Privacy Policy

Evzia · Last updated: October 7, 2026

1. Who is responsible

Alberto López Pérez, tax ID (NIF) 53319515H, with address at Carrer d'Hipòlit Lázaro 22, 6th floor, door 20, 43481 La Pineda (Vila-seca), Tarragona, Spain. Contact: colkard96@gmail.com.

2. How you get in

Evzia has no accounts of its own with an email and password. A group is created from the app, with your name, and other phones join with the group's code and its PIN (the PIN is set when you invite someone). If you want, you can also link your Google or Apple account so that you alone can get back in from another phone without the code (see section 3). Each phone has an anonymous identifier that the app itself creates.

3. What data is stored

• About the group: name, code, PIN if one has been set (only an encrypted fingerprint, never the PIN itself), the AI model, its plan and its AI credits (how many are left this month, those from packs and when they refill), its purchases (which plan or pack, from which store, when and until when, without any payment details) and which phone created it and when (without the IP address).
• About each person: the name they go by in the app, year of birth, height, sex, calorie and protein goals, starting weight, their workout routine and when they signed up.
• What gets logged: meals (food, grams, calories, protein, carbs and fat), weight, steps, treadmill sessions and other activities (cycling, swimming…: time, intensity and calories), workouts done with the routine (sets, weights and time), batches, recipes (those brought in from a video, with its link and its author), the shopping list (what is added and by whom), saved foods, each person's reminders (the times of the notifications and any supplements or medications they add, with their days), when they mark them as taken, and the achievements, weekly challenges (including the group's) and points they earn (these are calculated from what is logged and are not sent to anyone, not even to the AI).
• Health data from the phone, only if turned on: steps and weight read from Apple Health (HealthKit) on iPhone or from Health Connect on Android. They are only read: the app does not write anything to Health.
• About the phone: its anonymous identifier, which person in the group it belongs to, whether it uses large text and when it was added.
• About your Google or Apple account, only if you sign in with it or link it: the identifier of that account, which is what recognizes it and makes it the key to your person when you sign in from another phone, and its email, only if Google or Apple give it as verified (with Apple, it may be the hidden email address Apple gives you), which is used solely to show you which account is linked (More → Settings → This phone). With Apple we also store a renewal code that is only used to be able to revoke access when the account is deleted. Google and Apple do not give us your password or anything else from your account; if they give your first name, it is only used to suggest it to you when you start and is not stored with the account. You can unlink it whenever you want in More → Settings → This phone (or, from any phone in the group, in More → Settings → People); it is also deleted when the group is deleted, and with Apple access is revoked.
• AI usage: when it is used, for which task, which model, how long it takes and how much it costs.
• Progress photos (only if used): the front, side and back photos each person takes to see how they change, with their date. They are private to each person: they can only be seen on the phones that person unlocks with their photo PIN. Nobody else in the group, nor the coach, nor the person responsible can see them, and they are not sent to the AI.
• Photos of dishes and labels, and audio: they are sent to the AI to do the calculation or to turn your voice into text, and are not stored.

If you switch groups (More → Settings → Group and phones → "Join another group", only if you are the only one in yours), your data moves to the new group and its people can see it, and the old group is deleted; your progress photos stay protected by your photo PIN.

4. What it is used for

To make the app work: calculating calories and macros, showing progress, estimating daily energy expenditure, generating recipes, suggesting the day's meals and workout routines, understanding the exercise you describe in order to log it, answering questions and activating the plan or credits the group buys; and, with usage data, for support and to know whether the app works (see "Support and usage statistics"). It is not used for advertising, marketing or profiling, and it is not sold.

Why we can use it (legal basis).

• Your explicit consent, for health data: what you eat, your weight, your steps and your exercise, your supplements or medications and your progress photos. You give it when you start using the app. If you log data for another person, you declare that you have their permission (or, if they are under 14, that you are their parent or guardian), and that person can give it themselves on their own phone. You can withdraw it whenever you want in More → Settings → People → their page → "Withdraw permission and delete…", which deletes that person with all their data, or by writing to the email address above. Without it, the app cannot do its job.
• Your consent, also, for each thing you turn on yourself: sending data to the AI, reading Apple Health or Health Connect, signing in with Google or Apple, and coach mode. It is withdrawn with the same setting.
• The contract (the terms of use), to provide the service and manage your plan and your credits.
• Legal obligations, such as keeping the purchase records required by tax rules.
• Legitimate interest, for security (limits on PIN attempts, preventing groups from being created in bulk, AI spending brakes), app errors, and support and usage statistics: these are usage data, never what is eaten or weighed. You can object by writing to the email address above.

Support and usage statistics. The person responsible sees, for each group and each person, only usage data, to be able to help and to know whether the app works: how many people and phones the group has, when each person signed up and when the app was last used, how many days and how many foods are logged, AI usage and spending, purchases and app errors. From that, they also calculate overall statistics, for example how many people who start are still using the app a month later. They do not see what you eat, your weight or any other health data, nor the progress photos, and they never use for this anything the app reads from Apple Health or Health Connect.

