Privacy Policy

Short version: Your health history stays on your device. If you explicitly enable AI features, the minimum context needed for that request is securely sent through Aevo's authenticated backend to OpenAI. For Meal Scan quality review, Aevo stores a reduced meal-photo preview and the result shown to you under your anonymous Firebase ID. We never sell your data or share it with advertisers.

1. Who we are

Aevo is developed and operated by Vladimir Ciumacenco. References to "we," "us," or "our" refer to the Aevo app and its developer. You can reach us at contact@aevoai.cc.

2. Data we collect

Health data (via Apple HealthKit): With your explicit permission, Aevo reads the following from Apple Health:

Heart rate and heart rate variability (HRV)
Sleep analysis and sleep stages
Active energy burned and step count
Resting heart rate and body temperature
Workout data and activity rings

This data is read and stored locally. If you grant separate AI consent, selected current metrics may be attached to an authenticated AI Coach request; Aevo does not copy your HealthKit history into Firebase.

Meal data: Your full meal history and original meal photos stay on your device. When you choose Meal Scan, the selected photo or description is sent through Aevo's authenticated backend to OpenAI to estimate nutrients. After you grant AI consent, Aevo stores a reduced meal-photo preview (when a photo was used), the nutrient result shown to you, whether you confirmed it, and technical confidence fields. We use this private dataset only to review and improve scan accuracy.

Account and product-usage data: Aevo uses an anonymous Firebase identifier for request security, preference sync and product operations. We store your display name, selected goal and country, subscription status, app version, recent activity timestamp, scan count, app language, time zone and country-level device region. We also record privacy-safe event names such as app opened, tab viewed, onboarding completed, paywall opened, scan presented/confirmed and the category of an activity you log. These events do not contain HealthKit measurements, precise location, AI Coach message text or original meal photos. Country analytics come from your selected profile country or iOS locale settings, not GPS; Aevo does not request an email account.

AI Coach conversations: Messages you send to the AI Coach are sent to OpenAI's API along with relevant context from your profile and health data (e.g., your first name, age, weight, and metrics such as "HRV today is 62ms"). These conversations may be stored on your device for continuity but are not stored on our servers.

Your consent for AI: Meal photos and descriptions, and your profile and health metrics (age, weight, height, activity level, goal, sleep, steps, heart rate, hydration, caffeine) are sent to OpenAI (operator of the GPT-4o model) only after you grant explicit in-app consent on the "AI & Your Data" screen shown before any AI feature runs. You can withdraw this consent at any time in Settings → AI & Data Sharing, after which the app works using on-device estimates only. OpenAI acts as our processor, does not use API data to train its models, and provides data protection equivalent to that described in this policy.

Purchase data: In-app purchases are handled by Apple and RevenueCat. We receive purchase status (active/expired) but not your payment card details.

Location: If you request local weather, an approximate coordinate is sent to Open-Meteo and Apple geocoding services to return temperature and a place label. Aevo does not retain location history.

3. How we use your data

To calculate your real-time energy score
To run our 14 AI engines and generate personalized recommendations
To provide AI Coach responses relevant to your health context
To sync your display name and goal preference
To review Meal Scan examples, measure scan reliability and improve result quality
To understand aggregate country-level adoption and app-language usage without tracking precise location
To measure anonymous feature usage, activation, retention and the Meal Scan funnel so we can improve the product

We do not use your data for advertising, profiling for third parties, or selling to data brokers.

4. Data sharing

We share data only with these third-party services, each under a data processing agreement:

OpenAI — for AI Coach responses and Meal Scan. Receives meal photos/descriptions and your profile & health metrics, only after in-app consent (see Section 2). Sent over encrypted HTTPS, not retained by OpenAI beyond the request, and not used to train its models.
Firebase (Google) — for anonymous authentication, app attestation, preference sync, private Meal Scan previews/results and leaderboard data you choose to publish.
RevenueCat — for managing in-app subscription status.
Apple — HealthKit data stays within Apple's ecosystem; we access it only on-device.

5. Data storage and security

Your full app history and original protected meal photos are stored in the app's local protected container. Reduced Meal Scan previews and their displayed nutrition results are stored in Firebase under your anonymous account. We use HTTPS, short-lived Firebase authentication tokens and App Check attestation for Aevo API requests. Firebase data is encrypted at rest and in transit.

We retain the anonymous identifier, preferences, privacy-safe product events, scan previews/results and leaderboard entry until you delete your account. In-app deletion removes known Firestore collections (including scans and events), the leaderboard entry, local meal photos and the anonymous Firebase account.

6. HealthKit

Aevo's use of HealthKit data is governed by Apple's HealthKit guidelines. We:

Only access HealthKit data for health and fitness purposes directly related to the app
Never use HealthKit data for advertising or marketing purposes
Never share HealthKit data with third parties except as required to provide the service (e.g., context sent to the AI Coach, with your consent)
Never sell HealthKit data

7. Children's privacy

Aevo is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, and to withdraw consent. To exercise these rights, delete your account in-app or email us. HealthKit permissions can be revoked at any time in iOS Settings → Privacy & Security → Health → Aevo. You can turn off AI data sharing and stop new scan preview uploads at any time in the app under Settings → AI & Data Sharing. Previously stored scan previews remain until account deletion or a deletion request.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance.

10. Contact

Questions about this policy? Email contact@aevoai.cc or use our Contact Support form.