LAVIA — Privacy Policy

Effective date: 2026-08-28 Last updated: 2026-08-28

LAVIA ("we", "us") is a women's fitness and wellness mobile application. This Privacy Policy explains what information we collect, why, and the choices you have. If anything here is unclear, write to us at support@laviafit.app.

1. Who this policy is for

LAVIA is designed for adults (18+) who want structured workouts, Pilates, Face Yoga, mobility work, healthy recipes, and progress tracking. You are our customer and the account holder.

If you are under 18, please do not use LAVIA.

2. What we collect

Account

• Email address (used for sign-in via one-time code).
• Subscription state: whether you are on the free plan, trial, or premium; renewal dates. Provided by RevenueCat via the App Store or Google Play.
• Device: anonymous device identifier for crash reporting and analytics.

Fitness profile (entered by you during onboarding)

• Goal (e.g. feel stronger, more energised, calmer, more flexible)
• Fitness level (beginner / intermediate / advanced)
• Available time per session (10 / 20 / 30 / 45+ min)
• Body focus areas (full body, lower, upper, core, face, mobility)
• Available equipment
• Life stage (general / postpartum / perimenopause / prefer not to say)
• Motivation style

Usage

• Workout history: which workouts you started, completed, skipped; timestamps.
• Meals & nutrition: food entries you log manually or via a recipe — title, calories, protein, carbs, fat, date.
• Water intake: amounts and timestamps you log.
• Weekly reflections: mood tags and any free-text note you choose to add.

Optional body data (you choose whether to log)

• Body measurements: weight, waist, hip, bust.
• Progress photos: images you take from within the app.

You can skip any of the above at any time. Progress photos are stored privately on your device (or in your account's private storage), never shared, and never used for marketing.

From your device

• App version, OS version, language setting.
• Crash reports (Sentry, when enabled) — includes stack traces and app state at time of crash, no personal data.
• Product usage events (PostHog, when enabled) — e.g. "workout_completed", "paywall_viewed". Tied to your account, no free-text reflections or measurements attached.

3. Why we use it

• Personalise the service: generate your weekly plan, recommend workouts and recipes that match your goal, remember your preferences.
• Track your progress: show streaks, weekly completion, macro totals, water totals.
• Improve quality: aggregate analytics to see which features users value, fix crashes.
• Bill: confirm your subscription is active via App Store / Play Store receipts.
• Communicate: send optional workout reminders (only if you enable them), respond to support requests.

We do not:

• Sell your data.
• Show any advertising, ever.
• Share data with third-party ad networks or data brokers.
• Use your data to train AI models.

4. Health data — what LAVIA is and is not

LAVIA is a fitness and wellness product, not a medical service.

• We do not diagnose, treat, cure, or prevent any medical condition.
• Face Yoga sessions are movement and relaxation; they are not a medical or aesthetic treatment and do not guarantee permanent physical change.
• Postpartum and perimenopause-adjacent content is general information only. Please consult a qualified healthcare professional before starting.
• Nutrition goals are guidance, not medical advice. If you have a medical condition or eating-disorder history, work with a professional.
• Weight is never the primary progress metric. LAVIA emphasises consistency, strength, and how you feel.

If you experience pain, dizziness, or any concerning symptom, stop and consult a professional.

5. AI features (optional, currently limited)

Where AI features are enabled (e.g. food photo estimation, personal coaching prompts), we send only the specific input needed to generate the response (e.g. a photo, a short prompt). AI outputs are always presented as estimates, never as medical facts. AI providers process requests under zero-retention agreements — they do not train on our inputs.

6. Who we share data with

• Supabase (authentication, database, storage, edge functions) — our infrastructure provider.
• RevenueCat (subscription management) — processor.
• PostHog (product analytics, when enabled) — processor.
• Sentry (crash reporting, when enabled) — processor.
• Apple / Google — for App Store / Play Store purchase processing.
• AI providers (only when you use an AI feature) — processor, zero-retention.

Each processor is bound by contract to use data only to provide the service.

We may disclose data if required by law, subpoena, or to protect rights and safety.

7. Where data is stored

Primary storage is on Supabase infrastructure (region: EU). Third-party processors listed above may operate in the United States and elsewhere. By using LAVIA you consent to this cross-border processing where lawful.

8. How long we keep data

• Active accounts: for as long as the account is open.
• Workouts, meals, water, reflections, measurements, photos: for the lifetime of the account.
• Crash and analytics data: rolling 90 days.
• After account deletion: we permanently delete all your data. Backups are purged within 30 days.

9. Your rights

You can, at any time, from within the app:

• Delete your account and all associated data (Profile → Delete account).
• Sign out without deletion (Profile → Sign out).
• Restart onboarding to change your profile (Profile → Restart onboarding).
• Withdraw consent by deleting your account.

You also have rights under GDPR (EU/UK), Turkish KVKK, and similar laws to access, correction, restriction, portability, and complaint to a supervisory authority.

To exercise any right or ask a question, email support@laviafit.app. We respond within 30 days.

10. Security

We use industry-standard measures: TLS in transit, encrypted storage at rest, hashed passwords (managed by Supabase), row-level security on our database, private signed URLs for progress photos, and audited third-party processors.

No system is perfectly secure. If you suspect an account issue, contact support@laviafit.app immediately.

11. Changes to this policy

If we make material changes, we will notify you in the app and update the "Last updated" date. Continued use after 30 days constitutes acceptance.

12. Contact

LAVIA — Privacy Email: support@laviafit.app

For EU/UK users, our representative can be reached at the same address.

This policy is provided in English and Turkish. Where a conflict arises, the English text prevails.