This Privacy Policy describes how Elevert("we", "us", or "our") collects, uses, and shares your personal information when you use the Elevertapp and related services (the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.
The Service is operated by Elevert, who acts as the controller of your personal data. The Service is built on a third-party coaching software platform (the "Platform Provider"), which processes your data on our behalf as a data processor, under contractual safeguards.
1. Information We Collect
Information you provide to us
- Personal identifiers: name, email address, and phone number.
- Health and fitness data: body metrics such as weight, height, body measurements, and body-composition figures.
- Activity data: workout logs, nutrition and meal data, and progress photos you choose to upload.
- Communications: messages you exchange with us through the Service.
- Social login data: if you sign in with a third-party account (such as Google, Facebook, or X/Twitter), we receive basic profile information from that provider.
Information collected automatically
- Usage data: IP address, browser type and version, device identifiers, pages visited, and time spent in the Service.
2. How We Use Your Information
- To provide and maintain the Service, including your coaching programs, workouts, and nutrition plans.
- To create and manage your account.
- To contact you about your account, your program, and Service updates.
- To analyze usage so we can improve the Service.
- To comply with legal obligations.
3. Legal Bases for Processing (EU/UK Users)
Where the GDPR or UK GDPR applies, we process your personal data on the following bases: performance of our contract with you (delivering coaching services), your explicit consent (for health and fitness data, which is a special category of data), our legitimate interests (improving and securing the Service), and compliance with legal obligations. You may withdraw consent at any time; doing so does not affect processing that occurred before withdrawal.
4. How We Share Your Information
We do not sell your personal information, and we do not sell or share your health, fitness, or nutrition data for advertising purposes. We share data only with service providers that help us operate the Service:
- Platform Provider: the software platform that hosts and operates the Service on our behalf, including secure data storage.
- AI services: certain features use third-party AI providers (such as Anthropic, OpenAI, and Google) to generate content like workout or meal suggestions. These providers receive only the limited data needed for the feature and do not use your data to train their models.
- Analytics: Google Analytics and Firebase help us understand how the Service is used.
- Nutrition data: food and recipe information is provided through third-party nutrition databases (such as the Spoonacular API).
- Legal requirements: we may disclose data where required by law, or to protect the rights, safety, or property of users or others.
5. Data Retention
- Account data: retained for the life of your account plus up to 3 years.
- Health and fitness data: retained until you withdraw consent or request deletion.
- Usage logs: typically retained for 12 months.
You can request deletion of your data at any time. Verified deletion requests are processed within 30 days, subject to legal retention requirements.
6. Your Rights (EU/UK — GDPR)
If you are in the EU or UK, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Object to or request restriction of processing.
- Request erasure of your personal data.
- Receive your data in a portable format.
- Withdraw consent at any time.
You also have the right to lodge a complaint with your local data protection authority.
7. Your Rights (California — CCPA/CPRA)
If you are a California resident, you have the right to:
- Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Request deletion of your personal information, subject to legal exceptions.
- Opt out of the "sharing" of personal information for cross-context behavioral advertising. We do not sell your personal information, and we do not sell or share your health, fitness, or nutrition data.
- Not be discriminated against for exercising any of these rights.
8. Cookies and Tracking
The Service uses the following types of cookies:
- Essential session cookies: required for authentication and core functionality.
- Functionality cookies: remember your preferences between visits.
- Analytics cookies: third-party cookies that help us understand usage.
You can manage cookie preferences through your browser settings or the cookie banner where available. Disabling essential cookies may prevent parts of the Service from working.
9. Security
We and our Platform Provider use commercially reasonable technical and organizational measures to protect your personal data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children's Privacy
The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us so we can delete it.
11. International Transfers
Your information may be processed in countries other than your own, including the United States. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice through the Service or by email. The "Last updated" date at the top of this page reflects the most recent revision.
13. Contact Us
If you have questions about this Privacy Policy or want to exercise any of your rights, contact us at eleonora@elevert.co.