Legal

Privacy Policy

Last updated: March 2026

Welcome to EVO: Health & Fitness ("EVO", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application.

By using EVO, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information when you use EVO:

• Account Information: Your name, email address, and password when you create an account.
• Profile Information: Optional information you choose to provide including date of birth, sex, height, weight, and unit preferences.
• Fitness Data: Workout sessions, exercises, sets, reps, weights, distances, durations, personal bests, training programs, and session templates you create or log.
• Nutrition Data: Macro targets, food diary entries, meal plans, meals and recipes you create, and shopping lists.
• Body Metrics: Body composition measurements you choose to record, including weight, body fat percentage, and physical measurements.
• Usage Data: Information about how you interact with the app, including features used and badges earned.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the EVO app and its features
• Create and manage your user account
• Display your personal fitness, nutrition, and body data to you within the app
• Track your progress and award badges based on your activity
• Improve and develop new features for the app
• Respond to your support requests and communications
• Send important notifications about your account or the app (where you have opted in)

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. Data Storage and Security

Your data is stored securely using Supabase, a trusted cloud database provider. Supabase stores data on servers hosted by Amazon Web Services (AWS) in the ap-southeast-2 region (Sydney, Australia).

We implement industry-standard security measures to protect your data, including:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Row-level security policies ensuring you can only access your own data
• Secure authentication managed by Supabase Auth
• Passwords are never stored in plain text

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following limited circumstances:

• Service Providers: We share data with Supabase solely to provide the infrastructure needed to operate the app. Supabase acts as a data processor on our behalf.
• Legal Requirements: We may disclose your information if required by law, regulation, or legal process.
• Business Transfer: If EVO is acquired or merged with another company, your data may be transferred as part of that transaction. You will be notified of any such change.

5. Your Rights

You have the following rights regarding your personal data:

• Access: You can access all of your personal data directly within the EVO app.
• Correction: You can update or correct your information at any time through the Profile/Settings section of the app.
• Deletion: You can request deletion of your account and all associated data by contacting us at the email address below. We will process your request within 30 days.
• Portability: You may request a copy of your personal data in a machine-readable format.
• Withdrawal of Consent: You may stop using the app at any time. Deleting the app does not delete your account data — please contact us to request full data deletion.

6. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete your data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Children's Privacy

EVO is rated 4+ and is available to users of all ages. We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If you believe a child under 13 has provided us with personal information without consent, please contact us and we will take steps to delete that information.

8. Third-Party Services

EVO uses the following third-party services:

• Supabase (supabase.com) — Database, authentication, and file storage. View their privacy policy at supabase.com/privacy.
• Expo / EAS (expo.dev) — App build and distribution infrastructure. View their privacy policy at expo.dev/privacy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this policy and, where appropriate, notifying you within the app. We encourage you to review this policy periodically.

10. Governing Law

This Privacy Policy is governed by the laws of New South Wales, Australia. Any disputes relating to this policy shall be subject to the jurisdiction of the courts of New South Wales.