the community section of the App, we will delete or de-identify your personal information within thirty (30) days, except for information we are required or permitted to retain under applicable law. Both the Apple App Store and Google Play Store require that apps supporting account creation also support in-app account deletion — the App complies with this requirement.

Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information. We honor these rights for all users regardless of location, as a matter of Company policy:

Access and Control

• Right to Know / Access: Request a copy of the personal information we have collected about you, including the categories of personal information, the sources from which it was collected, the business purpose for collection, and the categories of third parties with whom it was shared.

• Right to Correct: Request correction of inaccurate personal information we maintain about you.

• Right to Delete: Request deletion of your personal information, subject to certain legal exceptions. You may also delete your account directly within the App.

• Right to Data Portability: Receive your personal information in a structured, commonly used, machine-readable format.

Opt-Out Rights

• Right to Opt Out of Sale or Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information. We do not sell personal information or share it for cross-context behavioral advertising. If this practice changes, we will provide a "Do Not Sell or Share My Personal Information" link within the App and on our website.

• Right to Limit Use of Sensitive Personal Information: Because the App may collect religious or philosophical beliefs (classified as sensitive personal information under the CPRA), you have the right to direct us to limit the use and disclosure of your sensitive personal information to what is strictly necessary to provide the Services. To exercise this right, contact us at info@thenovaelement.com or online: https://thenovaelement.com/pages/contact-us

• Right to Opt Out of Targeted Advertising: You may opt out of the processing of your personal information for purposes of targeted advertising. We do not currently engage in targeted advertising within the App.

• Right to Opt Out of Profiling: You may opt out of automated profiling that produces legal or similarly significant effects.

Additional Rights

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of quality based on your exercise of these rights.

Privacy Controls Within the App

• Communication Preferences: Opt out of marketing communications by emailing info@thenovaelement.com or visiting https://thenovaelement.com/pages/contact-us

• Notifications: Customize push notifications and alerts through the App's settings or your device settings.

• Device Permissions: Manage camera and photo library access through your device settings.

• Account Deletion: Delete your account created to join the community directly within the App.

How to Exercise Your Rights

To exercise any privacy right described in this Privacy Policy:

• Email: info@thenovaelement.com

• Online: https://thenovaelement.com/pages/contact-us

• Mail: Nova Element Corp, 2870 Peachtree Rd. #886, Atlanta, GA 30305

Verification. To protect your privacy, we will verify your identity before processing your request. We may ask you to confirm your email address or other information associated with your account. If we cannot verify your identity, we may deny the request and will explain the reason.

Authorized Agents. You may designate an authorized agent to submit a privacy request on your behalf. The authorized agent must provide written proof of authorization (such as a signed letter or power of attorney). We may still require you to verify your identity directly.

Response Timeline. We will acknowledge receipt of your request within ten (10) business days. We will respond substantively to verifiable requests within forty-five (45) days of receipt. If we require additional time (up to an additional 45 days), we will notify you in writing of the reason for the extension.

California Privacy Rights (CCPA/CPRA)

This section provides additional disclosures required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA"), for California residents.

Voluntary Compliance Notice

The Company may not currently meet all of the statutory thresholds that trigger mandatory compliance under the CCPA/CPRA (annual gross revenue over $25 million; buying, selling, or sharing personal information of 100,000 or more California consumers; or deriving 50% or more of annual revenue from selling or sharing personal information). However, the Company voluntarily complies with the CCPA/CPRA as a matter of best practice and to protect the privacy of all users.

Categories of Personal Information Collected

The following table describes the categories of personal information (as defined by the CCPA) that the Company has collected from consumers within the preceding twelve (12) months, the sources of that information, the business purpose for collection, and the categories of third parties with whom the information is shared:

