Wyvo Privacy Policy
How the Wyvo app collects, uses, shares and deletes your information.
Last updated: October 2, 2026
Summary in plain language
- We collect your account details, the fitness profile you enter, what you log (meals, workouts, water, weigh-ins) and, only if you turn it on, steps, active energy and weight read from Apple Health or Health Connect.
- Health data is used only to run Wyvo's features for you. It is not used for advertising, not sold, and never written back to Apple Health or Health Connect.
- To create your plans and coach replies, we send your fitness profile, a short progress summary and your coach messages to Google's Gemini API, with your consent. Some requests may be handled under Google's free (unpaid) terms; see section 4.
- Wyvo has no ads, no ad tracking and no analytics tools. We do not sell your personal information.
- Payments are handled by the App Store or Google Play. We never see your card details.
- Coach chats are deleted automatically after 30 days. You can export your logs and delete your account in the app at any time.
1. Who we are
This policy covers the Wyvo mobile app for iPhone and Android ("Wyvo", "we", "us"). Wyvo is operated by Wyvo, based in Italy, which is the controller of the personal data described here.
Privacy contact: [email protected]
2. Data we collect
Wyvo requires an account. The table below lists every category of data the app handles, where it is kept, and why.
| Category | What it includes | Where it is kept | Why |
|---|---|---|---|
| Account | Email address, your name if you give it or your Google or Apple account shares it, a password (stored hashed by Clerk), Google or Apple sign-in identifiers, and session details such as device type and IP address. | Clerk, our sign-in provider | To create your account and sign you in. |
| Account directory | A copy of your email address, whether it is verified, your sign-in method (for example email, Google or Apple), and when your account was created and last seen. We do not store your name in this record. | Our database (in addition to Clerk) | To support you, apply the one-free-trial rule and match lifetime access we assign to your email address. |
| Fitness profile | Name, date of birth, sex, height, weight, goal weight, goal, activity level, diet, allergies, meals per day, food budget, cooking time, where you train, equipment and training schedule. | On your device. It is sent to our servers with each plan or coach request and passed to Google Gemini, but we do not store it as a profile on our servers. | To calculate your targets and personalise plans and coach replies. |
| Activity log | Meals you mark as eaten (with calories and macros), workouts completed, water intake, and, if Health sync is on, daily steps and active energy. | Our database | To show your history, streaks and progress, and to adapt your plans. |
| Body measurements | Weigh-ins, waist measurement and body-fat percentage, including weight imported from Apple Health or Health Connect. | Our database | To show your weight trend and progress toward your goal. |
| Workout logs | Exercise names, sets, repetitions and weights you record. | Our database | To track your training and personal records. |
| AI coach chats | The messages you send to the coach and its replies, with conversation titles. | Our database, deleted automatically 30 days after the conversation was last active | To keep the conversation going across messages. |
| Subscription | Your plan (trial, Pro or Max), status, billing period (monthly or annual), renewal or end date, trial start date, which store bills you, and store product and purchase identifiers. | Our database and RevenueCat. Apple or Google keep the payment records. | To unlock the features you have access to. |
| Lifetime access record | If we have given you lifetime Pro or Max access: the plan, your account ID and/or email address, the dates, and an internal note. Lifetime access is assigned only by us and cannot be purchased in the app. | Our database | To give you the access we agreed. It is deleted with your account and cannot be restored automatically. |
| AI consent and reports | Whether you agreed to AI processing, which version of the disclosure and when; and any reports you send about AI content (what you reported, the reason and an optional note of up to 500 characters). | Our database | To respect your choice and to review and act on reports. |
| Usage counters | How many AI requests you made each day, and how many plans you have generated or regenerated. | Our database | To apply plan limits and prevent abuse. |
| Free-trial network check | When a free trial starts, a one-way keyed hash of the network address (IP address) the request came from, together with one-way hashes of the account identifiers that used it. The address itself is not stored. | Our database | To limit repeated free trials started from the same network and to prevent abuse. |
| Technical logs | Request identifiers, the page of our API that was called, response codes and error details. Our hosting provider may also record IP addresses. | Our server logs and our hosting provider | To keep the service running, fix errors and protect it from attack. |
What we do not collect
Wyvo does not use your location, camera, microphone, photo library or contacts. It has no advertising, no advertising identifier, no cross-app tracking and no analytics or crash-reporting tools. Reminders are scheduled on your device, so we do not collect a push-notification token.
