Privacy Policy

Evzi (formerly Evzia) · Last updated: October 15, 2026

1. Who is responsible

Alberto López Pérez, tax ID (NIF) 53319515H, with address at Carrer d'Hipòlit Lázaro 22, 6th floor, door 20, 43481 La Pineda (Vila-seca), Tarragona, Spain. Contact: colkard96@gmail.com.

2. How you get in

Evzi has no accounts of its own with an email and password. A group is created from the app, with your name, and other phones join with the group's code and its PIN (the PIN is set when you invite someone). If you want, you can also link your Google or Apple account so that you alone can get back in from another phone without the code (see section 3). Each phone has an anonymous identifier that the app itself creates.

3. What data is stored

• About the group: name, code, PIN if one has been set (only an encrypted fingerprint, never the PIN itself), the AI model, its plan and its AI credits (how many are left this month, those from packs and when they refill), its purchases (which plan or pack, from which store, when and until when, without any payment details) and which phone created it and when (without the IP address).
• About each person: the name they go by in the app, year of birth, height, sex, calorie and protein goals, starting weight, their workout routine and when they signed up.
• What gets logged: meals (food, grams, calories, protein, carbs and fat), weight, steps, treadmill sessions and other activities (cycling, swimming…: time, intensity and calories), workouts done with the routine (sets, weights and time), batches, recipes (those brought in from a video, with its link, its author and its cover image, and the photo added to each one), the shopping list (what is added and by whom), saved foods, each person's reminders (the times of the notifications and any supplements or medications they add, with their days), when they mark them as taken, and the achievements, weekly challenges (including the group's) and points they earn (these are calculated from what is logged and are not sent to anyone, not even to the AI).
• Weekly check-in with Evzi, only if you use it (it is turned on in More → Reminders or when you first set up the app): your answers each week (energy, hunger, mood, how your diet and your workouts are going, and sleep), anything you type or dictate in "Anything else you want to tell me?" and in "Prefer something else?", what Evzi suggested to you (and what the app's rules suggested, if Evzi chose something different) and what you chose. You and your group can see it; the coach and the person responsible cannot (not even in the usage statistics). Only with your permission to use the AI, those answers, what you type or dictate, the week's figures, your goal history, your previous check-ins and the names of the foods you log most often are sent to the AI (OpenRouter, only to providers that do not train on what is sent; section 5) so it can suggest changes to your plan within fixed safety limits set by the app and write Evzi's message; if what it suggests goes beyond those limits, the rules' suggestion is kept. Without that permission, the suggestion comes only from the rules, on your phone. Nothing changes until you accept it: you can apply it, adjust it or keep your plan as it is. It has its own permission, separate from the one for your health data: it is asked for the first time you do a check-in, and you can withdraw it whenever you want in Progress → "My check-ins" → "Withdraw permission and delete…", which deletes your check-ins (your plan and what you have logged do not change). It is also deleted when the person or the group is deleted.
• Health data from the phone, only if you allow it in Health (iPhone) or Health Connect (Android): steps, weight, workouts (type, duration and active calories), sleep (the hours slept each night), resting heart rate and its variability, water, distance, total and resting energy burned, and body fat and lean mass. Workouts are logged as activities, marked "from your watch"; everything else is saved per day and shown in Progress. Body fat and lean mass are for your information only: the app does not use them in its calculations or send them to the AI. The app does not read blood pressure, blood glucose, your menstrual cycle, a workout's route or your heart rate during exercise. If you allow it, the app also saves to Health or Health Connect the total of each meal you log (calories, protein, carbs and fat) and the weight you enter by hand.
• About the phone: its anonymous identifier, whether it is an iPhone, an Android phone or the web, which person in the group it belongs to, whether it uses large text and when it was added.
• Group notifications, only on phones that have them turned on: the code Apple or Google provides so notifications can be sent to that phone (through Expo), the app's language, the phone's time zone (so nothing is sent at night or more than once a day) and whether it wants the notifications. And cheers: who in the group cheered on which achievement.
• About your Google or Apple account, only if you sign in with it or link it: the identifier of that account, which is what recognizes it and makes it the key to your person when you sign in from another phone, and its email, only if Google or Apple give it as verified (with Apple, it may be the hidden email address Apple gives you), which is used solely to show you which account is linked (More → Settings → This phone). With Apple we also store a renewal code that is only used to be able to revoke access when the account is deleted. Google and Apple do not give us your password or anything else from your account; if they give your first name, it is only used to suggest it to you when you start and is not stored with the account. You can unlink it whenever you want in More → Settings → This phone (or, from any phone in the group, in More → Settings → People); it is also deleted when the group is deleted, and with Apple access is revoked.
• AI usage: when it is used, for which task, which model, how long it takes and how much it costs.
• Suggestion box (only if you use it): what you write or dictate in More → Suggestion box and what it's about (an idea, something that isn't working or something else), with the name of the phone's person, their group, the phone it was sent from, the language, the app version and the system (Android, iPhone or web), and whether we've read it. Only the controller reads it; it isn't sent to the AI or to anyone else.
• Community (only if you create your profile, which is optional and only for people 18 and over, from a phone signed in with your Google or Apple account): your profile (display name, username, short bio and photo, if you add one; whether it's open or private), who you follow, who follows you and your friends, who you've blocked, what you post (a copy of what you choose to show at that moment—a recipe, a dish, a workout plan, a workout, your activity, an achievement, your week or your progress—with the text and photos you add), your reactions and comments, the reports you make and community notifications. Health data in a post (the numbers of what you eat, your weight, your steps…) is off and only appears if you turn it on in that post; supplements, medication, maintenance, goals, height, age, sex, progress photos and anything about other people in your group never appear.
• Progress photos (only if used): the front, side and back photos each person takes to see how they change, with their date. They are private to each person: they can only be seen on the phones that person unlocks with their photo PIN. Nobody else in the group, nor the coach, nor the person responsible can see them, and they are not sent to the AI.
• Photos of dishes and labels, and audio: they are sent to the AI to do the calculation or to turn your voice into text, and are not stored.

