Privacy Notice

1. Who we are

EVEXIA OS is operated by Andrei Daniel Cozonac, who is the data controller for the personal data described in this notice. You can contact us through the support contact shown in the app for any privacy question or request.

2. What we collect and why

Account data — email address, username, display name, avatar and authentication identifiers (including a Google account identifier if you sign in with Google). Used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.

Health and fitness data — body metrics such as height, weight and age, goals, food and water logs, workouts and sets, step and activity data you choose to sync, progress photos, and health or dietary considerations you enter. This is special-category data and we process it only to provide the features you ask for, on the basis of your explicit consent, which you can withdraw at any time by deleting the data or your account.

AI conversations — the prompts and context sent to AI features (coach questions, meal generation inputs) and the responses returned. Used to deliver the feature and to enforce usage limits. Legal basis: contract.

Subscription data — your subscription status, plan, billing period and referral rewards. Card details are never seen or stored by us. Legal basis: contract and legal obligation.

Technical and usage data — device information, IP address, error reports and basic usage events. Used for security, fraud prevention, debugging and improving the product. Legal basis: legitimate interests.

3. Who we share it with

• Hosting and database providers that store your account and health data on our behalf.
• AI model providers that process the prompts sent by AI features in order to return a response.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing.
• Open Food Facts, when you scan a barcode, to look up product nutrition information.
• Professional advisers (legal, accounting) and authorities where we are legally required to disclose.

We never sell your personal or health data, and we do not use it for advertising.

4. International transfers

Some of our providers operate outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep your data for as long as your account exists. When you request deletion your account enters a 14-day grace period during which you can cancel; after that your account, health data and progress photos are permanently deleted. Records we must keep for legal or accounting reasons (such as invoices held by our Merchant of Record) are retained for the period required by law.

6. Your rights

Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a portable copy, and to withdraw consent at any time. You can exercise most of these directly in the app — editing your profile, deleting entries, or deleting your account from Account settings — or by contacting us. We respond within one month. If you are in the UK or EEA you also have the right to complain to your local supervisory authority.

7. Security

Data is transmitted over encrypted connections and stored with access controls that restrict each account’s data to that account. Progress photos and personal logs are scoped to your user and are not visible to other users. No system is perfectly secure, but we apply appropriate technical and organisational measures and review them as the product changes.

8. Cookies and local storage

We use only essential cookies and browser storage — to keep you signed in, remember your preferences, and cache your plan for offline use. We do not use advertising or cross-site tracking cookies. Clearing your browser storage signs you out and removes locally cached data.

9. Children

EVEXIA OS is not intended for children under 16. If you believe a child has created an account, contact us and we will delete it.

10. Changes

We will update this notice when our processing changes and will highlight material changes in the app before they take effect.