Privacy Policy

👋 Introduction

Elixio ("we", "our", "us") is an AI-powered fitness and nutrition app available on iOS and Android. This Privacy Policy explains what personal information we collect when you use the Elixio app and website (elixio.fit), why we collect it, and how you can control it.

By using Elixio you agree to this policy. If you disagree, please discontinue use and delete your account.

📋 Information We Collect

Account & Profile

• Email address (required for account creation and OTP verification)
• Display name
• Date of birth (used to calculate BMR and age-based calorie targets)
• Gender, nationality (used to personalise nutrition recommendations)
• Pregnancy status (used to adjust calorie goals and exercise safety filters per WHO/NHS/ACOG guidelines — only if you choose Female gender)

Body & Fitness Data

• Weight, height, body type, and fitness level
• Fitness goal (e.g., weight loss, muscle gain, endurance)
• Diet plan preference (e.g., Mediterranean, Keto, High Protein)
• Target weight and weekly goal rate
• Health conditions (self-reported, used only to personalise suggestions)
• Workout preferences and training frequency

Daily Activity Logs

• Food diary: meals, food items, calories, protein, carbs, and fat
• Daily water intake
• Workout sessions: exercise name, sets, reps, weight lifted, duration
• Sleep duration (synced from your smartwatch — see Health Data below)

Health & Wearable Data (optional)

If you grant permission, Elixio reads the following from Apple HealthKit (iOS) or Google Health Connect (Android):

• Step count
• Heart rate
• Active energy burned (calories)
• Sleep duration
• Exercise time and workout sessions

Camera (optional)

• Barcode scanner: camera frames are processed on-device to read product barcodes. No image is stored or transmitted.
• AI food photo: photos are sent to our server for food identification, then discarded immediately after the response is returned. We do not store food photos.

Usage & Analytics Data

• App events (screen views, tab switches, feature usage) via Firebase Analytics
• Crash and error reports (error type and stack trace, no personal content)
• App version, device OS, and general device category (not device ID)

🎯 How We Use Your Information

💾 Data Storage & Retention

• On-device storage: Your daily food logs, workout history, and settings are stored locally on your device using an encrypted local database (Hive). This data is yours and stays on your phone even without internet.
• Cloud backup: Your profile and logs are synced to our secure backend to enable multi-device access and account recovery. Data is transmitted over HTTPS.
• Retention: We retain your data for as long as your account is active. You can request deletion at any time (see Section 7).

🤝 Third Parties We Use

We do not sell your personal data. We share limited data only with the following sub-processors to operate the app:

• Google Firebase — authentication (email/OTP), cloud database, and Firebase Analytics (usage events). Governed by Google's Privacy Policy.
• Apple HealthKit (iOS) / Google Health Connect (Android) — read-only health data with your explicit permission.
• Our AI backend — your profile attributes (goal, diet, pregnancy flag) are sent to generate personalised meal recommendations. No data is retained beyond the request.

🔒 Security

We take reasonable technical and organisational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Local data encrypted by the OS secure enclave (iOS Keychain / Android Keystore)
• Firebase security rules restricting data access to authenticated account owners only
• No plaintext storage of passwords (we use OTP-based login; no passwords stored)

No system is 100% secure. If you suspect unauthorised access to your account, contact us immediately at elixio@elixio.fit.

⚙️ Your Rights & Choices

• Access: You can view all your profile data in the app's Profile tab at any time.
• Correction: Update your name, weight, goals, and preferences directly from the Profile tab.
• Deletion: To permanently delete your account and all associated data, email elixio@elixio.fit with subject "Delete my account". We will action this within 30 days.
• Health data: You can revoke HealthKit or Health Connect permissions at any time through your device Settings. Revoking stops syncing but does not delete data already logged.
• Analytics opt-out: Firebase Analytics respects your device-level "Limit Ad Tracking" or "Opt out of Ads Personalisation" setting.
• Export: Export all your food, workout, and body data as PDF or CSV directly from the app's Reports screen.

🌍 Children's Privacy

Elixio is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

📝 Changes to This Policy

We may update this policy as the app evolves. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice. Continued use of Elixio after changes constitutes acceptance of the updated policy.

📬 Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, reach us at:

• Email: elixio@elixio.fit
• Website: elixio.fit