Privacy Policy

Last updated: September 30, 2026

Controller: Rhevo · support@rhevo.app

1. Who we are

Rhevo is a social fitness app operated as an individual venture (no registered business entity at this testing stage). For questions about this policy or your data, contact support@rhevo.app.

2. What data we collect

Account data: email and username. Profile data you choose to share: name, photo, bio, date of birth, weight, height. Workout data: exercises, sets, reps, weights, session duration, workout photos. Social data: posts, comments, likes, who you follow, direct messages with other users. Technical data: push notification token, when you enable notifications; a device identifier, used to detect logins from a new device and to stop a blocked user from evading the block by creating a new account on the same device.

Optional data, only if you turn the feature on: nutrition data (food diary entries, barcode scans, recipes you create), your currently playing Spotify track (only if you connect your Spotify account), and health data read from Apple Health, covered in section 3 below.

3. Apple Health data

If you enable Rhevo Athlete or any Apple Health sync in Settings, we ask your permission to read specific data types from Apple Health: body weight, height, sleep analysis, workouts (including activity type), and active energy burned. This is entirely optional and off by default.

We use this data only to power features you asked for: syncing your weight and sleep, recommending recovery based on your training and outside activity (Rhevo Athlete), and calorie goals that account for active energy. Health data is never sold, never shared with advertisers, and never shown to other users. You can turn sync off at any time in Settings, or revoke access entirely in your iPhone's Settings → Privacy & Security → Health → Rhevo.

4. Why we process this data

We process your data to perform our contract with you (creating and managing your account, showing the feed, saving workouts), based on your consent (e.g. push notifications, Apple Health sync, optional data like weight and height), and based on our legitimate interest in keeping the community safe (moderating reports and blocks).

5. How we use your data

We use your data to provide the app's features (feed, workouts, messages, notifications), to keep the community safe, and to improve the app. Weight, height, and date of birth are only used for features you actively choose (e.g. showing age on your profile, converting units), never to infer or classify your health status.

6. Who we share data with

We do not sell your data to anyone. We use a small number of infrastructure providers to run Rhevo, each for a specific purpose:

Supabase, our database, authentication, and photo storage provider. Expo, which delivers push notifications. Sentry, which receives crash and error reports so we can fix bugs; these reports may include your device model and app version, not your profile data. RevenueCat, which manages Rhevo+ subscriptions and purchase receipts on our behalf. Spotify, only if you choose to connect your account, to show what you're listening to during a workout. Open Food Facts and ExerciseDB, public databases we query for food and exercise information; these lookups don't include your account data.

These providers may process data outside the European Union; in those cases, their standard contractual clauses and international data transfer mechanisms apply.

7. Controlling your privacy

You can make your profile private in Settings → Privacy, choose each workout's visibility individually (public, followers, or private), block users, report content, and delete your account and data at any time.

8. Data retention

We keep your data while your account is active. When you delete your account in Settings → Account, your data is permanently and definitively removed from our systems: it's not a deactivation period, it's real deletion.

9. Your rights

Under GDPR, you have the right to access, correct, delete, or request portability of your data, and to object to certain types of processing. You can exercise most of these rights directly in the app (Edit Profile, Settings, delete account); for additional requests, contact support@rhevo.app.

10. Minimum age

Rhevo is not intended for children under 13, and we do not knowingly collect data from anyone below that age. If you believe an account belongs to someone under 13, contact us so we can remove it.

11. Security

We protect your data with database-level access control (Row Level Security), encrypted connections (HTTPS), and passwords are never stored in plain text. No system is 100% secure, but we work to keep your data protected.

12. Changes to this policy and contact

We may update this policy periodically. We will notify you of significant changes through the app. For questions about this policy, contact us at support@rhevo.app.