Privacy Policy

1. Scope and privacy commitments

References to “Exeriva”, “we”, “us” and “our” mean the operator of the Services. This policy covers information provided by you, received through integrations you authorise, and generated through your use of the Services. The information processed depends on the features you use and the permissions you grant.

We do not sell or rent personal information, or disclose it to advertisers or data brokers. The Services do not display advertising, read advertising identifiers, or track users across third-party applications or websites. Account information is accessible to authorised Exeriva personnel and service providers as described below; sharing with a coach is subject to your separate choices.

2. Categories of personal information

Account and profile information

We collect your name, email address and account credentials, together with an optional profile image. Passwords are stored as secure hashes rather than readable passwords. Profile information includes age, sex, height, weight, activity level and fitness goals, as well as calorie and macronutrient targets calculated from that information.

Activity records and user content

We process the records you submit, including meals and foods, saved or favourite foods and meals, water intake, sleep, workouts and individual sets, body weight and measurements, and medications, doses and reminders. Entries include associated dates and times. You may also submit profile images, progress photographs and meal photographs. These images are stored privately, subject to authorised access under sections 5 and 6.

Connected health information

If you enable Apple Health or Health Connect, we receive the health and activity information described in section 4, within the permissions you grant. This information, and certain records you enter directly, may constitute sensitive personal information under applicable law.

Coaching and communications

If you use coaching, we process messages exchanged with your coach, check-in responses, proposed plans and targets, and private notes maintained by the coach about their work with you. If you contact support or report a problem, we process your correspondence, the app version associated with a report, and our responses.

Notification information

If you enable push notifications, we process a device token used to deliver them. Notifications are also stored in your in-app inbox.

Usage, device and diagnostic information

We record account-associated sign-in and app-opening events, screens visited, device type, request IP address, and approximate country and region inferred from that address. We do not collect precise location through these records. Error records include the same contextual information. These records support usage analysis, troubleshooting and the detection of unusual sign-in activity. They are not disclosed to third-party analytics or advertising companies.

3. Purposes and grounds for processing

We use the information described in this policy to:

• create and authenticate accounts, maintain user records, and make them available across devices;
• provide tracking features and calculate personalised nutrition and activity targets;
• operate optional health integrations, food recognition, coaching and notifications;
• respond to support requests, diagnose errors and assess how the Services are used; and
• maintain account security and investigate unusual access or technical problems.

Where applicable law requires a legal basis for processing, we rely on performance of the service contract for core account functions, consent for optional processing where required, and legitimate interests in maintaining a secure and functioning service where that basis is available and those interests are not overridden by your rights. A legitimate-interest basis does not replace consent where the law requires consent, including for sensitive information.

Providing this policy does not itself constitute consent to optional processing. You may decline optional features or withdraw the relevant permission. Doing so may make the associated feature unavailable without preventing use of unrelated features.

4. Health integrations and AI features

Apple Health and Health Connect

With your permission, Exeriva reads movement information (steps, walking and running distance, flights climbed, active and resting energy, exercise minutes), heart and respiratory information (heart rate, resting and walking heart rate, heart rate variability, VO₂ max, respiratory rate, blood oxygen), workout counts, sleep, and body measurements (weight, body fat percentage, lean body mass, body mass index and waist circumference) from Apple Health on iPhone or Health Connect on Android. Body measurements typically originate from a connected scale or are entered by you; where the platform identifies the device or application that recorded a reading, Exeriva stores that name so it can show you where the figure came from. The only information Exeriva writes back is a waist circumference you choose to log in the app, which is saved to Apple Health on iPhone; nothing is written to Health Connect. On refresh, readings are uploaded to your Exeriva account and stored as one record per day — a total for the figures that accumulate, an average for the ones that are measured — for access across devices, including the web application.

Connected health information is used to display your own health and activity figures and, when you use AI Coach or the weekly program review, to answer questions you ask about them. It is not sold or used for advertising or marketing. It is shared with a coach only if you turn on the Apple Health category for that coach, as described in Coaches below. It is submitted to our AI provider only as described in AI features below, only after you have allowed AI features in the app, and only when a question you ask requires it or you ask for a weekly program review. You may revoke access in your device’s Health settings. Revoking access stops further access through that permission; information already saved to your account is subject to the retention and deletion provisions below.

AI features and your permission

Exeriva’s AI features are AI Cam, Voice logging, AI food search, AI Coach and the weekly program review. Their requests are processed by Google, our AI provider. Before any AI feature sends anything, the app asks for your permission, shows what will be sent and names Google as the recipient; nothing is sent unless you allow it. You can withdraw your permission at any time in Settings → AI features, after which no further information is sent. Every other part of Exeriva works without AI features. Our servers send information only to the provider named in the app.

AI-assisted photo and voice logging, and AI food search

When you use AI Cam, the photograph you capture or select is submitted to Google for food recognition. Voice logging submits your recording, or the food description you type instead. AI food search submits the food name you typed. Google returns suggested foods and quantities for your review. Content is submitted only when you choose to use one of these features; nothing is sent unless you capture or select a photograph, make a recording or type a description or search within them.

Exeriva does not retain voice recordings and retains a submitted photograph only if you save it with a meal. AI providers process submitted content under terms that prohibit its use for model training; limited temporary retention may apply for security and abuse monitoring. Apart from the photograph or recording itself, no other account record is submitted for photo or voice logging.

AI food recognition is optional. Food search, barcode scanning and manual entry remain available without photo or voice logging.

AI Coach

AI Coach answers questions about information you have recorded in Exeriva. To do so, a summary of the relevant records is submitted to Google. Records are submitted only when you ask AI Coach a question.

