Privacy Policy

Introduction

Elevus ("we", "our", or "us") operates the Elevus mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

By using Elevus, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

When you create an account, we collect your email address (or an Apple-generated relay address if you use Sign in with Apple) and any profile information you choose to provide, such as your name, date of birth, sex, height, and weight unit preference.

Workout Data

We collect the workout data you enter, including exercises, sets, repetitions, weights, routines, and body weight entries. This data is stored locally on your device and synced to our cloud servers so you can access it across devices.

Custom Exercises

You may create custom exercises. These are stored alongside your account data and synced to our servers.

Voice Input

If you use the voice input feature, your microphone audio is temporarily recorded on your device, sent to our servers for transcription, and then discarded. We do not store audio recordings.

Camera & Photos

If you use the workout photo feature, Elevus accesses your camera to capture photos and your photo library to save or select images. Photos are processed on your device for stickers and filters. We do not upload or store your photos on our servers.

Location

If you use workout photo stickers that display your city, your location is accessed once to determine the city name. Your location is never stored on our servers or shared with third parties.

AI-Processed Data

When you use AI-powered features (such as natural language workout logging and smart suggestions), your input text is sent to our servers and processed using third-party AI services (OpenAI and Google). We do not use your data to train AI models.

Analytics & Crash Data

We collect anonymous usage analytics and crash reports to improve the app. This may include device type, OS version, app version, and interaction patterns. This data is not linked to your identity.

Payment Information

Subscriptions are processed entirely by Apple through the App Store. We never collect, store, or have access to your credit card or payment details. We receive only your subscription status (active/inactive, plan type, expiration date) through RevenueCat, our subscription management provider.

Push Notifications

If you enable notifications, we may send workout reminders and scheduled routine alerts. You can disable notifications at any time in your device settings.

How We Use Your Information

• • Provide and maintain the app and its features
• • Sync your workout data across your devices
• • Process your inputs through AI features
• • Manage your subscription status
• • Send workout reminders and scheduled routine notifications
• • Improve the app through analytics and crash reporting
• • Respond to your feedback and support requests

Data Storage & Security

Your workout data is stored locally on your device and synced to our cloud database hosted on Supabase (servers located in the EU). All data is transmitted using HTTPS encryption. Access to your data on our servers is protected by row-level security policies ensuring only you can access your own data.

We implement appropriate security measures to protect your data, but no method of electronic transmission or storage is 100% secure.

Third-Party Services

We use the following third-party services:

• • Supabase — Cloud database and authentication
• • OpenAI — AI workout parsing and suggestion features
• • Google AI — Fallback AI processing
• • RevenueCat — Subscription management
• • Sentry — Crash reporting and error tracking
• • Apple App Store — Payment processing and Sign in with Apple

Each service has its own privacy policy governing how they handle data. We encourage you to review their policies.

Data Sharing

We do not sell, rent, or trade your personal information to third parties. Your data is shared with third-party services only as described in this policy (for authentication, AI processing, subscription management, and crash reporting) and only to the extent necessary to provide the service.

Your Rights

You have the right to:

• • Access your data — All your workout data is visible within the app at any time.
• • Delete your data — You can delete your account and all associated data at any time through the app (Profile → Subscription → Delete Account). Upon deletion, your personal data is permanently removed from our servers.
• • Withdraw consent — You can revoke camera, microphone, location, and notification permissions at any time in your device settings.

If you are located in the European Economic Area, you may also have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

Data Retention

Your data is retained as long as your account is active. When you delete your account, all personal data is permanently removed from our servers. Anonymous, aggregated analytics data that cannot be linked to you may be retained.

Children's Privacy

Elevus is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: support@elevus.app