Privacy Policy
Last updated: August 11, 2026
Levelan (“Levelan,” “we,” “us,” or “our”) operates the Levelan mobile application, website, and related services (the “Services”). This Privacy Policy explains what personal information we collect, where it comes from, how we use and disclose it, how long we keep it, and the choices available to you.
Levelan provides personalized fitness and strength-training features. Some information we process—including workout, recovery, limitation, and Apple Health information—may be considered sensitive, health, fitness, or consumer health data under applicable law.
- We use account, profile, onboarding, workout, recovery, and optional Apple Health information to provide personalized training features.
- Levelan requests read-only access to Apple Health. We do not write data to Apple Health.
- Raw Apple Health samples are processed on your device and are not uploaded to Levelan's servers.
- Levelan does not store personal health information in iCloud.
- If you separately enable Coach Cloud Backup, Levelan uploads specified daily health summaries to your account. The feature is off until you choose to enable it.
- We use service providers to operate the Services, including Supabase, OpenAI, PostHog, Sentry, Google, Apple, Expo, Cloudflare, and email/support providers.
- We do not sell personal information, use health or fitness information for advertising, or share information for cross-context behavioral advertising.
- You can disable Coach Cloud Backup, revoke Apple Health permission, or delete your account.
For additional disclosures and rights concerning consumer health data, see the Consumer Health Data Privacy Policy.
1. Scope and responsibility
This Policy applies when you use the Levelan app, visit levelan.com, contact support, or otherwise interact with the Services. Levelan is responsible for the personal information described in this Policy unless another company's policy applies to a service you choose to use, such as Apple, Google, or your email provider.
2. Information we collect
Information you provide
- Account and authentication information: Email address, authentication provider, user identifier, and information returned by Apple or Google when you choose those sign-in methods.
- Profile information: Name or display name, age or age range, biological sex or gender-related profile answer, height, weight, units, preferences, and other profile details you choose to provide.
- Onboarding and training information: Goals, experience, schedule, available time, equipment, training location, exercise preferences, pain or limitation areas, movement history, and answers used to create or revise a plan.
- Workout and progression information: Plans, templates, exercises, sets, repetitions, weight, duration, rest, effort, cardio activity, completed work, modifications, personal records, and progression history.
- Recovery and check-in information: Soreness, stress, mood, sleep quality, perceived readiness, recovery preferences, check-in answers, and recommendation decisions.
- Communications: Messages and information you include when contacting support or otherwise communicating with us.
Apple Health information
Apple Health access is optional. If you authorize it, Levelan may request read-only access to:
- sleep analysis, including duration and stages;
- heart rate, resting heart rate, and heart rate variability;
- steps, active energy, and Apple exercise time;
- workouts and workout types;
- respiratory rate and blood oxygen saturation;
- body temperature and sleeping wrist temperature, when available;
- date of birth information used to derive age;
- biological sex;
- height and body mass.
Levelan uses this information for onboarding assistance, readiness and recovery calculations, activity context, progress displays, and personalized training recommendations. You may deny or revoke individual Apple Health permissions. Levelan remains usable through manual entry and check-ins when Apple Health is unavailable or denied.
Levelan requests no permission to write health or fitness data to Apple Health.
Raw samples and Coach Cloud Backup
Raw Apple Health samples remain on your device and are not uploaded to Levelan's servers.
If you explicitly enable Coach Cloud Backup, Levelan may upload account-linked daily summaries such as:
- local date and time zone;
- total sleep, sleep stages, awake time, and sleep efficiency;
- resting heart rate and heart rate variability;
- blood oxygen and respiratory-rate summaries;
- wrist-temperature deviation;
- steps and active-energy totals;
- whether a workout occurred;
- readiness score; and
- source names identifying the device or app that contributed the measurement.
Coach Cloud Backup is optional. Turning it off stops future uploads and deletes the daily health-summary rows stored by Levelan for that account. Revoking Apple Health permission is managed in Apple's Health or Settings apps and is separate from disabling Coach Cloud Backup.
Levelan does not store personal health information in iCloud.
Gym and place information
When you search for a gym, Levelan sends the search text and a temporary search-session token to Google Places through Levelan's backend. Search results may include a place name, address, type, and Google place identifier. If you choose a result, Levelan may store that selected gym information with your training profile.