3. Apple Health and Health Connect
If you turn on Health sync, Wyvo reads the following from Apple Health (iPhone) or Health Connect (Android):
- Steps
- Active energy (active calories burned)
- Weight
Access is read-only: Wyvo never writes data to Apple Health or Health Connect. It reads up to the last 30 days, only while the app is open, and only after you grant permission. It does not read clinical or medical records.
Imported steps and active energy are saved in your activity log, and imported weight is saved with your weigh-ins, so they appear in your progress. Health data is:
- used only to provide Wyvo's features to you;
- never used for advertising, marketing or data mining, and never sold;
- not stored in iCloud by Wyvo: it is sent only to Wyvo's own servers;
- shared with Google only in the limited way described in section 4 (your latest weigh-in, which may come from Apple Health or Health Connect, can be part of the progress summary).
To stop sharing: on iPhone, open Settings, then Health, then Data Access & Devices, then Wyvo, and turn the categories off. On Android, open Health Connect and remove Wyvo's permissions. Data already imported stays in your history until you delete your account or ask us to delete it.
Wyvo's use of information received from Health Connect follows the Health Connect Permissions policy, including its limited-use requirements.
4. AI processing (Google Gemini)
Wyvo uses the Gemini API, a third-party service provided by Google, to generate meal plans, workout plans and AI coach replies. Requests are served by Google Gemini models and Google Gemma models through that API. Before anything is sent, the app asks for your explicit consent. When you ask for a plan or a coach reply, our servers send Google:
- your name, age, gender, height, weight and goal weight;
- your goal, activity level, diet and allergies;
- your equipment and training schedule;
- a short summary of recent progress: your latest weight, your weight change, your workout completion and your top lifts; and
- your messages to the coach and your recent chat history (the last 20 messages).
Your latest weigh-in may originate from Apple Health or Health Connect if you turn on Health sync. Raw step and active-energy readings are not sent. We do not send your email address, password or account ID.
Google returns a response to us. We do not use this data for advertising and we do not review the AI's answers before you see them.
Free-tier disclosure. Some requests may be handled by models that Google provides under its free (unpaid) terms. For those requests Google may use the content to improve its products and its staff may review it. We do not control that processing. Do not include details you do not want shared.
You can turn AI features off at any time (see section 8).
Accuracy and allergies
AI output can be wrong, incomplete or unsuitable for you. Our servers check generated meal plans and coach replies against the allergies and diet you declared, A meal plan that names a declared allergen is regenerated or refused, and a coach reply that recommends one is corrected or marked with a warning. This check cannot catch everything, such as hidden ingredients or cross-contamination. Always check ingredients yourself.
To report a wrong or harmful answer, use the Report option in the app on a coach reply, a meal or an exercise, or email [email protected].
5. How we use data and legal bases
We use your data only to provide and protect Wyvo:
- to create your account, generate and adapt your plans, run the AI coach, show your progress and apply your subscription (performance of our contract with you);
- to process health information you enter or import, and to send it to Google Gemini for your plans (your explicit consent, which you can withdraw at any time as described in section 8);
- to keep the service secure, prevent abuse and fix errors (our legitimate interests);
- to keep records we are required to keep (legal obligation).
We do not use your data for advertising or profiling for marketing, and we do not sell it or share it for cross-context behavioural advertising.
6. Service providers
These companies process data on our behalf, or provide a service you use through Wyvo. Each receives only what it needs for its role.
| Provider | Role | Data it receives |
|---|---|---|
| Clerk | Sign-in and account management | Account data (section 2) |
| MongoDB Atlas | Database hosting | Account directory, activity log, measurements, workout logs, coach chats, subscription records, lifetime access records, AI consent and reports, and usage counters |
| Our cloud hosting provider | Runs the Wyvo API server | All traffic between the app and our servers, and technical logs |
| Google (Gemini API) | AI generation of plans and coach replies, by Google Gemini and Google Gemma models | As described in section 4 |
| RevenueCat | Subscription and purchase management | Your Wyvo account ID and your purchase and subscription history from the App Store or Google Play |
| Apple | App Store payments, Sign in with Apple, Apple Health on your device | Apple handles payment and sign-in data under its own privacy policy. Apple Health data stays under your control on your device. |
| Google Play payments, Sign in with Google, Health Connect on your device | Google handles payment and sign-in data under its own privacy policy. | |
| YouTube (Google) | Exercise demonstration videos | Our servers search YouTube by exercise name only, with no user identifier. When you play a video, the YouTube player loads from YouTube, which receives standard device and connection information under Google's privacy policy. |
| Pexels | Meal photos | Our servers search Pexels by meal name only, with no user identifier. Photos then load from Pexels' servers, which receive standard connection information such as your IP address. |
| Expo (EAS Update) | Delivers app updates | App version, device platform and connection information when the app checks for updates |
We may also disclose data if the law requires it, or to a successor if Wyvo is sold or transferred, in which case this policy continues to apply to your data.