If you switch groups (More → Settings → Group and phones → "Join another group", only if you are the only one in yours), your data moves to the new group and its people can see it, and the old group is deleted; your progress photos stay protected by your photo PIN.

4. What it is used for

To make the app work: calculating calories and macros, showing progress, estimating daily energy expenditure, generating recipes, suggesting the day's meals and workout routines, going over your week and suggesting changes to your plan (the weekly check-in with Evzi), understanding the exercise you describe in order to log it, answering questions and activating the plan or credits the group buys; and, with usage data, for support and to know whether the app works (see "Support and usage statistics"). It is not used for advertising, marketing or profiling, and it is not sold. The only thing related to advertising is knowing whether a group came from an Evzi ad on the App Store, without any health data (see RevenueCat in section 5).

Why we can use it (legal basis).

• Your explicit consent, for health data: what you eat, your weight, your steps and your exercise, your supplements or medications, how you feel in the weekly check-in (energy, hunger, mood and sleep) and your progress photos. You give it when you start using the app. If you log data for another person, you declare that you have their permission (or, if they are under 14, that you are their parent or guardian), and that person can give it themselves on their own phone. You can withdraw it whenever you want in More → Settings → People → their page → "Withdraw permission and delete…", which deletes that person with all their data, or by writing to the email address above. Without it, the app cannot do its job. The weekly check-in with Evzi also has its own permission, which you give the first time you do one and can withdraw in Progress → "My check-ins", which deletes your check-ins.
• Your consent, also, for each thing you turn on yourself: sending data to the AI, reading Apple Health or Health Connect (including watch workouts), receiving group achievement notifications, signing in with Google or Apple, and coach mode. It is withdrawn with the same setting.
• Your consent for the community (GDPR arts. 6(1)(a) and 9(2)(a)), separate from the health one: showing what you post to the people you choose (your friends, people who follow you or, with an open profile, anyone with a profile), letting them copy to their group what you allow to be imported, and reviewing posts to make sure they follow the guidelines. You give it when you create your profile, with a checkbox separate from the health one; withdrawing it means deleting your profile.
• The contract (the terms of use), to provide the service and manage your plan and your credits.
• Legal obligations, such as keeping the purchase records required by tax rules.
• Legitimate interest, for security (limits on PIN attempts, preventing groups from being created in bulk, AI spending brakes), app errors, support and usage statistics, and knowing which Evzi ads on the App Store work: these are usage data, never what is eaten or weighed. You can object by writing to the email address above.

Support and usage statistics. The person responsible sees, for each group and each person, only usage data, to be able to help and to know whether the app works: how many people and phones the group has, when each person signed up and when the app was last used, how many days and how many foods are logged, AI usage and spending, purchases and app errors. From that, they also calculate overall statistics, for example how many people who start are still using the app a month later, also separately on iPhone and on Android. They do not see what you eat, your weight or any other health data, nor the progress photos, and they never use for this anything the app reads from Apple Health or Health Connect.

