Privacy Policy

BODY FIXERS HEALTH & WELLNESS LIMITED (company number 14435839) operates LEVR and is the data controller responsible for the personal information described in this Policy, unless we expressly identify another controller.

LEVR is a personalised fitness, nutrition and lifestyle coaching app. Some information you share,
including injuries, training limitations and other health details, can be sensitive. This Policy explains how we handle it.

For privacy questions, contact support@levr.coach.

1. Information we collect

Depending on the services and features you use, information may include:

Account and membership: name, email, account identifiers, preferences, subscription status, transaction references and support messages. Apple or Google normally handles your payment card information; we receive purchase and entitlement details.
Fitness and health-related details: goals, age, height, weight, progress photos, training history, exercise performance, equipment, injuries and limitations, activity, habits, food descriptions, nutrition estimates, sleep and stress information you provide.
AI conversations and voice: written messages, spoken input sent for transcription, resulting text, relevant coaching context, AI replies and generated speech. A synthetic voice may be used to deliver the reply.
Device, diagnostics and notifications: device and app identifiers, operating system, error/usage records, timing information and notification tokens where enabled.
Optional marketing: whether you sign up for tips, updates or offers and your unsubscribe preferences.

We collect information from you, from the app as you use it, and from the payment or technical providers needed to supply a feature.

2. Why we use information and our lawful bases

We use information for the purposes below under UK GDPR, as applicable:

Providing the Service and managing a subscription: account setup, workout programmes, coaching requests, access and billing status. Our usual Article 6 basis is performing our contract with you.
Personalised AI and voice coaching: interpreting requests and providing guidance using information you choose to share. Contract performance and, for the relevant processing and third-party transfers, your explicit permission are relied on as appropriate.
Health information: where information is special-category health data, we require a valid Article 9 condition in addition to an Article 6 basis. For health data you choose to provide for AI coaching, LEVR requests explicit consent before that processing begins.
Security and reliability: account protection, preventing misuse and troubleshooting problems under our legitimate interests, balanced against your privacy rights.
Legal, tax and accounting requirements: records necessary to meet our legal obligations.
Optional promotional messages: consent where required, which can be withdrawn independently of your AI coaching choice.

Not all details are necessary for every feature. Where an optional answer is not provided, some personalised features may work less well or not be available.

3. Third-party AI and voice processing

LEVR sends relevant information to external AI and voice technology to interpret spoken or typed requests, produce coaching replies, generate speech, estimate nutrition and personalise workouts. This may include what you say, your training goal, health-related details you choose to provide and related coaching history or context.

Providers used or configured in the app include:

Lovable's AI gateway, which routes relevant AI processing to model providers such as OpenAI and Google. The model depends on the feature.
ElevenLabs for voice transcription and speech synthesis, including the synthetic voice that speaks the AI coach's replies.
Supabase for authentication, database storage and backend functions.

On supported mobile devices, microphone audio may be streamed to ElevenLabs for speech recognition. Transcribed text and relevant context may then be sent through the AI gateway; text is also sent for voice generation. Some browsers use their own speech-recognition facilities, whose processing can depend on the device and browser.

The LEVR AI coach is automated. A realistic voice does not mean a human coach is speaking live or reviewing every response. AI answers can be inaccurate and should not be used for medical diagnosis or treatment.

We request express permission for this personalised AI and voice processing before it begins, and record that choice. You can withdraw permission in Profile → Privacy & Data. Further AI and voice coaching will then be restricted unless you grant permission again.

These services may temporarily process and retain inputs or technical information needed to provide and secure their features. Retention periods and any further data uses can vary by provider and contract. Contact our privacy team if you would like more information about the providers used for a particular feature.

4. Other recipients and human support

To run LEVR, selected data may also be processed by:

Apple, Google and RevenueCat for in-app purchases and subscription entitlements.
OneSignal for push-notification delivery where notifications are used.
Brevo for permitted email communications, including optional marketing where you have opted in.
Technical support, hosting, security, professional advisers and other service providers where legitimately required to operate the Service.