7. How long we keep data
| Data | How long |
|---|---|
| AI coach chats | 30 days after the conversation was last active, then deleted automatically |
| Account, account directory record, activity log, measurements, workout logs, usage counters, AI consent record, reports | Until you delete your account |
| Lifetime access record | Until you delete your account |
| Subscription record in our database | Until you delete your account |
| Fitness profile on your device | Until you delete your account in the app, sign out, or uninstall the app |
| Free-trial marker | If your account used the free trial, a one-way keyed hash of your email address (not the address) is kept for up to 2 years after deletion so the same email cannot start another free trial. It does not prevent you from subscribing. |
| Free-trial network check | The hashed network address and hashed account identifiers are deleted automatically after 24 hours. |
| Deleted-account marker | When you delete your account we keep an internal record of the deleted account identifier and the deletion date (no other data) for 2 years, so that a late notification from the App Store or Google Play about a subscription that is still renewing is ignored and does not re-create data. |
| Operator audit log | Our internal log of manual administrative actions (for example granting lifetime access) holds an opaque account identifier and a masked email address, no fitness data and no secrets. It is not deleted with the account. |
| RevenueCat purchase record | When you delete your account, Wyvo asks RevenueCat to delete your customer record. If that request fails we remove it by hand when you email us. Apple and Google keep their own purchase records under their own policies. |
| Apple and Google payment records | Kept by Apple or Google under their own policies |
| Sales and payout reports | Kept by us for as long as accounting and tax law requires. These come from Apple and Google and do not contain your fitness data. |
| Technical logs | A limited period set by our hosting provider, then deleted |
| Meal-photo and exercise-video lookups | Cached by meal or exercise name only. They contain no personal data and are not linked to you. |
8. Your rights and choices
Delete your account
In the app, go to Profile, then Delete Account. The same option appears on the plans screen after your trial or subscription ends. You can also ask us by email without installing the app. See Delete your Wyvo account for the steps and exactly what is deleted and kept.
Export your data
In the app, go to Profile, then Export My Data. This is available on every plan, including after a trial or subscription ends. The export is one CSV file containing:
- your account record (email address, whether it is verified, sign-in method, first and last seen);
- your activity log (meals eaten, workouts, water, steps and active energy);
- your weigh-ins and body measurements;
- your workout logs (exercises, sets, repetitions and weights);
- your coach chat threads and messages;
- your subscription record (plan, status, store, dates);
- your lifetime access record, if you have one;
- your plan-generation and daily AI usage counters;
- your AI-processing consent record;
- the reports you have made about AI content.
Your Apple, Google and RevenueCat purchase history is held by those companies; email [email protected] from the address you use to sign in if you want a copy of it.
Correct your data
You can edit your fitness profile in the app at any time. For anything else, email us.
Withdraw consent
You can turn off Health sync at any time (see section 3). You can stop AI processing in the app at any time: go to Profile, then AI Features, and switch off AI plans and coach (the confirmation is titled Turn off AI features). Wyvo then stops sending your details to Google, and you cannot create new plans or chat with the coach until you turn it back on. You can also delete your account. Withdrawing consent does not affect processing that already took place.
Rights under data-protection laws
Depending on where you live, including the European Economic Area, the United Kingdom and California, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and not to be discriminated against for using these rights. You can also complain to your local data-protection authority.
To make a request, email [email protected] from the address on your account. We may ask you to confirm the request from that address before acting on it. We respond within one month.
9. Age requirement
Wyvo is only for people aged 18 or older. It is not directed to children or teenagers, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has an account, email us and we will delete it.
10. International transfers
Our service providers may process data in the United States and other countries outside your own. Where the law requires it, we rely on the transfer safeguards those providers offer, such as the European Commission's Standard Contractual Clauses.
11. Security
All traffic between the app and our servers uses HTTPS. Sensitive profile details on your device are kept in the device's secure storage (the iOS Keychain or Android Keystore). Our servers check your signed-in identity on every request and only return your own data. No system is perfectly secure; if you find a security problem, please email us.
12. Not medical advice
Wyvo provides general fitness and nutrition information. It is not a medical device and does not diagnose, treat or prevent any condition. Check with a doctor before changing your diet or exercise, especially if you are pregnant, injured or managing a health condition.
13. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change materially affects how we use your data, we will tell you in the app before it takes effect.
14. Contact
Wyvo, Italy
Email: [email protected]