Coach (only if you turn it on). Each person can allow, in More → Settings → This phone, the person responsible to follow them as a coach: they can then see that person's data (what they ate, their weight, their steps and their exercise; not their supplements, their reminders or their progress photos) and adjust their workout routine and goals. It is voluntary, it lasts until you turn it off with the same switch, and each time they look it is recorded (the last time is shown right there).

5. Who it is shared with

• Supabase stores the database and runs the app's server, in the European Union (Ireland).
• Cloudflare stores the progress photos (R2), encrypted and in the European Union. They can only be reached through links that expire after 5 minutes and that our server gives to the phones with access.
• Artificial intelligence, only with each person's permission, which the app asks for before using it for the first time and which can be withdrawn in More → Settings → This phone. It is sent to OpenRouter, which passes the request on to models from Google (Gemini) and, for some decisions or if something fails, from TypeSafe, OpenAI or Alibaba (Qwen), always to providers that do not use what is sent to train their models. What is sent is what you type, dictate or photograph and what the calculation needs: the name you go by in the app, what you ate that day (to suggest your meals: what you logged in recent weeks, with its time), your goals, age, height, sex, weight, steps and exercise and, to suggest a routine, your current routine and your exercise preferences (goal, level, equipment and aches). They use it only to give the answer; some keep it for a limited time under their own rules (for example, to detect abuse). Some of these companies are outside the European Union (United States).
• Scrape­Creators (United States), only when you share an Instagram, TikTok or YouTube video with the app to get its recipe, and with the same permission as the AI: it receives the video's link (no group data) and returns its description and what is said in it, which go to the AI above to put the recipe together.
• RevenueCat (United States) manages purchases: it receives the group's identifier (an internal code, not its name) and the purchase data (product, dates, store and status), plus the basic technical data it needs to validate them with the store, and notifies our server to activate the plan or the credits. It does not receive any health data or anything that is logged (meals, weight, steps, exercise).
• Google and Apple, only if you sign in with your account: they check that it is you and give us the account's identifier and, if they give it as verified, its email (section 3). They know you use Evzia, under their own privacy policies; we check with their public keys that what reaches us really comes from them.
• Apple (App Store) and Google (Google Play) are the stores that charge for plans and packs with your account, under their own privacy policies. We do not see or store your payment details, nor your store name or email: we only know which plan or pack was bought and until when.
• Expo delivers the app's updates; it does not receive any group data.

6. Apple Health and Health Connect data

The steps and weight the app reads from Health or Health Connect are only used for the group's own tracking. They are never used for advertising or sold, they are not stored in iCloud and they are not shared with anyone other than the AI services above, with the person's permission and only for the calculation they ask for. Access can be removed whenever you want in the phone's settings (Health → Data Access, or Health Connect).

7. How long it is kept

As long as the group exists. In More → Settings → Delete the group, everything in the group is deleted immediately and forever: people, what has been logged, progress photos, batches, recipes, the shopping list, foods, the AI key, its credits (including unused credits from packs), the linked Google or Apple accounts (with Apple, access is revoked first) and the phones. For each pack bought, only the purchase identifier is kept, without any group data, so that it is not added again if purchases are restored in another group. Removing a phone (More → Settings → Group and phones) unlinks it from the group; that person's Google or Apple account stays linked (and can be used to sign back in) unless, when removing it, you tick the option to remove it too. Unlinking a Google or Apple account (More → Settings → This phone, or People) deletes it immediately (and with Apple, access is revoked). You can also ask for deletion by writing to the email address above. All the details are in Deleting a group's data. Of a deleted group or person, only when they were created remains, without any data that identifies them, and, for purchases, their price and date, for usage statistics.

Purchases have a life of their own: deleting the group does not cancel a subscription (you have to cancel it in the store), and the purchase records kept by Apple, Google and RevenueCat are kept according to each one's rules, for example tax rules. If you also want them deleted from RevenueCat, write to us and we will ask them.

Each progress photo can be deleted whenever you want; if someone forgets their photo PIN, they can delete all of theirs and start again.

8. Your rights

You can access your data, correct it, take it with you (More → Settings → Data → Export to spreadsheet), object to its use or delete it, from the app itself or by writing to colkard96@gmail.com. If you think they have not been respected, you can file a complaint with the Spanish Data Protection Agency (aepd.es).

9. Minors

The app is not intended for children. If a child under 14 is logged in a group, it is done and managed by their parent or guardian.

10. Security

Connections are encrypted (HTTPS), each group can only see its own data, the PIN is stored as an encrypted fingerprint, the AI key is encrypted and there is a limit on PIN attempts. The photo PIN is also stored only as an encrypted fingerprint and has its own limit on attempts. To prevent groups from being created in bulk, which phone created each group and when is also stored, without the IP address.

11. Changes

If this policy changes, the new version will be published here with its date. The conditions for purchases and the service are in the terms of use.