Draft pending legal review. It summarizes how Elvyfit processes your data; after the review, the final version will identify the data controller and its contact details.

1. What data we process

Account data: email, name or nickname.
Health and wellness data (special category under the GDPR): weight, body measurements, workouts, meals, sleep, steps and what you tell us in the chat. We only process this data with your explicit consent, which you can withdraw.
Technical data: app version, platform and errors, so that the app works and so we can fix bugs.

From the initial health screening we only keep the result (cleared, cleared with a warning or not cleared) and the date, never your answers.

2. What we use it for

To calculate your targets, your training plan and your meal plan.
So that Elvy (AI) can answer you with context, if you agree to it.
So that your 1:1 coach can see the sections you authorize, if you have Premium.
To improve the app with usage statistics.

3. Who we share it with

Providers that supply services to us (hosting, database, AI provider, payment management), under contracts that require them to protect your data.
Your coach or your gym, only if you authorize it and only what you authorize.
We never sell your data.

4. How long we keep it

For as long as you have an account. If you delete it, we erase your data, except the data that the law requires us to keep (for example, billing data), which is kept anonymized or blocked.

5. Your rights

You can access, rectify, export and delete your data, and withdraw your consents, from Settings › Privacy. You can also file a complaint with the Spanish Data Protection Agency (AEPD).

6. Security

We apply technical and organizational measures to protect your data (restricted access, encryption in transit, access rules for each user). If a breach affects you, we will notify you as required by law.