eatlete Privacy Policy

1. Who we are

eatlete is an app that supports clients of a personal-training service: logging workouts, nutrition, body measurements and steps, and chatting with a personal trainer. This policy explains what data we process and why.

2. Data we process

• Account: email, name, user identifier, role (client/trainer). If you use Sign in with Apple, we receive only the email and name Apple provides (Apple may relay a private email).
• Health & fitness: body weight, body measurements, steps, and completed workouts (reps, weight, sets/rounds, duration). Apple Health data is read/written only with your permission.
• Onboarding questionnaire: goal, activity level and optional health answers — food intolerances, chronic conditions, eating disorders, pregnancy. This sensitive data is processed only with your explicit consent and used solely to personalize your program.
• Nutrition: food-diary entries, custom products and a daily calorie goal. Product reference data comes from Open Food Facts (ODbL); barcode scans are used only to look products up — the camera images never leave your device.
• Chat content: text, voice messages, photos/videos and video notes you exchange with your trainer; your avatar.
• Technical: push-notification token (to deliver reminders and messages).

We do not collect background precise location, do not use advertising identifiers, and do not track you across other companies' apps or websites.

3. Why we process it (purposes & legal basis)

We process data solely to operate the service: showing your progress to you and your trainer, enabling chat, syncing your activity and steps with Apple Health, and sending reminders. Legal basis (GDPR): performance of the service agreement and your consent (for Health access and push notifications). Health data is sensitive and is processed on the basis of your explicit consent.

4. Apple Health

Data obtained via HealthKit is used only inside the app for the purposes listed above. We do not use it for advertising or marketing, do not sell or share it with third parties, and do not store it in iCloud. Health access is optional — the app works without it.

5. Who we share data with

We do not sell your data. Your content (messages, progress) is visible only to your personal trainer within the service. If you have a nickname, other eatlete users can see your name, nickname and avatar, and if you use the community, also your workouts and reactions (see section 6). We use infrastructure providers as processors: backend hosting Hostinger (EU), Apple Push Notification service (push delivery), and Apple (Sign in with Apple only). They act on our instructions. Your messages to the AI trainer (“Verdi”) and the training and nutrition context are processed via Google (Gemini API) as a processor; this data is not used to train models. A meal photo you send with «Meal photo» is likewise processed via Google (Gemini API) only to estimate its calories and is not stored by us or in our logs.

6. Community

The app has a community: you can follow other people and react to their workouts. Following and reacting are available only after you accept the Community rules. Legal basis: performance of the service agreement and our legitimate interest in keeping the community safe (handling reports).

• What every user sees: if you have a nickname, other eatlete users can find you in search by nickname or name and see your name, nickname, avatar, whether your account is private, and how many workouts, followers and following you have.
• What followers see: your workouts — title, date, duration, exercises, sets, reps, weights lifted, distance and records — and the reactions to them. Calories, body weight, measurements, nutrition, steps and questionnaire answers are never shown in the community.
• Private by default: only followers you approve see your workouts. If you make your account public, every eatlete user can see your workouts and your followers and following lists. You can hide any single workout from your followers.
• Your reactions and follows: anyone who can see a workout can also see your reaction to it. When you follow someone, you appear in their followers list, visible to anyone who can see that list (for a public account, every eatlete user). This applies even if your own account is private.
• Blocking: after a block, you and the other person no longer see each other, follows between you are removed, and you can't message each other in chat. We don't notify anyone about blocks.
• Reports: eatlete moderators review them. If several different people report the same workout, it is automatically hidden from others until a moderator decides. The reported person is not told who reported them. Reports are kept for the moderation audit trail.
• Community notifications (follow requests, new followers, reactions) are kept for 90 days. Push notifications only say who did what — no workout details.

When you delete your account, along with your workouts we delete your community settings, follows and follow requests in both directions, blocks, reactions (yours and those on your workouts), notifications, reports about you and any moderation restrictions. Reports you filed are kept for the moderation audit trail, but are no longer linked to your account.

7. Retention

We keep data while your account is active. After account deletion, data is deleted or anonymized within a reasonable period, except where the law requires longer retention.

8. Your rights

You can access, correct, export, or delete your data. You can delete your account and data in the app: Settings → Account → "Delete account". You may also contact us. You have the right to lodge a complaint with a supervisory authority.

9. Security

Data in transit is encrypted (HTTPS); access tokens are stored in the device Keychain. No system is perfectly secure, but we apply reasonable organizational and technical measures.

10. Children

The app is not intended for individuals under 16 and we do not knowingly collect their data.

11. Changes

We may update this policy; we will notify you of material changes in the app or by email. The current version is always available at this URL.

12. Contact

Privacy questions: gurievcreative@gmail.com