PRIVACY POLICY

Last updated: 3 April 2026

1. Introduction

RYVL ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the RYVL mobile application and website (collectively, the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and authentication credentials. If you sign in via Google OAuth, we receive your name and email from Google.

Health & Fitness Data

With your explicit consent, we collect workout data, exercise logs, heart rate data (via Apple Watch/HealthKit), training plan progress, and performance metrics. This data is used solely to provide and improve your training experience.

Third-Party Integrations

If you connect Strava, Fitbit, or Apple Health, we access only the data categories you authorise. You can disconnect these integrations at any time from your profile settings.

Usage Data

We collect anonymous usage analytics to improve the app experience, including screen views, feature usage patterns, and crash reports.

3. How We Use Your Information

• To provide and personalise your training plans
• To power the AI Coach with context about your training
• To sync your data across devices via cloud backup
• To generate your Hybrid Score and analytics
• To send you important service updates (not marketing)
• To improve and develop new features

4. Data Storage & Security

Your data is stored securely using Google Firebase infrastructure with encryption at rest and in transit. All API communications use HTTPS. Authentication tokens are managed via Firebase Auth. We do not store AI API keys on your device — all AI processing is proxied through our secure backend.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Service providers: Firebase (hosting/auth), AI providers (OpenAI, Anthropic, Google) for plan generation and coaching — your data is sent only as needed to provide the service and is not used to train their models.
• Third-party integrations: Strava, Fitbit — only when you explicitly connect and authorise them.
• Legal requirements: If required by law or to protect our rights.

6. Your Rights

You have the right to:

• Access and download your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Withdraw consent for health data collection
• Disconnect third-party integrations

To exercise any of these rights, contact us at the address below.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

8. Children's Privacy

RYVL is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe we have collected such data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or email. Continued use of the Service after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: privacy@ryvlapp.com