Coach (only if you turn it on). Each person can allow, in More → Settings → This phone, the person responsible to follow them as a coach: they can then see that person's data (what they ate, their weight, their steps and their exercise; not their supplements, their reminders, their weekly check-ins or their progress photos) and adjust their workout routine and goals. It is voluntary, it lasts until you turn it off with the same switch, and each time they look it is recorded (the last time is shown right there).

5. Who it is shared with

• Supabase stores the database and runs the app's server, in the European Union (Ireland). It also stores the recipe photos there (the cover image of a recipe brought in from a video and any photo taken with the camera or chosen from the gallery for a recipe), in a private storage space separated by group: only the people in the group can see them, through links that expire.
• Cloudflare stores the progress photos (R2), encrypted and in the European Union. They can only be reached through links that expire after 5 minutes and that our server gives to the phones with access.
• Artificial intelligence, only with each person's permission, which the app asks for before using it for the first time and which can be withdrawn in More → Settings → This phone. It is sent to OpenRouter, which passes the request on to models from Google (Gemini) and, for some decisions or if something fails, from TypeSafe, OpenAI or Alibaba (Qwen), always to providers that do not use what is sent to train their models. What is sent is what you type, dictate or photograph and what the calculation needs: the name you go by in the app, what you ate that day (to suggest your meals: what you logged in recent weeks, with its time), your goals, age, height, sex, weight, steps and exercise; to suggest a routine, your current routine and your exercise preferences (goal, level, equipment and aches), and, to sort what is on the shopping list into aisles, the name of each item; and, for the weekly check-in, your answers (energy, hunger, mood, diet, workouts and sleep), what you tell or ask Evzi, the week's figures, your goal history, your previous check-ins and the names of the foods you log most often. They use it only to give the answer; some keep it for a limited time under their own rules (for example, to detect abuse). Some of these companies are outside the European Union (United States).
• Scrape­Creators (United States), only when you share an Instagram, TikTok or YouTube video with the app to get its recipe, and with the same permission as the AI: it receives the video's link (no group data) and returns its description and what is said in it, which go to the AI above to put the recipe together, and its cover image, which comes in the same response and is saved as the recipe's photo.
• RevenueCat (United States) manages purchases: it receives the group's identifier (an internal code, not its name) and the purchase data (product, dates, store and status), plus the basic technical data it needs to validate them with the store, and notifies our server to activate the plan or the credits. On iPhone, if you come to Evzi from an Evzi ad on the App Store (Apple Ads), Apple also tells it which campaign, ad group and search you came from, without any of your data and without asking for tracking permission (Apple does not consider it tracking): we use it only to know which ads work. It does not receive any health data or anything that is logged (meals, weight, steps, exercise).
• Sentry (Functional Software, Inc., United States; data is stored in the European Union, in Frankfurt) receives the app's crash reports so we can fix them: what failed and where in the code, on which screen and which screens were visited before (without what was on them), the phone's model and operating system, the app version, and a random installation identifier. It does not receive any health data or anything you log (meals, weight, steps, exercise, photos), nor your name, group, email, or IP address. It deletes them after 30 days.
• Google and Apple, only if you sign in with your account: they check that it is you and give us the account's identifier and, if they give it as verified, its email (section 3). They know you use Evzi, under their own privacy policies; we check with their public keys that what reaches us really comes from them.
• Apple (App Store) and Google (Google Play) are the stores that charge for plans and packs with your account, under their own privacy policies. We do not see or store your payment details, nor your store name or email: we only know which plan or pack was bought and until when.
• Apple Push Notification service and Google's Firebase Cloud Messaging, only on phones with group notifications turned on, deliver the notification when someone in the group earns a gold medal or higher, or cheers you on. They receive the phone's notification code and the notification text: the name that person uses in the app and the medal, and it only says what it's for if it's about logging every day ("Streak") or the group; otherwise (weight, food, supplements, exercise or steps), just "a medal", without saying what for. Nothing else that's logged, and nothing read from Apple Health or Health Connect. Firebase is only used to deliver notifications on Android, with no statistics.
• Expo (United States) delivers the app's updates and, on phones with group notifications turned on, sends those notifications to Apple and Google with the phone's notification code and the notification text (see the item above). It receives nothing else from the group.
• The people in the community you choose: what you post and your profile, depending on who you post it for and whether your profile is open or private. Of a private profile, people who haven't been accepted only see the photo, the name and the username.
• OpenRouter (community moderation): before it's saved, the text you write in the community (your name, your bio, a post's text and comments) goes to a decision model (Jev, by TypeSafe) and photos go to Gemini, always through OpenRouter and only with providers that don't train on what they receive. Only their decision is stored, not the text.
• Expo, Apple and Google (community notifications, only if turned on): the notification of a request, an acceptance, a comment or a removal, with the name of who did it; never the content of the post.
• Cloudflare (R2, in the European Union): community photos, like progress photos.

