This Privacy Policy explains how Razvan Similea (“we”, “us”) collects, uses, and protects your information when you use the Zvelt mobile application (the “App”). We designed Zvelt to be private by default: your activity feed is visible to friends only, discovery is opt-in, and we do not sell your data or use it for cross-app advertising.
The data controller for the App is Razvan Similea. For any privacy question or to exercise your rights, contact us at support@zvelt.uk.
We only collect what the App needs to function. We do not collect data for advertising and we do not track you across other companies’ apps or websites.
| Category | Examples | Why |
|---|---|---|
| Account | Email address, password (stored hashed), optional Google Sign-In identifier | Create and secure your account |
| Profile | Display name, body weight, sex, body stats, profile photo | Rankings, personalization, your profile |
| Fitness data | Workouts, exercises, sets, reps, weights, computed ranks, streaks | Core tracking & ranking features |
| Nutrition | Food/meal logs you enter | Nutrition tracking |
| Precise location | GPS only while you actively record an outdoor cardio session (foreground only — no background tracking) | Distance, pace and route for outdoor workouts |
| Photos | Images you choose from your camera or library for your avatar or posts | Profile & social content you create |
| Social content | Posts, captions, comments, likes, friend connections | Friends feed & social features |
| Device & usage | Push token, in-app analytics events, crash/diagnostic data, app language/timezone | Notifications, reliability, product improvement |
| Subscription | Purchase/entitlement status for Zvelt Pro (via the store & RevenueCat) | Unlock and manage paid features |
Our legal bases (where GDPR applies) are performance of a contract (running the App), consent (e.g. location, notifications — withdrawable anytime in device settings), and legitimate interests (security, product improvement).
We share data only with providers that process it on our behalf. We do not sell personal data. Providers include:
| Provider | Purpose |
|---|---|
| Supabase (PostgreSQL) & Render | Database & backend hosting |
| Apple App Store / Google Play & RevenueCat | Subscription billing & entitlement |
| Google Firebase Cloud Messaging | Push notifications |
| USDA FoodData Central | Food search lookups |
| ExerciseDB (RapidAPI) | Exercise reference media |
| OpenWeather | Weather for outdoor sessions |
| AI assistant provider | Content you send to the in-app AI assistant is processed to generate a reply |
We may disclose information if required by law, or to protect the rights, safety and security of our users and the service.
Some providers may process data outside your country. Where required, such transfers rely on appropriate safeguards (e.g. Standard Contractual Clauses).
Depending on your region (e.g. GDPR/UK GDPR, CCPA), you may have the right to access, correct, export, or delete your data, and to object to or restrict certain processing. You can request deletion in-app or by emailing us; we hard-delete or anonymize your data within 30 days. Contact support@zvelt.uk.
We protect data in transit with TLS 1.2+ and encrypt sensitive fields at rest. No method of transmission or storage is 100% secure, but we work to protect your information.
Zvelt is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy; we will revise the “Effective date” above and, for material changes, notify you in the App.