Authorised LEVR staff may access information relevant to support, safety, maintenance and service delivery. If you purchase a plan including a human coach, that coach may access the information needed for your coaching programme.

We do not sell personal information, and we do not use health information to target advertising.

5. Microphone, photos and notifications

Microphone access is used to transcribe your spoken coaching requests when you use voice features. Device-level microphone permission is separate from the express consent requested for third-party AI and health-data processing.

Camera or photo-library permissions are requested when needed for a feature you choose, such as progress photos or meal images. Notifications are optional and can be controlled through device settings and available app preferences.

6. Apple Health and Health Connect

Apple Health and Google Health Connect are currently labelled Coming soon within LEVR. We do not describe these as active integrations that currently import your wearable information.

If we introduce them, we will explain the specific data requested, the intended uses, any sharing and the permissions needed before activation.

7. Storage, security and international processing

We use appropriate technical and organisational controls intended to restrict access, secure information and protect it from unauthorised use, alteration or loss. No connected service can guarantee absolute security.

Some providers may process information outside the UK. Where UK data protection rules require safeguards for an international transfer, we use an applicable lawful mechanism and appropriate contractual or other protections. Contact us for information about the safeguards applying to your data.

8. How long information is kept

We keep information for the period reasonably required for its purpose. The type of information, whether your account remains open, legal record-keeping requirements, security needs and legitimate disputes can affect retention.

Account, workouts, health and coaching history: generally retained while the account is active, then removed or anonymised through account deletion subject to lawful exceptions.
Progress photos: stored with your account and ordinarily removed through account deletion, subject to any lawful technical or backup retention.
Data exports: generated export download links expire after 24 hours; automated cleanup is configured.
Purchase and financial records: some information may be retained or de-identified where required for legal, accounting, fraud prevention or disputes. Apple, Google and RevenueCat manage their own records.
Diagnostic data, backups and provider-held copies: retention depends on the technical and contractual arrangements, security requirements and deletion processes for the relevant provider.

Voice inputs are processed to produce transcripts while a voice feature is active. Any temporary audio storage and provider-held copies are subject to the relevant technical setup and provider arrangements.

Contact us if you need more detail about these retention practices. When you exercise a right to deletion, we apply it in accordance with relevant legal obligations and explain any retention exception.

9. Your rights and choices

Subject to relevant law and any applicable conditions, you may ask us to:

Provide access to or a portable copy of eligible personal information.
Correct inaccurate information or erase information in appropriate circumstances.
Restrict processing or object to processing based on legitimate interests.
Withdraw consent where our processing relies on it, without affecting previously lawful use.
Explain relevant automated processing and review concerns where rights apply.

You can access Profile → Privacy & Data to download your information, withdraw AI-coaching consent or delete your account. You can also email support@levr.coach. We may need to verify your identity.

For deletion without the app, see our Delete Account & Data page. Deleting an account does not automatically cancel an Apple or Google subscription.

You may complain to the UK's Information Commissioner's Office if you have concerns about our handling of your information.

10. Marketing, device storage and analytics

If you opt in to optional marketing, we may email coaching tips, news and offers. You can unsubscribe at any time through the message or by contacting us. This preference is independent of the coaching consent.

LEVR uses device storage necessary for login, session continuity and app preferences. If optional analytics or other technologies require separate consent, we will explain the purpose and provide the controls required by law.

11. Changes to this Policy

We may update this Privacy Policy as LEVR develops. Material changes will be communicated where required, and we will request new consent before any additional processing that requires it.

12. Contact and data controller

Data controller: BODY FIXERS HEALTH & WELLNESS LIMITED (company number 14435839), England and Wales.

Registered office: 1 Wilson Avenue, Brighton, England, BN2 5PA.

Privacy email: support@levr.coach.