Privacy Policy

Eleviy is an AI-assisted fitness and nutrition product built by Svorus Private Limited, India ("Eleviy," "we," "us," or "our"). The product includes meal logging, meal photo and voice analysis, barcode scanning, workout planning, progress tracking, cycle-aware coaching, readiness insights, family and corporate wellness, and an AI coaching assistant called Aria.

This Privacy Policy explains what personal and sensitive data we collect across the Eleviy mobile app (Android and iOS), website (eleviy.com), support channels, waitlist and newsletter forms, and account workflows — and how we collect, use, process, store, share, retain, export, and delete that data.

Eleviy is not a medical device and does not provide medical diagnosis, treatment, emergency advice, or a guarantee of health, fitness, nutrition, weight, or body-composition results. AI output can be incomplete or incorrect. Users should review guidance carefully and consult a qualified licensed professional for any medical condition, injury, pregnancy, eating disorder, medication interaction, or urgent health symptom.

Eleviy does not sell, rent, trade, or otherwise provide personal or sensitive user data to third parties for their own independent commercial purposes, advertising, or data brokerage. We use your data only to provide, improve, and secure the product and to comply with legal obligations.

The companion Data Usage page at https://eleviy.com/data-usage provides a feature-by-feature breakdown of data flows, permissions, SDKs, and Google Play Data Safety alignment.

Eleviy is intended for users who are at least 13 years of age. Users between the ages of 13 and 17 must have parental or guardian consent before creating an account or using the product, and that parent or guardian agrees to this Privacy Policy on the minor's behalf.

Users under 13 must not use Eleviy. If we learn that we have collected personal data from a user under 13 without verifiable parental consent where required by applicable law, we will promptly delete or restrict that data.

Parents or guardians who believe their child has provided data to Eleviy without appropriate consent should contact us at info@eleviy.com so we can review and address the situation.

Account and authentication data includes your email address, display name, password hash (never your plaintext password), one-time-password verification records, login session tokens, refresh tokens, social sign-in identifiers from Google or Apple when you choose those methods, country or region, locale, language, unit preferences, account status, and account creation metadata.

Profile and onboarding data includes date of birth or age range, biological sex where provided, height, current weight, goal weight, fitness level, activity level, primary fitness goal, dietary preference, food allergies and intolerances, available equipment, training styles, preferred workout days, session duration, calorie and macro targets, water targets, coaching mode, check-in preferences, custom AI coach instructions, household size, and any other profile fields you complete during onboarding or settings.

Nutrition and meal data includes meal names, food items, quantities, calories, macronutrients, meal timing, water logs, custom foods you create, grocery lists, barcode values from barcode scans, user-corrected barcode and food matches, meal text descriptions, uploaded or captured meal photos, restaurant menu photos, pantry or fridge photos, photo file metadata, voice meal recordings or audio clips, speech-to-text transcriptions of meal descriptions, and AI-generated or AI-assisted meal estimates and corrections.

Workout, strength, and progress data includes workout plans, completed workout sessions, exercises performed, sets, repetitions, weights lifted, personal records, estimated strength metrics, progression recommendations, fatigue scores, TDEE estimates and coaching proposals, body measurements, body weight log, progress photos, progress-photo AI analysis results, achievements, streaks, and weekly AI-generated reports.

Health and cycle data includes optional menstrual-cycle information such as last period start date, average cycle length, and calculated cycle phase. On Android, Eleviy requests read-only Health Connect access limited to the android.permission.health.READ_MENSTRUATION permission only for the optional Cycle Sync feature. On iOS, Eleviy may request read-only Apple Health access limited to menstrual-cycle data for the same feature. Steps, sleep, active calories, heart rate, and Health Connect write access are not used in the current implementation. Readiness data includes subjective self-reported sleep quality, energy, recovery, and mood data you enter voluntarily.

AI coaching and chat data includes your chat messages sent to the AI coach (Aria), AI-generated responses, conversation metadata, weekly AI-generated reports, regenerated or edited responses, your custom coach instructions, relevant profile context and recent activity context sent to the AI service to personalize responses, and any report or safety feedback you provide about AI output.

Camera, microphone, and audio recording data includes images captured via the camera for meal scanning, menu and pantry scanning, and progress photo capture; audio clips recorded via the microphone for voice meal logging; and speech transcriptions generated from those clips. Camera and microphone data is processed only for the specific feature you activate at that moment.

Family and corporate wellness data includes group invite codes, group membership identifiers, shared meal details visible within the group, challenge participation, challenge progress, team or family leaderboard summaries, corporate membership details, and administrator-initiated group actions.

