Privacy Policy
Last Updated: January 24, 2026
1. Data Controller
The Data Controller regarding account management and app infrastructure is: Elevate Development Team (elevate.gym.app@gmail.com).
2. Data Collected & Android Permissions
To ensure functionality, the App requests access to sensitive device features. Usage is strictly limited to:
A. Critical Permissions (Manifest)
- ACTIVITY_RECOGNITION: Used to count steps in the background and monitor daily activity.
- ACCESS_FINE_LOCATION: Used by ad providers (Google AdMob) for relevant ads, or optional route tracking.
- CAMERA: Necessary for scanning barcodes (OpenFoodFacts) and AI food analysis (Gemini). No videos/photos are permanently saved on Developer servers.
- READ/WRITE_EXTERNAL_STORAGE: Temporary storage for images before analysis and app cache.
- FOREGROUND_SERVICE: Keeps Recovery Timer and Step Counter active when app is closed.
- POST_NOTIFICATIONS & ALARM: For timer alerts and workout reminders.
- Request Ignore Battery Optimizations: Ensures OS doesn't kill timers/step counting.
- RECEIVE_BOOT_COMPLETED: Restarts counters/notifications after reboot.
B. Data Managed by Developer (Cloud)
- Account IDs: Email, User ID (via Firebase Auth).
- Technical Data: Crash logs, device model, OS version (via Firebase Crashlytics).
- Ad Data: Advertising ID (GAID) used by AdMob.
C. Data Managed EXCLUSIVELY by User
All fitness data (workouts, weight, photos) is saved on the user's personal Google Drive and local storage. The Developer has no access, read, or copy rights to this data.
D. AI (Gemini API)
Meal images are sent to Google servers (Gemini AI) for transient processing to extract nutritional data. They are not used for biometric identification.
3. Purpose of Processing
- Service Delivery: Timers, step counting, food diary, backups.
- Security: Account management and password reset.
- AI Analysis: Calorie estimation and recipe suggestions.
- Advertising: AdMob banners/videos to keep the app free.
4. Third Party Services
- Google Drive API
- Firebase (Auth, Crashlytics, Analytics)
- Google AdMob
- OpenFoodFacts
- Google Gemini API
5. Non-EU Data Transfer
By using services like Google (Firebase, AdMob), some technical data may be processed on US servers in compliance with the EU-US Data Privacy Framework.
6. User Rights & Deletion
Account Deletion: You can delete your Firebase account from app settings.
Health Data Deletion: Since data resides on your Google Drive, you have full control to view, export, or permanently delete it by accessing your Drive.
Contact
Questions? Email us: elevate.gym.app@gmail.com