CCPA Category	Examples Collected	Sources	Business Purpose	Third Parties
A. Identifiers	Name, email address, username, IP address, device ID	Directly from you; automatically from your device; app stores	Account creation, customer support, analytics	Cloud hosting providers, analytics providers, promotion platforms
B. Personal information under Cal. Civ. Code § 1798.80(e)	Name, email address	Directly from you	Account creation, communications	Cloud hosting providers, customer support platforms
C. Characteristics of protected classifications	Religious beliefs (voluntarily shared)	Directly from you through community features	Facilitating faith-based community features	Not shared with third parties
D. Commercial information	Giveaway entry history, newsletter subscription history	Directly from you; Klaviyo	Promotion administration, email marketing	Promotion platforms (ViralSweep/AppHub), email marketing platform (Klaviyo)
E. Biometric information	Not collected	N/A	N/A	N/A
F. Internet or electronic network activity	App usage data, features accessed, content viewed, navigation patterns, quiz completion data, email engagement data (opens, clicks), network identifiers	Automatically from your device; Typeform; Klaviyo	Analytics, improving the App, security, email deliverability	Analytics providers, Typeform, Klaviyo
G. Geolocation data	General location (city/state level, derived from IP address)	Automatically from your device	Analytics, content personalization	Analytics providers
H. Audio, electronic, visual, or similar information	Profile photos, images uploaded to community wall	Directly from you	Community features, profile display	Cloud hosting providers
I. Professional or employment-related information	Not collected	N/A	N/A	N/A
K. Inferences	Content preferences, community engagement patterns	Derived from your usage data	Content personalization, improving the App	Not shared with third parties

Sensitive Personal Information

The App collects the following categories of sensitive personal information as defined under the CPRA:

• Religious or philosophical beliefs — voluntarily shared through community features such as prayer requests, faith discussions, and spiritual testimonies.

• Account log-in credentials — username and password used to access your account.

This sensitive personal information is collected and used solely to provide the App's services (facilitating the faith-based community and maintaining account security). It is not sold, shared for advertising purposes, or used for any purpose beyond what is reasonably necessary to provide the Services.

You have the right to limit the use and disclosure of your sensitive personal information. To exercise this right, contact us at info@thenovaelement.com or submit a request online: https://thenovaelement.com/pages/contact-us

Sale and Sharing of Personal Information

In the preceding twelve (12) months, the Company has not sold personal information and has not shared personal information for cross-context behavioral advertising purposes, as those terms are defined under the CCPA/CPRA.

Retention Periods

The Company retains each category of personal information for the periods described in the "Data Retention" section of this Privacy Policy.

Additional State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island may have similar privacy rights under their respective state privacy laws, including the right to access, correct, delete, and port personal information, and the right to opt out of the sale of personal information, targeted advertising, and certain profiling.

Where applicable state law requires opt-in consent before processing sensitive personal information (including religious beliefs), the Company treats your voluntary decision to share such information through community features as your affirmative consent to process it for the stated purposes.

To exercise any rights under applicable state privacy law, contact us using the methods described in the "How to Exercise Your Rights" section above.

Do Not Track and Global Privacy Control

The App does not currently respond to "Do Not Track" (DNT) browser or device signals, as there is no universally accepted standard for recognizing or honoring DNT signals in mobile applications.

The Company does honor Global Privacy Control (GPC) signals where required by applicable law, including under the CCPA/CPRA and the Colorado Privacy Act. When a GPC signal is detected, the Company will treat it as a valid opt-out request for the sale or sharing of personal information.

For more information about GPC, visit https://globalprivacycontrol.org.

Children's Privacy

The App is intended for users aged 18 and older. The App is not directed to children under the age of 13, and the Company does not knowingly collect personal information from children under 13. If the Company becomes aware that it has collected personal information from a child under 13, the information will be deleted promptly and the child's account will be terminated.

For users between 13 and 17 years of age, use of the App requires verifiable parental or legal guardian consent. The Company reserves the right to require age verification and to terminate accounts that do not meet the minimum age requirement.

Under the CPRA, the Company does not sell or share the personal information of consumers it knows to be under 16 years of age without affirmative authorization.

If you believe a child under 13 has provided personal information through the App, please contact us immediately at info@thenovaelement.com.

Cookies and Tracking Technologies

The App and associated website use cookies and similar technologies to:

• Remember your preferences and login status

• Analyze app and website usage and performance

• Provide personalized content and recommendations

• Enable social media integration features (when you choose to connect accounts)

You can control cookies through your browser or device settings, though disabling cookies may affect certain functionality. For the App specifically, most tracking is managed through your device's privacy settings.