Information collected automatically
- Device and app information: Device type, operating system, app version, language, time zone, app environment, and similar technical information.
- Usage and product events: App launches, feature interactions, check-in completion, recommendations shown or accepted, workout starts and completions, workout modifications, sets saved, and similar interactions.
- Analytics properties currently used: Product events may include an account or analytics identifier, dates, plan/workout/exercise identifiers, exercise names, workout counts, and derived readiness or sleep scores. These analytics are used to understand and improve the fitness service, not for advertising.
- Diagnostics: Crash reports, error details, app routes, performance measurements, release/build information, and related troubleshooting information. We take steps to remove common credentials and direct identifiers before diagnostic events are sent, but error context may still contain information associated with app use.
- Website information: IP address, browser/device information, requested pages, timestamps, and security or delivery logs created when you visit our website.
- Notifications: If you enable notifications, a push token and notification preferences.
3. How we use information
We use information to:
- create and secure accounts;
- generate, personalize, and revise workout plans;
- calculate readiness and recovery information;
- provide daily recommendations and workout features;
- store and synchronize plans, logs, progress, and optional health summaries;
- operate offline and recovery features;
- answer support and privacy requests;
- send service and security communications;
- provide notifications you request;
- monitor reliability, prevent abuse, investigate errors, and protect the Services;
- understand product usage and improve Levelan's fitness features;
- comply with law and enforce our agreements; and
- create aggregated or de-identified information that is not reasonably linkable to an individual.
We do not use Apple Health, workout, readiness, recovery, or other health or fitness information for advertising or marketing profiling.
4. AI-assisted features
Levelan uses OpenAI through Levelan-controlled backend services to assist with plan generation and related training features. Depending on the feature, information sent for this purpose may include onboarding answers, goals, schedule, experience, equipment, preferences, age or profile context, pain or limitation information, and relevant training context.
Levelan does not send raw Apple Health samples to OpenAI. AI output can be incomplete or incorrect and is validated or constrained by Levelan where practical, but you should use judgment and stop any activity that is unsafe or unsuitable for you.
Health and fitness data commitments
Levelan uses Apple Health and other health and fitness information only to provide, secure, support, and improve health and fitness features. We do not use or disclose it for advertising, marketing profiles, data brokerage, unrelated behavioral profiling, or employment, insurance, credit, or eligibility decisions.
We do not intentionally send raw Apple Health samples to OpenAI, PostHog, Sentry, advertising services, or data brokers. Service providers may process only the information needed to perform the specific service described in this Policy. We require providers handling personal information to provide the same or equal protection described in this Policy and required by applicable platform and legal rules, and we do not permit them to use Levelan health or fitness information for their own advertising or marketing.
5. How we disclose information
We disclose information only as needed for the following purposes:
| Recipient | Information | Purpose |
|---|---|---|
| Supabase | Authentication, account, profile, onboarding, plans, workout/progression data, check-ins, preferences, and optional daily health summaries | Authentication, database, backend functions, storage, and synchronization |
| OpenAI | Onboarding, profile, goals, schedule, equipment, preferences, limitations, and training context needed for the requested AI-assisted feature | Generate or revise personalized training output |
| PostHog | Analytics identifier, device/app context, product interactions, workout/exercise properties, and currently certain derived readiness or sleep scores | Product analytics and improving fitness features |
| Sentry | Pseudonymous user identifier, crash/error context, route, device/app, release, and performance data | Reliability, troubleshooting, and security |
| Sign-in information when Google login is selected; gym search text, session token, and place results for gym search | Authentication and Google Places results | |
| Apple | Sign-in information when Apple login is selected; HealthKit permissions and data managed by Apple; push-notification delivery | Authentication, optional Apple Health access, and notifications |
| Expo and notification infrastructure | Push token, app/device delivery information | Deliver notifications you request |
| Cloudflare and website infrastructure | IP address, browser/device, request, security, and delivery logs | Host, secure, and deliver the website |
| Email and support providers | Email address, message content, attachments, and support history | Receive and respond to communications |
These providers process information under their applicable agreements and policies. We seek to use providers that offer protections appropriate to the information and the service they perform.
Providers are authorized to process Levelan information only for the service they perform for us or as legally required. They are not authorized to use Levelan health or fitness information for independent advertising, marketing, or data-broker purposes.
