Privacy Policy

ENERGYM ("we", "us", "our") operates the ENERGYM mobile application and web platform (the "Service"). This page explains what information we collect, how we use it, and the choices you have.

Information We Collect

• Account data: email address, name, authentication identifiers (including Sign in with Apple and Sign in with Google, if used).
• Fitness & health data: gender, age, height, weight, target weight, activity level and goal; workout sessions, repetitions, and nutrition entries you provide or that are generated through your use of the app's AI features.
• Camera data: when you use Nutri Scan, camera frames are processed in real time to analyse food and are not recorded. When you use Future You, the full-body photo you take or choose is uploaded to an AI provider to generate the image — see Third-Party Services and Data Retention below.
• Apple Health data: active energy burned, read from Apple Health only if you grant permission, to adjust your daily calorie budget. We only read it; we never write to Health and never send Health data to anyone.
• Screen Time selection: when you enable Focus Shield, iOS asks you to choose the apps to block and returns opaque tokens rather than names. We cannot see which apps you selected, and the selection never leaves your device.
• Microphone and speech: used only while you dictate a meal entry, and only after you start dictation.
• Purchase data: subscription status and transaction identifiers, processed via Apple's In-App Purchase system and RevenueCat.
• Usage data: app interactions used to operate the Service. We run no analytics and no crash-reporting service of our own.

How We Use Information, and on What Legal Basis

• To provide and operate core features — nutrition scanning, calorie targets, Future You visualization, Focus Shield. Legal basis: performance of a contract with you.
• To process photographs and health-related information. This is a special category of data, so we rely on your explicit consent, given when you accept this policy on the sign-in screen. You may withdraw it at any time.
• To process subscription payments and manage your account. Legal basis: performance of a contract.
• To keep the Service working and secure, and to communicate with you about your account. Legal basis: our legitimate interest.

Providing this data is required neither by law nor by contract. You may decline — the features that depend on it will simply not work.

Third-Party Services

We use the following providers to operate the Service:

• Supabase — authentication and database storage.
• Vercel — hosting for our backend, through which requests pass.
• AI providers (OpenAI, Google Gemini, Kie/Seedream) — generating Future You visuals and estimating nutritional macros in Nutri Scan.
• Open Food Facts — barcode lookup database.
• RevenueCat — subscription management and receipt validation.
• Apple App Store / StoreKit — payment processing.
• Google — Sign in with Google, if you choose that method.

These providers process data only as necessary to deliver their respective service and are bound by their own privacy policies. We do not sell personal data or provide it for public model training. We will name any provider on request.

Terms of Use (EULA)

Use of the application is subject to Apple's standard Licensed Application End User License Agreement: Apple Standard EULA.

International Transfers

We operate from Indonesia, and the providers above are located in the United States and the European Union. Using the Service therefore involves transferring your data outside your country, including outside the European Economic Area, under the transfer mechanisms published in each provider's privacy terms.

Data Retention

We retain your account and fitness data for as long as your account is active. You may delete your account and its data at any time in the app, under Settings → Delete account, or by contacting us.

• Generated Future You images — stored on your device, and at the image provider for up to 14 days, after which the link expires.
• Source photographs — removed from your device as soon as they are sent, and deleted at the provider within three days.

Automated Processing

Your daily calorie target is calculated automatically from the figures you enter, and the Future You image is generated by a model from your photograph. Both results are informational: they produce no legal effects and no similarly significant consequences for you.

Security

Data travels over encrypted connections and is stored with row-level security, so no account can read another account's records. Access to production data is limited to the controller.

Your Rights

Depending on your location, you may have the right to access, correct, export or delete your personal data. You may also restrict or object to processing based on our legitimate interest, withdraw consent at any time without affecting processing already carried out, and lodge a complaint with a supervisory authority — in the European Economic Area, the data protection authority of your country of residence; in the United Kingdom, the Information Commissioner's Office. To exercise these rights, contact us at the email below. We answer within 30 days.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

---

Contact Us

The data controller is Mikhail Riabov, an individual operating ENERGYM from Bali, Indonesia.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at support@energym.pro.