Depending on the question asked, the following may be submitted: your first name, age, sex, height, current and goal weight, goal and activity level; your calorie and macro targets; summaries of meals you have logged, including food names and nutritional totals; recorded water intake; training sessions, including dates, durations, exercise names, sets, repetitions and weights; recorded weigh-ins; and, where the question concerns them, daily activity and sleep figures obtained from Apple Health or Health Connect — step counts, distance, active energy, heart rate and sleep duration, as daily totals and averages rather than individual readings.

Submissions are limited to the periods relevant to a question rather than your complete history. The following are not submitted to AI Coach: your email address, progress photographs, medications and symptom records, and messages or notes exchanged with a coach.

AI Coach cannot create, amend or delete records. Conversations are stored in your account so that the feature can refer to earlier messages, and are removed when you delete your account or clear your conversation history.

AI Coach is optional: nothing is submitted to it unless you use it, and no other part of Exeriva depends on it.

Weekly program review

When you ask for a weekly review of your training program, Exeriva submits to Google your current program, your training sessions from the last four weeks (dates, exercise names, sets, repetitions and weights), your training preferences and equipment, and, where available, your average daily steps and sleep. The review suggests changes for you to accept or decline; nothing is changed without your confirmation.

AI Coach provides general fitness and nutrition information based on your own records. It is not a medical service and does not provide medical advice, diagnosis or treatment.

5. Service providers and processing locations

We use the following categories of providers to deliver the Services:

• Hosting and database providers: account and content storage, server operation and supporting infrastructure.
• Email delivery providers: delivery of sign-up codes and password-reset communications.
• Apple and Google push notification services: delivery of notifications to your device.
• AI provider (Google): processing of the AI feature requests described in section 4, only after you allow AI features in the app.
• Public food databases: responses to food searches and barcode queries. Queries contain the search term or barcode, not your name, email address or account identifier.

Providers process information for their respective service functions under contractual arrangements, rather than for independent purposes. We do not use an analytics vendor, advertising network or data broker. Our providers are based in North America, and information is processed in the United States and Canada, including when you use the Services from another country. Laws in those locations may differ from those where you live.

6. Authorised access and coaching

Exeriva personnel

Designated administrators have technical access to account content, including profiles, targets, meals, workouts, body-weight records, progress photographs and coaching messages. This access supports account assistance, troubleshooting and service maintenance. Administrator access is restricted to named team members, and account access events are recorded. Such access is limited to these purposes and is not authorised for personal browsing or unrelated use.

Coaches

A coaching relationship begins only after you accept an invitation. You control access separately for nutrition, workouts, weight, measurements, sleep, recovery, Apple Health and progress photographs. Photo sharing is disabled by default. Recovery and Apple Health are off for any coaching connection made before those categories existed. Disabling a category takes effect immediately; removing the coaching connection ends the coach’s access through that connection.

Coaches cannot edit your diary. Proposed plans or targets take effect only if you accept them. Apple Health and Health Connect information is available to a coach only while you share the Apple Health category, and only as daily totals and averages — sleep, heart rate, heart rate variability, steps, activity and body composition — never individual readings. Recovery shares which muscles are still recovering and the energy and soreness you record before training.

7. Retention and account deletion

Account content, photographs, messages and usage records are retained while your account remains active or otherwise exists, so that your history remains available. Individual entries and photographs may be deleted through the application. Support correspondence is retained until the matter is resolved and thereafter for as long as it remains needed to address the underlying issue.

To delete your account, select Profile → Settings → Delete account and enter DELETE to confirm. The same process is available on the web. Account deletion takes effect immediately in the active service and does not require a separate email request or manual approval.

Deletion removes your profile, logged records, saved foods and meals, connected health information, coaching links, messages, check-ins, notifications, usage records and uploaded photographs. Connected coaches lose access. Residual copies in provider backups expire on a rolling schedule within 30 days.

Nutrition-label information you contributed for a previously unrecognised barcode remains in the shared product database after deletion, without a link to your account. Support correspondence is subject to the separate retention period described above.

Account deletion is irreversible. If you cannot sign in, contact support@exeriva.com from the email address associated with your account to request deletion.

8. Information security

We use encrypted connections between the application and our servers, account-based access checks, private photo storage and restricted administrator access to protect personal information. These measures are intended to prevent unauthorised access; no system can guarantee absolute security. We will notify you of a breach affecting your personal information and comply with applicable notification requirements. Suspected security issues may be reported using the contact details below.

9. Age requirements

The Services are intended for individuals aged 13 and over. Where local law requires parental or guardian consent for a person of your age, that consent is required before using the Services, to the extent such use is permitted. We do not knowingly collect personal information from children under 13. Contact us if you believe such an account exists so that we can arrange its deletion.

10. Individual rights and choices

You can review and update account information in the application and use the deletion controls described above. You may also contact us to request access to or a copy of your personal information, correction, deletion, or restriction of a particular use.

Depending on the law applicable to you, you may have rights to data portability, to object to certain processing, to withdraw consent, and to lodge a complaint with a competent privacy or data protection authority. These rights are subject to the conditions and exceptions established by the applicable law. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

Submit requests to support@exeriva.com. We may need to verify your identity before providing account information or acting on a request. We respond within 30 days, or sooner where applicable law requires.

11. Changes to this policy

Updates will be reflected in the date above. Where a change affects the information we collect or who may access it, we will provide in-app notice before the change takes effect. Where applicable law requires consent to a new purpose or disclosure, we will obtain that consent before proceeding.

12. Contact

For privacy enquiries, requests or complaints, contact Exeriva at support@exeriva.com. Further assistance is available on our support page.