6. Apple Health and Health Connect data

The data the app reads from Health or Health Connect is only used for the group's own tracking. Sleep, resting heart rate, heart rate variability, water, distance and energy burned may be sent, only with your permission to use the AI, as context for what you ask in "Ask"; body fat and lean mass, never. They are never used for advertising or sold, they are not stored in iCloud and they are not shared with anyone other than the AI services above, with the person's permission and only for the calculation they ask for. Access can be removed whenever you want in the phone's settings (Health → Data Access, or Health Connect). Watch workouts stop being read in More → Settings → This phone → "Workouts from your watch"; the ones already logged are deleted like any other activity.

What comes from Apple Health or Health Connect (steps, watch workouts, scale weigh-ins) only goes into a community post if you turn on “Include Health data” (“Health Connect data” on Android) in it, which is off, and only for that post.

Which data the app shares is changed in Health Connect or in Health (More → Settings → This phone → "Automatic data" takes you there). Deleting the person or the group in Evzi deletes what was saved in Evzi, but not what the app wrote to Health or Health Connect, which is yours: you delete it there (Health → your profile → Apps → Evzi; Health Connect → Data and access → Evzi).

7. How long it is kept

As long as the group exists. In More → Settings → Delete the group, everything in the group is deleted immediately and forever: people, what has been logged, progress photos, batches, recipes (with their photos), the shopping list, foods, the AI key, its credits (including unused credits from packs), the linked Google or Apple accounts (with Apple, access is revoked first) and the phones. A photo removed or replaced in a recipe is deleted in a cleanup we run periodically. For each pack bought, only the purchase identifier is kept, without any group data, so that it is not added again if purchases are restored in another group. Removing a phone (More → Settings → Group and phones) unlinks it from the group; that person's Google or Apple account stays linked (and can be used to sign back in) unless, when removing it, you tick the option to remove it too. Unlinking a Google or Apple account (More → Settings → This phone, or People) deletes it immediately (and with Apple, access is revoked). You can also ask for deletion by writing to the email address above. All the details are in Deleting a group's data. Of a deleted group or person, only when they were created remains, without any data that identifies them, and, for purchases, their price and date, for usage statistics.

A phone's notification code is deleted when notifications are turned off, when the phone is removed from the group or the group is deleted, and also when Apple or Google say it's no longer valid; cheers, with their achievement. Crash reports received by Sentry are deleted automatically after 30 days.

Purchases have a life of their own: deleting the group does not cancel a subscription (you have to cancel it in the store), and the purchase records kept by Apple, Google and RevenueCat are kept according to each one's rules, for example tax rules. If you also want them deleted from RevenueCat, write to us and we will ask them.

Each progress photo can be deleted whenever you want; if someone forgets their photo PIN, they can delete all of theirs and start again.

In the community, what you post, until you delete it or your profile. Reports, until they're resolved and one more year. A suspension, the Google or Apple account and the reason, until it ends (or forever, if it's permanent), even if you delete your profile: otherwise it could be avoided by deleting and recreating it.

Suggestion box messages, until we delete them or the person who sent them or their group is deleted.

8. Your rights

You can access your data, correct it, take it with you (More → Settings → Data → Export to spreadsheet), object to its use or delete it, from the app itself or by writing to colkard96@gmail.com. If you think they have not been respected, you can file a complaint with the Spanish Data Protection Agency (aepd.es).

In the community, “Download my posts” (in your profile settings) gives you a file with your profile, your posts, your comments and your reactions. “Delete my profile” deletes all of it (posts, comments, reactions, notifications, connections and photos); it's also deleted when you withdraw the community permission, delete the person or the group, or remove the Google or Apple account. If we remove something of yours, we tell you why and you can ask a person to review it (“I disagree”).

9. Minors

The app is not intended for children. If a child under 14 is logged in a group, it is done and managed by their parent or guardian.

10. Security

Connections are encrypted (HTTPS), each group can only see its own data, except what you post in the community, and only for the people you choose, the PIN is stored as an encrypted fingerprint, the AI key is encrypted and there is a limit on PIN attempts. The photo PIN is also stored only as an encrypted fingerprint and has its own limit on attempts. To prevent groups from being created in bulk, which phone created each group and when is also stored, without the IP address.

11. Changes

If this policy changes, the new version will be published here with its date. The conditions for purchases and the service are in the terms of use.