Privacy Policy

Who we are

Levara is a coaching platform that helps fitness coaches manage clients, programming, nutrition, check-ins, and billing. References to "Levara", "we", "us", or "our" in this policy refer to the company operating this service.

For questions about this policy, contact us at privacy@levara.app.

What data we collect

Data you provide directly

When you create a Levara account, we collect:

• Your name and email address
• Your password (stored as a secure hash — we never see the plaintext)
• Billing information (handled directly by Stripe — we do not store card details)
• Any profile or business information you choose to add

Data collected automatically

When you use Levara, we collect:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (browser, operating system)
• Usage data (features used, actions taken within the app)

Data from the mobile app

If you are a client using the Levara mobile app, we also collect the following, each only when you use the related feature:

• Photos — progress photos and meal photos you take with your camera or choose from your photo library. They are stored in your Levara account and visible to your coach. We only access the specific photos you select, never your whole library.
• Camera for barcode scanning — when you scan a food barcode, the camera is used only to read the barcode. No image is saved.
• Push notification token — if you allow notifications, we store a device token so we can send you reminders and messages from your coach.
• Step count — if you connect Apple Health or Health Connect. See "Health data from Apple Health and Health Connect" below.

Client data you upload

As a coach, you may upload personal data about your clients — including health metrics, progress photos, workout logs, and nutrition information. You are the data controller for this data. We act as a data processor on your behalf. See the "Your responsibilities as a coach" section below.

Health data from Apple Health and Health Connect

If you are a client using the Levara mobile app, you can choose to connect Apple Health (on iPhone) or Health Connect (on Android) so your daily steps are tracked automatically. This section explains how we handle that data.

What we access

• We read only your daily step count. We do not read any other health data.
• We never write data to Apple Health or Health Connect.
• We only access this data after you grant permission on your device. If you don't, you can still log your steps manually.

How we use it

Your step count is used only to record your daily steps habit in Levara. It is saved to your Levara account and shown to you and to the coach you work with through Levara, so they can track your progress.

What we don't do

• We do not use health data for advertising or marketing.
• We do not sell health data or share it with data brokers or other third parties. The only exception is the infrastructure providers listed below, who store data on our behalf to run the service.
• We do not use health data to determine credit, insurance, or employment eligibility.
• We do not use health data to train AI or machine-learning models.

Levara's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

Turning off access

You can stop Levara from reading your steps at any time:

• iPhone: open the Settings app, tap Health, then Data Access & Devices, then Levara, and turn off Steps.
• Android: open Health Connect, tap App permissions, then Levara, and turn off Steps.

Turning off access stops new step data from being read. Step counts already saved to your habit log stay in your account. You can ask your coach or contact us at privacy@levara.app to have them deleted.

How we use your data

We use your data to:

• Provide and operate the Levara service
• Process payments and manage your subscription
• Send transactional emails (account confirmation, billing receipts, password reset)
• Respond to support requests
• Improve the product (using aggregated, anonymised usage data)

We do not use your data for advertising. We do not sell your data to third parties.

Third-party services we use

Levara uses the following third-party services to operate:

• Supabase — database and authentication infrastructure. Data is stored on Supabase-managed servers. Supabase Privacy Policy
• Stripe — payment processing. Card data is handled entirely by Stripe and never passes through our servers. Stripe Privacy Policy
• Resend — transactional email delivery. Resend Privacy Policy
• Cloudflare — hosting for our website and API, and storage for uploaded files such as photos and documents. Cloudflare Privacy Policy
• Expo — delivery of push notifications and app updates to the mobile app. Expo Privacy Policy
• Anthropic — when you use meal photo recognition, the photo is sent to Anthropic's Claude API to identify the foods in it. Anthropic does not use this data to train its models. Anthropic Privacy Policy
• Open Food Facts — food database used for food search and barcode lookups. Only the search term or barcode is sent, never your personal data. Open Food Facts Privacy Policy

Your responsibilities as a coach

When you use Levara to manage client data, you are acting as a data controller under applicable data protection law (including the UK GDPR and EU GDPR, where applicable). This means:

• You are responsible for having a lawful basis to collect and process your clients' personal data
• You should have a privacy policy in place for your own coaching business
• You should obtain appropriate consent or have another legal basis before uploading health-related data about your clients
• You are responsible for honouring your clients' data rights (access, deletion, portability)

We will assist you in meeting these obligations — for example, we can delete a client's data from our systems on your instruction.

Data retention

We retain your account data for as long as your account is active. If you close your account, we delete your data within 90 days, except where we are legally required to retain it (for example, billing records for tax purposes, which are retained for 7 years).

Client data you have uploaded will be deleted along with your account unless you export it first.

Your rights

Depending on where you are located, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (right to erasure)
• Export your data in a portable format
• Object to certain types of processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@levara.app. We will respond within 30 days.

If you are based in the UK or EU and are unhappy with how we handle your data, you have the right to lodge a complaint with your local supervisory authority (in the UK, the ICO: ico.org.uk).

Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest. However, no system is completely secure and we cannot guarantee absolute security.

If you discover a security vulnerability, please report it to security@levara.app.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by displaying a notice in the app. The date at the top of this page shows when it was last updated.

Contact

For any privacy-related questions, contact us at privacy@levara.app.