Legal
Privacy Policy
The short version. Flexodus stores the data you log so the app can work. Your training, food and body data is used to give you your own results and coaching — it is never sold, never used for advertising, and never used to train AI models. Conversations with the AI coaches are kept on your phone, not on our servers. You can delete your account and everything in it at any time, from inside the app.
On this page
1. Who we are
Flexodus ("we", "us") is an AI fitness and nutrition app, based in London, United Kingdom. We are the data controller for the personal data described in this policy.
Contact: support@flexodus.app
2. What we collect
All of the below is data you give us or generate by using the app. We do not buy data about you from anyone else.
| Category | What it includes |
|---|---|
| Account | Email address, your name, and a password (stored only as a secure hash — we never see it). A unique account ID, and an @tag you choose. The @tag only tells you apart from other people with the same name; nobody can use it to find you, follow you or see your data. |
| Profile | Display name, date of birth, sex, height, current weight, target weight, BMI, fitness goal, activity level, training style, home equipment, experience level, chosen training days, any injuries you tell us about, profile photo, bio, and your unit preferences. |
| Food preferences | Dietary preference, allergies, preferred proteins, foods you like and foods you want excluded. |
| Training data | Workouts, exercises, sets, reps, weights, session duration, cardio distance and time, conditioning results, routines you build or generate, personal records, muscle group scores, streaks and estimated calories burned. |
| Nutrition data | Meals logged and their ingredients, portions and macros, water intake, saved meals and recipes. |
| Body data | Weight history. |
| Photos | Your profile picture. Meal photos you submit for analysis are sent to our AI provider to identify the food and then discarded — we do not store them. |
| Cycle tracking | If you switch it on: menstrual cycle entries, either read from Apple Health or entered by you. |
| Usage | A count of the AI credits you use each day, so we can apply the limits on your plan. Basic technical data such as your IP address at the time of connection and crash reports if the app fails. |
What we do not collect
- Payment details. Subscriptions are billed by Apple or Google. We never see or store your card number.
- Your coach conversations. Messages with the Meal Coach and Training Coach are stored on your device only. They are sent to our AI provider to generate a reply, but they are not saved on our servers.
- Advertising or tracking identifiers. Flexodus contains no advertising SDKs, no third-party analytics trackers and no cross-app tracking.
- Precise location. We do not request or store GPS location.
3. Health data
Much of what Flexodus holds — your weight, body measurements, training, nutrition, sleep and cycle data — is special category data concerning health under UK and EU data protection law. It gets extra protection, and we only process it where you have given us your explicit consent by choosing to enter it or connect it.
You can withdraw that consent at any time by deleting the relevant entries, disconnecting Apple Health in Profile settings, or deleting your account. Withdrawing consent does not affect processing that already happened.
4. Apple Health & Apple Watch
On iPhone, and only if you turn it on and grant permission, Flexodus reads:
- Workouts — type, duration, distance and the energy your Apple Watch recorded.
- Sleep — time asleep, used for the recovery rating on your body map screen.
- Menstrual flow — only if you separately enable cycle tracking.
Flexodus never writes anything to Apple Health. The connection is read-only. No workout, meal or measurement you record in Flexodus is pushed back into Health.
Imported workouts are never added silently. When Flexodus finds a workout you haven't imported, it shows you a list and you choose what to add.
Data read from Apple Health is used only to give you your own results in the app. In line with Apple's requirements, it is never used for advertising, never sold, and never shared with third parties for their own purposes. You can revoke access at any time in the iOS Health app under Sharing → Apps.
5. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Calculating your calorie and macro targets, streaks, records and body map | Explicit consent (health data) |
| Generating AI routines, meal suggestions and coaching replies | Explicit consent (health data) |
| Reading Apple Health data | Explicit consent |
| Applying the daily AI limits on your plan | Performance of a contract |
| Fixing crashes and keeping the service secure | Legitimate interests — running a working, secure app |
| Meeting our legal and tax obligations | Legal obligation |
6. How the AI features work
Flexodus uses Claude, an AI model provided by Anthropic, to write routines, analyse meal photos, interpret meals you describe in words, and answer your coaching questions.
