Summary: Levara collects the data you give us to run your account and provide the service. We don't sell your data. Coaches are responsible for the personal data they upload about their clients.
Who we are
Levara is a coaching platform that helps fitness coaches manage clients, programming, nutrition, check-ins, and billing. References to "Levara", "we", "us", or "our" in this policy refer to the company operating this service.
For questions about this policy, contact us at privacy@levara.app.
What data we collect
Data you provide directly
When you create a Levara account, we collect:
- Your name and email address
- Your password (stored as a secure hash — we never see the plaintext)
- Billing information (handled directly by Stripe — we do not store card details)
- Any profile or business information you choose to add
Data collected automatically
When you use Levara, we collect:
- Log data (IP address, browser type, pages visited, timestamps)
- Device information (browser, operating system)
- Usage data (features used, actions taken within the app)
Client data you upload
As a coach, you may upload personal data about your clients — including health metrics, progress photos, workout logs, and nutrition information. You are the data controller for this data. We act as a data processor on your behalf. See the "Your responsibilities as a coach" section below.
How we use your data
We use your data to:
- Provide and operate the Levara service
- Process payments and manage your subscription
- Send transactional emails (account confirmation, billing receipts, password reset)
- Respond to support requests
- Improve the product (using aggregated, anonymised usage data)
We do not use your data for advertising. We do not sell your data to third parties.
Third-party services we use
Levara uses the following third-party services to operate:
- Supabase — database and authentication infrastructure. Data is stored on Supabase-managed servers. Supabase Privacy Policy
- Stripe — payment processing. Card data is handled entirely by Stripe and never passes through our servers. Stripe Privacy Policy
- Resend — transactional email delivery. Resend Privacy Policy
Your responsibilities as a coach
When you use Levara to manage client data, you are acting as a data controller under applicable data protection law (including the UK GDPR and EU GDPR, where applicable). This means:
- You are responsible for having a lawful basis to collect and process your clients' personal data
- You should have a privacy policy in place for your own coaching business
- You should obtain appropriate consent or have another legal basis before uploading health-related data about your clients
- You are responsible for honouring your clients' data rights (access, deletion, portability)
We will assist you in meeting these obligations — for example, we can delete a client's data from our systems on your instruction.
Data retention
We retain your account data for as long as your account is active. If you close your account, we delete your data within 90 days, except where we are legally required to retain it (for example, billing records for tax purposes, which are retained for 7 years).
Client data you have uploaded will be deleted along with your account unless you export it first.
Your rights
Depending on where you are located, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (right to erasure)
- Export your data in a portable format
- Object to certain types of processing
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at privacy@levara.app. We will respond within 30 days.
If you are based in the UK or EU and are unhappy with how we handle your data, you have the right to lodge a complaint with your local supervisory authority (in the UK, the ICO: ico.org.uk).
Security
We take reasonable technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest. However, no system is completely secure and we cannot guarantee absolute security.
If you discover a security vulnerability, please report it to security@levara.app.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or by displaying a notice in the app. The date at the top of this page shows when it was last updated.
Contact
For any privacy-related questions, contact us at privacy@levara.app.