Device, diagnostics, and notification data includes device platform (Android or iOS), app version, device timezone, Firebase Cloud Messaging (FCM) registration token, Firebase or app installation identifiers, notification preferences, local notification settings, crash reports sent to Firebase Crashlytics, performance diagnostics, operating system version, and network or request metadata needed for security and reliability.

Website and support data includes messages submitted through contact forms, waitlist entries, newsletter subscriptions, partnership enquiries, email preferences, email unsubscribe tokens, consent records, hashed IP address, hashed user-agent string, source page, UTM fields, first-party cookies or browser storage items, and consent-gated website analytics events.

Account data is used to create and authenticate your account, verify your email address, support Google or Apple social sign-in, manage session tokens, reset passwords, prevent unauthorized access and abuse, apply your region and unit preferences, process your data export requests, and process your account deletion requests.

Profile and onboarding data is used to personalize your daily calorie and macro targets, meal guidance, workout plans, coaching check-ins, AI coach context, reminders, achievements, family or corporate challenge summaries, and weekly AI-generated reports.

Nutrition and meal data, including photos, audio, and barcodes, is used to identify foods, estimate ingredients, calories, and macros, create meal log entries, allow you to correct or confirm estimates, manage your custom food library and grocery lists, and improve food database accuracy. Meal photos and voice audio clips may be sent to third-party AI services or transcription services when you choose to use the meal photo scan or voice meal logging feature. Meal-photo staging records that are not confirmed are designed to be cleaned up on short retention schedules.

Workout, progress, and readiness data is used to support workout planning, progress review, fatigue scoring, TDEE estimation, personal record tracking, AI coaching context, progress photo viewing, and progress-photo AI analysis when you enable that feature.

Health Connect and Apple Health menstrual-cycle data is used only when you activate the Cycle Sync feature. The data is used to estimate your latest period start date and calculate your current cycle phase, which is then used to provide phase-aware workout intensity notes, nutrition notes, reminders, and AI coaching context. Menstrual-cycle data is never used for advertising, data brokerage, third-party marketing, fertility advice, contraception guidance, medical diagnosis, treatment, or emergency health decisions.

Readiness data you enter voluntarily is used to generate readiness insights, inform AI coaching context, and adjust workout intensity recommendations.

Camera access is used for meal scanning (photo-to-food analysis), menu and pantry scanning, progress photo capture, and barcode scanning. Microphone and audio-recording access is used only for voice meal logging and voice input features you activate.

AI coaching and chat data is used to generate personalized coaching responses, meal analysis, workout guidance, quick insights, and weekly reports. AI providers may process your prompts, images, audio transcriptions, profile context, nutrition context, workout context, cycle context, readiness context, and AI output only as necessary to deliver the feature you use.

Firebase and related tooling is used for app initialization, push notifications, crash reporting, and reliability diagnostics.

Website and analytics data is used to answer contact and support requests, manage launch communications, prevent spam, operate admin workflows, measure website performance after you provide consent, and maintain security and audit trails.

Eleviy does not sell, rent, trade, or provide your personal or sensitive data to third parties for advertising, data brokerage, third-party marketing, third-party profiling, or any independent commercial use by a third party.

Some infrastructure and service providers process limited data strictly on our behalf and only as necessary to operate the product. This processor-only handling is not a sale or independent third-party use. Named processors and services currently used include: Firebase Core, Firebase Cloud Messaging, and Firebase Crashlytics (Google LLC) for app infrastructure, push notifications, and crash reporting; Google Sign-In (Google LLC) for optional social authentication; Apple Sign-In (Apple Inc.) for optional social authentication; AI model providers such as OpenAI, Google Vertex AI, or Google Gemini where configured for meal analysis, AI coaching responses, and weekly report generation; cloud hosting, databases, and object storage providers for storing your account and app data; email delivery services for account verification, export download links, and newsletter communications; nutrition database or barcode lookup services for food identification; consent-gated analytics tools where you provide consent; and operational security tools.

When you use Google or Apple sign-in, the identity provider sends Eleviy only the sign-in information necessary to authenticate your account. When you authorize Health Connect or Apple Health, the platform provides Eleviy only the specific health data types you approve for the specific feature you are enabling.

Family and corporate features may display selected profile information, meal logs, challenge activity, and ranking data inside the family or corporate group space you voluntarily choose to join. Do not join or create a group if you are not comfortable with selected records being visible to other members or administrators of that group.

Eleviy may disclose data to comply with legally binding legal process, court orders, government or regulatory requests, or safety, fraud-prevention, abuse, dispute, tax, payment, audit, or legal compliance obligations. We limit any such disclosure to what is legally required or necessary for that specific purpose and apply appropriate safeguards where required.