Third-Party SDKs and Services

The App integrates the following categories of third-party software development kits (SDKs) and services, each of which operates under its own privacy policy:

• Typeform (TYPEFORM SL) — embedded quiz and assessment platform; collects quiz responses, network identifiers, browser/device metadata, and functional cookies

• Klaviyo (Klaviyo, Inc.) — email marketing and newsletter delivery platform; processes subscriber names, email addresses, IP addresses, and email engagement data

• ViralSweep (AppHub LLC) — giveaway and sweepstakes administration platform (when promotions are active)

• Analytics and performance monitoring — to track App usage and improve performance

• Crash reporting and debugging — to identify and resolve technical issues

• Push notification services — to deliver notifications

Additional current and future SDKS:

NAME Firebase	USE Analytics / statistics tracking	VERSION 11.11.0
AdMob	Advertising network	12.2.0
AdMob Meta Adapter	Facebook ad mediation	6.17.0
UMP	Displaying EU consent popup (GDPR compliance)	2.0.0
FB Native Ads	Facebook advertising	6.17.1
FB Login & App Events	Facebook login and analytics events	18.0.0
Countly	Analytics / statistics tracking	24.4.0
SmartProfile	Analytics tool	0.1.9
Stripe	Payment processing	23.29.2
GBUKit	Internal application logic	1.10.0
GBSWebImage	Image handling / internal logic	1.0.2
GoodBarberAds	Internal ad management	1.2.4
Swifter	Internal logic (Twitter integration)	2.5.0
TwitterKit	Twitter login	5.1.0
TwitterCore	Twitter login support	3.2.0
Lottie SDK	Animation rendering	4.5.0
AppsFlyer	Attribution and marketing analytics	6.15.3

Progressive Web App (PWA) SDKs

SDK Name	Used For	When Included
AdSense	Advertising	Only if AdSense ads enabled
DFP (Google Ad Manager)	Advertising	Only if DFP ads enabled
Gtag	Analytics tracking	Only if analytics enabled
GTM (Google Tag Manager)	Analytics / tag management	Only if GTM enabled
Meta Pixel	Advertising analytics	Only if Meta pixel enabled
Firebase	Analytics / backend services	If Firebase enabled
Stripe	Payment processing	Commerce apps
Facebook (FB)	Facebook login	Only if authentication add-on enabled
Disqus	Comment system	Only if Disqus comments enabled
Google Maps API V3	Map display	If Google selected as map provider
Mapbox GL	Map display	If Mapbox selected as map provider

Third-Party Services and Links

The App contains links to external websites, including our affiliated sites NOVA (thenovaelement.com) and Flourish by NOVA (flourishbynova.com), as well as third-party services used for promotions (such as ViralSweep). We are not responsible for the privacy practices of third-party websites or services that are not operated by the Company. Please review their privacy policies before providing personal information.

App Store Privacy Disclosures

The data practices described in this Privacy Policy are intended to be consistent with the privacy disclosures provided on the Apple App Store (App Privacy Labels) and Google Play Store (Data Safety Form). If there is any discrepancy between this Privacy Policy and the app store disclosures, this Privacy Policy controls. The Company reviews and updates its app store disclosures in connection with each App update to maintain accuracy.

Data Breach Notification

In the event of a data breach involving your personal information, the Company will notify affected users in accordance with applicable state and federal law, including the Georgia Personal Identity Protection Act (O.C.G.A. § 10-1-912). Notification will be provided via the email address associated with your account and/or through the App within the timeframes required by law. The Company will also notify relevant state authorities as required.

Contact Information

For questions about this Privacy Policy, to exercise your privacy rights, or to report a concern:

Email: info@thenovaelement.com
Address: Nova Element Corp, 2870 Peachtree Rd. #886, Atlanta, GA 30305
Phone: 678-561-0496

We aim to respond to all privacy-related inquiries within ten (10) business days.

This Privacy Policy was last reviewed and updated on February 27, 2026. It will be reviewed at least annually and updated as needed to reflect changes in our practices or applicable law.