Privacy Policy

Introduction

Elevus ("we", "our", or "us") operates the Elevus mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

By using Elevus, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

When you create an account, we collect your email address (or, if you sign in with Apple or Google, the email address that provider shares with us — with Apple this may be a private relay address) and any profile information you choose to provide, such as your name, date of birth, sex, height, and unit preferences.

Training Profile

The details you give us about how you train — your goals, experience level, how many days a week you train, session length, the activities or sports you do, and the equipment you have access to. You can view and change all of it at any time (Profile → Athletic Profile).

Workout & Training Data

The workout data you enter, including exercises, sets, repetitions, weights, routines, body weight entries, and any custom exercises you create. This also covers training programmes generated for you, scheduled sessions, and the targets you set. This data is stored locally on your device and synced to our cloud servers so you can access it across devices.

Nutrition Data

If you use the nutrition features, we collect the meals and food entries you log, the barcodes you scan, and any calorie or macronutrient targets you set. Scanning a barcode sends only that barcode to Open Food Facts, and to the USDA's FoodData Central if Open Food Facts doesn't know it. Searching the food database sends only the words you type to FoodData Central. Neither is linked to your account (see Third-Party Services), and the product details returned are cached on your device.

Apple Health Data

If you connect Apple Health, Elevus reads steps, active and resting energy, walking/running distance, flights climbed, and workouts. With your permission we also write workouts and active energy back to Apple Health so your sessions appear there.

Workouts you import from Apple Health, for example a run recorded on your Apple Watch, are saved to your Elevus account like any workout you log: the type, time, duration, distance and calories, plus Apple Health's ID for the session. That keeps them in your history if you reinstall or move to a new phone, and lets the AI coach take them into account. If you remove an imported workout from Elevus, we keep that ID so it isn't imported again. Everything else read from Apple Health (your daily steps, energy, distance and flights) stays on your device. Apple Health data is never used for advertising, never sold, and never sent to analytics or crash reporting. The AI coach is the other place it goes: when you message it, a summary of your recent activity (such as average daily steps, active calories, and workouts) is sent with your message so the reply can take it into account. That summary is used only to produce the reply and is not kept. If the coach's reply mentions your activity — for example, your average steps this week — that reply is saved with the rest of your conversation (see AI Coach Conversations). If you disconnect Apple Health or revoke permission in iOS Settings, we stop reading it.

Body Analysis Photos & Results

If you use the AI body analysis feature, the photos you take are sent to our servers and passed to our AI provider for analysis in memory only. They are not written to disk, not logged, and not retained — they exist only for the seconds the analysis takes.

The photos themselves are saved on your device only, so you can compare scans over time. They are never uploaded for storage or backup. Deleting a scan deletes its photos; deleting the app or your account removes them permanently, and we cannot recover them for you. Only the results of the analysis (scores, estimated ranges, and notes) sync to our servers.

AI Coach Conversations

Your conversations with the AI coach are stored on your device and synced to our servers, so they are still there if you reinstall the app or move to a new phone. This includes your messages, the coach's replies, a short summary of longer conversations that the coach uses to keep track of them, and the facts the coach remembers about you, such as your goals, preferences, and equipment. You can see everything the coach remembers about you, and delete any of it, in the app.

To generate a reply, the message you send — along with relevant context such as your training profile, recent workouts, current programme, and a summary of your Apple Health activity if you have connected it — is sent to our servers and on to our AI provider. That context is used only to produce the reply and is not kept; the reply itself is saved to your conversation.

Deleting a conversation deletes it from your device and from our servers. Deleting your account deletes all of your conversations and everything the coach remembers about you.

Voice Input

If you use voice input, your microphone audio is temporarily recorded on your device, sent to our servers for transcription, and then discarded. We do not store audio recordings.

Camera & Photos

If you use the workout photo feature, Elevus accesses your camera to capture photos and your photo library to save or select images. Photos are processed on your device for stickers and filters. We do not upload or store your workout photos on our servers. If you photograph a meal for nutrition logging, that image is analyzed in memory by our AI provider and is not retained; the photo itself is kept on your device only.

Location

If you use workout photo stickers that display your city, your location is accessed once to determine the city name. Your location is never stored on our servers or shared with third parties.

AI-Processed Data

When you use AI-powered features — natural language workout logging, voice transcription, the AI coach, programme generation, nutrition parsing, and body analysis — your input is sent to our servers and processed using third-party AI providers (OpenAI and Google). We do not use your data to train AI models. We access these providers through their paid API tiers, which do not use content submitted through them for model training.