If Eleviy is acquired, merges with another entity, or transfers assets, your data may be transferred as part of that transaction subject to the same or equivalent privacy protections. We will notify users of any such transfer where required by law.

Eleviy retains your account, profile, meal, workout, progress, cycle, readiness, coaching, family, corporate, notification, and support data while your account is active, or for as long as needed to provide the feature, maintain security, resolve disputes, comply with applicable law, or complete legitimate business operations.

Website contact, waitlist, newsletter, and partnership submissions are generally retained for up to 730 days unless you delete them, unsubscribe, or convert into a support relationship, or unless a legal hold applies. Consent-gated website analytics events are generally retained for up to 395 days before scheduled cleanup.

Meal-photo staging records that you do not confirm are designed for short cleanup cycles. Data export files are generated on request, made available through a time-limited download link that expires after approximately 7 days, and then removed from temporary storage.

When you request account deletion through the Eleviy app or through the public web resource at https://eleviy.com/data-deletion, we deactivate your account immediately and begin the deletion process. Active first-party account records are deleted or de-identified after a 30-day deletion grace period, unless we are required to retain limited records for the exceptions described on the Data Deletion page.

Backup copies and operational logs may not be immediately deletable, but they are removed, overwritten, or de-identified on normal backup and log retention cycles. Records retained for legal, tax, fraud prevention, security, payment, support, or audit reasons are kept only for the period required for those specific purposes and then deleted or de-identified.

Depending on your country or region, you may have rights to access, export, correct, delete, or restrict the processing of your data. Eleviy supports these requests where applicable law requires.

You can request a data export directly from the Eleviy app (Settings > Export). The export flow emails you a time-limited download link after background processing.

You can request account deletion from the app (Settings > Danger Zone > Delete Account) or from the public web resource at https://eleviy.com/data-deletion. You can also email info@eleviy.com from the email address associated with your account.

You can change many choices directly in the app, including notification preferences, coach instructions, unit preferences, Cycle Sync (enabling or disabling), individual progress photos, and region or language settings. Disabling Cycle Sync deletes the saved cycle profile from Eleviy.

You can manage or revoke Health Connect permissions in Android system settings, Apple Health permissions in iOS settings, and push notification permissions in your device settings. Revoking a permission disables the related feature but should not affect other app functions.

You can unsubscribe from newsletter or waitlist communications using the unsubscribe link in any email or by emailing info@eleviy.com.

For privacy questions, access requests, correction requests, deletion requests, or to exercise any other applicable right, contact info@eleviy.com. We aim to acknowledge requests within 30 days and resolve them within the period required by applicable law.

Eleviy uses technical, administrative, and organizational safeguards designed to protect your personal and sensitive data. These include TLS encryption for data in transit, bcrypt or similar hashing for passwords, hashing for one-time passwords, refresh-token rotation and revocation, role-based access controls, rate limiting and abuse detection, audit logging, and restricted admin workflows.

No internet service can guarantee absolute security against all threats. Do not send plaintext passwords, emergency medical information, financial account numbers, or other highly sensitive records through the AI chat, support forms, or email. Contact emergency services or a qualified licensed professional for urgent health or safety concerns.

Eleviy is not directed to children under the age of 13. If we learn that we collected personal data from a user under 13 without verifiable parental consent where required by applicable law, we will promptly delete or restrict that data.

For users between 13 and 17, parental or guardian consent is required. Parents or guardians who believe their child has provided data to Eleviy without appropriate consent should contact us at info@eleviy.com so we can review and address the situation.

Eleviy is operated from India and uses service providers that may operate in other countries, including the United States, the European Economic Area, and other regions. When your data is processed by a provider in another country, we rely on appropriate contractual safeguards such as standard contractual clauses, data processing agreements, or equivalent legal mechanisms where required by applicable law.

By using Eleviy, you understand that your data may be transferred to and processed in countries other than your country of residence, which may have different data protection laws than your country.

We may update this Privacy Policy when the product, our service providers, or applicable legal requirements change. The effective date and version number at the top of this page identify the current version. We will communicate material changes through the website, the app, email, or another appropriate channel where required by applicable law.

Your continued use of Eleviy after a policy update constitutes your acceptance of the updated policy. If you do not agree with a material change, you should stop using Eleviy and may request deletion of your account and data.

For privacy questions, data export requests, account deletion, security concerns, or to exercise your privacy rights, contact us at:

Email: info@eleviy.com

Eleviy is operated by Svorus Private Limited, India.

We aim to respond to all privacy inquiries within 30 days.