When you use an AI feature, the following is sent to Anthropic to produce that answer:
- The relevant parts of your profile — your goal, training style, equipment, experience, bodyweight, training days, dietary preference and allergies — so the answer fits you rather than a generic user.
- The message you typed, the meal you described, or the photo you submitted.
- For training questions, your active routine and a summary of recent workouts.
- Recent messages in that conversation, so the coach follows the thread.
Your data is not used to train AI models. Anthropic processes this information only to generate the response you asked for, under a commercial agreement that prohibits using customer data for model training.
Your name, email address and account identity are not sent with these requests. AI output is an estimate and can be wrong — see our health disclaimer.
7. Who we share it with
We do not sell your data. We share it only with the service providers that make the app work:
| Provider | What they handle |
|---|---|
| Supabase | Database, login and file storage. Holds your account, your logs and your profile picture. |
| Anthropic | The AI model behind coaching, routines and meal analysis. Receives the data described in section 6. |
| Open Food Facts & USDA FoodData Central | Food and barcode lookups. They receive the barcode or search term only — never anything about you. |
| Apple & Google | App distribution, and billing for subscriptions. Their own privacy policies apply to the payment. |
| Expo | App build and update delivery, and crash reports. |
We may also disclose data if the law requires it, or to establish or defend legal claims.
8. Your profile is private
Flexodus has no social features. There is no feed, no friends list, no followers and no public profile, and nothing you log — your weight, training, meals, records, streaks, body map or cycle data — is shown to any other user.
Your @tag exists only so that two people with the same name can be told apart. It cannot be used to search for you or to see anything about you.
If we ever add a feature that shares anything with other users, we will update this policy and tell you in the app before it takes effect, and it will be something you choose to turn on.
9. How long we keep it
- While your account is open: we keep your data so the app works and your history stays intact.
- After you delete your account: your data is removed from our live systems immediately, and from encrypted backups within 30 days.
- Coach conversations: stored on your device only, cleared automatically after 7 days of inactivity, and removed entirely when you delete the app.
- Records we must keep by law — such as transaction records for tax — are retained for as long as the law requires.
10. Your rights
Under UK and EU data protection law you have the right to:
- Access a copy of the data we hold about you.
- Correct anything inaccurate — most of it you can edit directly in the app.
- Delete your data ("right to be forgotten").
- Restrict or object to how we process it.
- Portability — receive your data in a machine-readable format.
- Withdraw consent at any time, including for health data and Apple Health.
To exercise any of these, email support@flexodus.app. We will respond within one month.
If you are unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.
11. Deleting your account
You can delete your account and all its data from inside the app, in Profile settings. It is permanent: your workouts, meals, profile picture, records and streaks are removed and cannot be restored. If you'd rather we did it for you, email us and we'll handle it.
Deleting the app on its own does not delete your account, and it does not cancel a subscription — see managing your subscription.
12. Security
Data is encrypted in transit (HTTPS/TLS) and at rest. Access to your records is enforced at the database level, so one account cannot read another's data. Passwords are hashed and never visible to us. Payment details never touch our systems.
No system is perfectly secure. If a breach ever affects your personal data and poses a risk to you, we will tell you and the ICO within 72 hours as the law requires.
13. International transfers
Some of our providers process data outside the UK, including in the United States. Where that happens we rely on UK International Data Transfer Agreements, EU Standard Contractual Clauses, or an adequacy decision, so your data keeps an equivalent level of protection.
14. Children
Flexodus is not for children. You must be 16 or over to create an account, and the app will not accept a date of birth under 16. If we learn that we hold data from someone younger, we will delete it. If you believe a child has created an account, please tell us.
15. Changes to this policy
We'll update this page when the app changes. The version number and date at the top will change with it. If a change materially affects how we use your data, we'll tell you in the app before it takes effect.
16. Contact us
Privacy questions, data requests and complaints
Flexodus · London, United Kingdom