Privacy Policy

Data you give us

• Account: name, email address, profile photo, and your sign-in details (handled by our sign-in provider, Clerk).
• Profile: date of birth, gender, height, weight, sports, goals, fitness level, training schedule.
• Health information you choose to add, such as health conditions (for example heart conditions, diabetes, anxiety or pregnancy) so plans can be adjusted safely.
• Women’s Mode (optional): your cycle dates, cycle length and pregnancy details are stored on your phone only. When you use a feature that needs it, we send only the derived cycle phase, cycle day or trimester to our servers for that request.
• Training and nutrition: workouts, scores, personal records, check-ins (energy, mood, focus, effort), food logs and meal photos.
• Content: messages with your coach, circle posts, form-check videos and photos you upload.
• Body photo (optional, onboarding): analysed once to estimate body composition. The photo is not stored.

Data from devices and apps you connect (only after you connect them)

• Apple Health (iPhone) and Health Connect (Android, including Samsung Health): steps, heart rate, resting heart rate, heart-rate variability (HRV), active and resting energy, body weight and body fat, sleep, and workouts. You grant each type on your phone and can revoke it there at any time.
• WHOOP, Oura, Fitbit / Google, and Strava: connected through their own sign-in pages. We receive recovery, sleep, HRV, heart rate, activity and workout data, depending on the device.
• Garmin: Garmin does not offer us an official connection, so you sign in with your Garmin username and password in ELYV. They pass through our server to Garmin once to create a session; we store the session token, not your password.
• Zepp / Amazfit: sign-in is passed to Zepp’s own servers, which may be located in China.

Data collected automatically

• Device and connection data: device type, operating system, IP address and a push-notification token.
• Basic server logs needed to run and secure the Service. We do not use advertising or third-party analytics trackers.

• To run the Service: your dashboard, readiness and recovery scores, training plans, nutrition targets, calendar, classes and circles.
• AI coaching: plans, daily briefs, food estimates from photos, form feedback and chat answers are generated from your own data (see Anthropic below).
• To connect you with coaches, gyms and circles you choose to join, and to send you notifications about your training and messages.
• To keep the Service safe: preventing abuse, handling reports and blocks, and fixing errors.
• To improve ELYV using aggregated or de-identified data.
• To meet legal obligations.

We do not sell your data, and we do not use it for advertising or share it with data brokers. We do not use Apple Health or Health Connect data for any purpose other than providing the Service to you.

Legal basis. We process health data on the basis of your explicit consent, which you give when you start using ELYV and can withdraw at any time by deleting your account. Other data is processed to provide the Service you asked for, for our legitimate interest in keeping it secure, and to comply with the law.

• Coaches you connect with (through an invite, a request you send or accept, or a gym you join) can see your profile basics, your workouts, scores and training history, and messages you exchange.
• Recovery and wearable data (sleep, HRV, recovery, readiness, check-ins) and nutrition data (food logs, targets) are shown to your coach only if you switch sharing on. Both are off until you turn them on, in My Coach.
• You can remove a coach at any time from My Coach. Their access ends immediately. Blocking a coach also ends it.
• When you join a gym, that gym’s owner, managers and coaches can see your membership, class bookings, attendance and training. Your recovery and nutrition data still stay private unless you switch sharing on. To end a gym’s access, leave the gym or contact us.
• Circles: members of a circle you join can see your name and what you post there.
• A coach’s advice is guidance, not medical care. See our Terms.

We use these providers to run ELYV. They process data on our instructions and only for these purposes:

• Anthropic (AI, United States): receives the data an AI feature needs, which can include your profile, health conditions, training, recovery, nutrition, cycle phase, and meal, body or form photos. It is used to generate your result and is not used by us for advertising.
• Neon (database, Frankfurt, Germany): stores your account and fitness data.
• Vercel (hosting and file storage, including form-check videos; servers in the United States and Europe).
• Clerk (sign-in and profile photos, United States).
• Resend (email delivery, for example coach invites and messages you send to our support).
• Expo (push notifications).
• Polar (payments, when you pay for something such as a competition entry). We never see your full card details.
• The wearable and health providers you connect (see section 1), under their own privacy policies.
• Authorities, when the law requires us to disclose data.
• A buyer or successor, if ELYV is sold or restructured, under this policy.

Your data is stored in the European Union (Frankfurt) and processed by the providers above, some of which are in the United States. Where data leaves the DIFC, we rely on safeguards the DIFC Data Protection Law allows, including the provider's contractual commitments and your explicit consent.

• All connections use encryption in transit (HTTPS), and our database and file storage providers encrypt data at rest.
• Access to production systems is limited to the people who run ELYV.
• If a breach affects your data in a way that creates a risk to you, we will tell you and the regulator without undue delay, as the law requires.

• While your account is open, we keep your data so the Service works.
• When you delete your account, your account and the data linked to it are deleted immediately. Database backups roll over and are gone within 30 days.
• Some records are kept after deletion because they belong to someone else or are needed for safety: a coach’s own notes and client list entries they created, invites a coach sent to your email, reports made about content, and feedback you sent us. Form-check videos you uploaded are deleted with your account.
• Disconnecting a wearable stops new data from being collected. Data already synced stays in your history until you delete your account or ask us to delete it.

Depending on where you live, you have the right to:

• access your data and get a copy in a portable format;
• correct inaccurate data (most of it you can edit in the app);
• delete your account and data (in the app: Settings → Delete account, or see elyv.app/delete-account);
• withdraw consent, object to, or restrict processing;
• stop sharing recovery or nutrition data with a coach, or remove a coach, at any time;
• complain to a data protection regulator. Ours is the DIFC Commissioner of Data Protection; you can also contact the regulator where you live.

To use these rights, email privacy@elyv.app. We answer within 30 days and may need to confirm it is you. There is no charge.

ELYV is for people aged 16 and over. We do not knowingly collect data from anyone younger. If we learn that we have, we delete it.

When we change this policy in a way that matters, we will show the new version in the app and ask you to accept it before you continue. The version and date are at the top of this page.

Valkyn Technology Ltd, IH-00-01-03-OF-05, Level 3, Innovation One, DIFC, Dubai, United Arab Emirates.
Email: privacy@elyv.app

ELYV is currently in a testing phase in the Middle East. We will add country-specific terms before a commercial launch where the law requires them.