Privacy Policy

1. Introduction

This Privacy Policy explains how Thrivelo ("we", "us", or "our") handles information when you use the thrivelo mobile application ("the App"). It covers what data the App uses, where it is stored, and what we can and cannot access.

By using the App, you agree to the practices described in this policy.

2. Summary

thrivelo is designed to be private by default. Virtually all of your personal data, including workouts, food logs, weight entries, and profile information, is stored locally on your device. We do not collect, transmit, or store your personal health data on any servers.

The only external network requests the App makes are to the Open Food Facts API when you search for food items or scan barcodes, as described below.

3. Information We Collect

3a. Information stored locally on your device

The App stores the following data locally in a SQLite database on your device:

• Profile information — your name, date of birth, height, gender, activity level, and fitness goals (entered by you in Settings)
• Workout data — exercises, workout plans, session records, sets, reps, weights, distances, and durations
• Food and nutrition data — food logs, meal templates, saved foods, and daily totals
• Weight and body composition data — weight entries, body fat percentage, and water percentage
• App preferences — colour theme, unit preferences, language, and display settings

This data never leaves your device unless you explicitly export it or back it up via your device's standard backup mechanisms (e.g., iCloud, Google Backup). We have no access to this data.

3b. Information sent to third-party services

When you use the food search or barcode scanner features, the App sends requests to the Open Food Facts API:

• Food search — your search query (the text you type) is sent to Open Food Facts to retrieve matching products
• Barcode scanning — the barcode number scanned by your device is sent to Open Food Facts to retrieve product information

These requests are made over HTTPS. We do not attach any identifying information to these requests. Open Food Facts operates its own privacy policy, available at world.openfoodfacts.org/privacy.

3c. Crash and diagnostic data

We do not currently collect crash reports or analytics data from the App. If we add diagnostic data collection in a future version, we will update this policy and provide you with notice.

4. How We Use Your Information

Because your personal data is stored locally on your device, we do not access it. The App reads your locally stored data only to show you your history, calculate your metrics, and personalise your experience.

We do not:

• Sell your data to third parties
• Share your health or fitness data with advertisers
• Use your data for profiling or targeted advertising
• Transmit your personal data to our servers

5. No User Accounts

thrivelo does not require you to create an account. There is no login, no email registration, and no user profile on our systems. Your use of the App is entirely anonymous to us.

6. Data Storage and Security

Your data is stored in a local SQLite database on your device, protected by your device's operating system security (file system permissions, device encryption where enabled). We have no access to this database.

You are responsible for maintaining the security of your device. If you lose access to your device or reinstall the App without a backup, your data will be lost. We cannot recover it.

7. Data Deletion

To delete all your thrivelo data, uninstall the App from your device. This will permanently remove the local database and all associated data. Since we do not hold your data on our servers, there is nothing further for us to delete.

You can also delete individual entries (food logs, weight entries, workout sessions) within the App at any time.

8. Children's Privacy

The App is not directed at anyone under 16 years of age and requires users to confirm they are 16 or older during setup. We do not knowingly collect personal information from children under 16. As the App stores all data locally and does not transmit personal information to our servers, there is no mechanism by which we would receive such data.

If you are a parent or guardian and believe your child has provided personal information via the App in a way that results in data being transmitted, contact us and we will investigate.

9. Changes to This Policy

We may update this Privacy Policy as the App evolves. When we do, we will revise the "Last updated" date at the top of this page. If the changes are significant, especially if we introduce any form of remote data collection, we will provide additional notice within the App.

Continuing to use the App after changes are posted means you accept the revised policy.

10. Your Rights

Depending on where you live, you may have rights over your personal data under laws such as the UK GDPR, EU GDPR, or CCPA. Because we do not collect or process your personal data on our systems, most of these rights are exercised directly through your device.

If you have questions about your rights or want to make a request, contact us at the address below.

11. Contact

If you have questions about this Privacy Policy or how the App handles data, reach us at:

Thrivelo
contact@thrivelo.app