We keep a count of AI requests per feature against your account so we can enforce fair-use limits and subscription entitlements. This records that a request happened, not what it contained.

Analytics & Crash Data

We collect usage analytics (PostHog) and crash reports (Sentry) to understand how features are used and to fix problems. This may include device type, OS version, app version, screens visited, feature interactions, and subscription activity (viewing the subscription screen, and whether a purchase went through). Analytics events are associated with your account identifier so we can understand how the app performs for real users over time — they are not sold, and we do not use them for advertising. We do not record your screen, and Apple Health data is never included in analytics.

Our website, elevus.app, also uses PostHog to count page visits and clicks (for example, on the App Store button). It does this without cookies or any storage on your device, does not identify you, and is not linked to your account.

Payment Information

Subscriptions are processed entirely by Apple through the App Store. We never collect, store, or have access to your credit card or payment details. We receive only your subscription status (active/inactive, plan type, expiration date) through RevenueCat, our subscription management provider.

Push Notifications

If you enable notifications, we may send workout reminders and scheduled session alerts. You can disable notifications at any time in your device settings.

How We Use Your Information

We use your information to:

• Provide and maintain the app and its features
• Sync your training data across your devices
• Build and adapt training programmes, and personalise coaching, recovery and nutrition guidance
• Process your inputs through AI features
• Manage your subscription status and enforce fair-use limits
• Send workout reminders and scheduled session notifications
• Improve the app through analytics and crash reporting
• Respond to your feedback and support requests

We do not use your data for advertising, and we do not sell it.

Data Storage & Security

Elevus works offline first: your data is written to your device and synced to our cloud database hosted on Supabase (servers located in the EU). All data is transmitted using HTTPS encryption. Access to your data on our servers is protected by row-level security policies ensuring only you can access your own data.

Some data deliberately never leaves your device:

• Apple Health daily totals (steps, energy, distance, flights). Workouts imported from Apple Health are saved to your account (see Apple Health Data above); the AI coach receives only a per-message summary, which is not kept
• Body analysis, progress, meal and workout photos

Because that data is only on your device, it is not included in any backup we hold. If you delete the app or lose the device, it is gone.

We implement appropriate security measures to protect your data, but no method of electronic transmission or storage is 100% secure.

Third-Party Services

We use the following third-party services:

• Supabase — Cloud database and authentication
• OpenAI — AI parsing, coaching, transcription and body analysis
• Google AI — Fallback AI processing when our primary provider is unavailable
• RevenueCat — Subscription management
• PostHog — Product analytics
• Sentry — Crash reporting and error tracking
• Apple App Store — Payment processing and Sign in with Apple. If you ask Apple for a refund, we may share information about how you've used the app (for example, how long you've subscribed and how much you've used it) to help Apple review the request
• Google — Sign in with Google, if you choose it
• Open Food Facts — Barcode product lookup (scanning a barcode sends only that barcode)
• USDA FoodData Central — Barcode lookup when Open Food Facts has no match, and food search (sends only the barcode or the words you search)

Apple Health data is never shared with these services, except the activity summary sent to our AI provider when you use the AI coach (see Apple Health Data above).

Each service has its own privacy policy governing how they handle data. We encourage you to review their policies.

Data Sharing

We do not sell, rent, or trade your personal information to third parties. Your data is shared with third-party services only as described in this policy (for authentication, AI processing, subscription management, refund reviews, analytics, and crash reporting) and only to the extent necessary to provide the service.

Your Rights

You have the right to:

• Access your data — All your training data is visible within the app at any time.
• Delete your data — You can delete your account and all associated data at any time through the app (Profile → Account & Data → Delete Account). Upon deletion, your personal data — including your coach conversations — is permanently removed from our servers, and the data held only on your device, such as body analysis photos, is destroyed with it.
• Withdraw consent — You can revoke camera, microphone, location, notification, and Apple Health permissions at any time in your device settings. Revoking Apple Health access stops us reading it immediately; anything already written to Apple Health by Elevus remains yours to delete in the Health app.

If you are located in the European Economic Area, you may also have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

Data Retention

Your data is retained as long as your account is active. When you delete your account, your account, your login, and all personal data are permanently removed from our servers. Analytics events and crash reports are tied to a random account identifier, never your name or email; they are kept for our providers' standard retention periods, and once your account is deleted nothing links that identifier back to you.

Children's Privacy

Elevus is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
support@elevus.app