We may also disclose information:
- when you direct or consent to the disclosure;
- to professional advisers subject to confidentiality duties;
- to comply with law, legal process, or valid government requests;
- to protect users, the public, Levelan, or the Services; or
- as part of a merger, financing, acquisition, reorganization, bankruptcy, or transfer of business assets, subject to legally required notice or choices.
We do not sell personal information or share it for cross-context behavioral advertising. We do not disclose Apple Health or other health and fitness information to data brokers, advertising networks, or marketing platforms.
6. Legal bases for EEA and UK users
If EEA or UK data-protection law applies, Levelan relies on:
- Contract: To create your account and provide the Services you request.
- Consent: For optional Apple Health access, Coach Cloud Backup, notifications, and other optional processing where consent is requested. Where required, we rely on explicit consent to process health information. You may withdraw consent, although withdrawal does not affect earlier lawful processing.
- Legitimate interests: To secure, support, troubleshoot, and improve the Services, provided those interests are not overridden by your rights and interests.
- Legal obligations: To meet applicable legal requirements and respond to lawful process.
Levelan does not use automated processing to make decisions that produce legal or similarly significant effects about you.
7. Retention and deletion
We retain account and service information while your account is active and as reasonably needed for the purposes described above. Retention depends on the type of information, sensitivity, operational need, legal requirements, security needs, and available provider controls.
You may delete your account in the app at You → Account → Delete account. The deletion process removes the authentication account and Levelan-owned account data from the active application database, including profile, plans, templates, workout and exercise logs, progression data, check-ins, decision history, preferences, and stored daily health summaries.
You may disable Coach Cloud Backup separately. Levelan then stops future health-summary uploads and deletes the stored daily health-summary rows for your account.
Some limited information may remain temporarily in encrypted backups, security logs, diagnostic systems, support records, or service-provider systems according to applicable retention schedules, legal obligations, and technical requirements. Such information is not used to recreate a deleted account. You may contact us if you need a privacy request to include information held in support or vendor systems.
Information stored only on your device may remain until you remove the app, clear its data, or use the relevant device controls. Revoking Apple Health permission does not delete information previously entered directly into Levelan or summaries previously uploaded through Coach Cloud Backup; use the corresponding Levelan controls for those records.
8. Your choices and rights
Depending on where you live, you may have the right to:
- know whether and how we process your information;
- access or receive a copy of information;
- correct inaccurate information;
- delete information;
- withdraw consent;
- restrict or object to certain processing;
- obtain portable information where applicable;
- opt out of sale, targeted advertising, profiling, or other processing where a legal right applies;
- appeal our response to a privacy request; and
- complain to an applicable privacy or data-protection authority.
To make a request, email support@levelan.com with the subject Privacy Request. We may need to verify your identity and authority before acting. Authorized agents may make requests where applicable law permits. We will not discriminate against you for exercising a privacy right.
The Levelan Support and Privacy Choices page explains how to manage Apple Health permissions, Coach Cloud Backup, notifications, account deletion, and privacy requests. This page may be used as Levelan's User Privacy Choices URL in App Store Connect.
Because Levelan does not sell personal information or share it for cross-context behavioral advertising, there is no sale or targeted-advertising opt-out needed for those practices at this time.
9. International processing
Levelan and its providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use recognized transfer mechanisms or other safeguards for international transfers.
10. Security and incidents
We use administrative, technical, and organizational measures intended to protect information, including encrypted network connections and access controls. No system is completely secure. If a security incident occurs, we will investigate and provide notices required by applicable law, including applicable consumer-health breach-notification requirements.
You are responsible for protecting your device and authentication credentials and for notifying us if you believe your account has been compromised.
11. Children
The Services are intended for adults age 18 and older. We do not knowingly permit or collect personal information from children under 18. If you believe a person under 18 has provided information to Levelan, contact us so we can investigate and delete it as appropriate.
12. Changes to this Policy
We may update this Policy as the Services, providers, or laws change. We will update the date above and provide additional notice when a change is material or when law requires it. If consent is required for a new health-data category or purpose, we will request it before beginning that processing.
13. Contact
For privacy questions or requests, contact:
Levelan
Email: support@levelan.com