Levelan

Privacy Policy

Last updated: August 11, 2026

Levelan (“Levelan,” “we,” “us,” or “our”) operates the Levelan mobile application, website, and related services (the “Services”). This Privacy Policy explains what personal information we collect, where it comes from, how we use and disclose it, how long we keep it, and the choices available to you.

Levelan provides personalized fitness and strength-training features. Some information we process—including workout, recovery, limitation, and Apple Health information—may be considered sensitive, health, fitness, or consumer health data under applicable law.

Summary

For additional disclosures and rights concerning consumer health data, see the Consumer Health Data Privacy Policy.

1. Scope and responsibility

This Policy applies when you use the Levelan app, visit levelan.com, contact support, or otherwise interact with the Services. Levelan is responsible for the personal information described in this Policy unless another company's policy applies to a service you choose to use, such as Apple, Google, or your email provider.

2. Information we collect

Information you provide

Apple Health information

Apple Health access is optional. If you authorize it, Levelan may request read-only access to:

Levelan uses this information for onboarding assistance, readiness and recovery calculations, activity context, progress displays, and personalized training recommendations. You may deny or revoke individual Apple Health permissions. Levelan remains usable through manual entry and check-ins when Apple Health is unavailable or denied.

Levelan requests no permission to write health or fitness data to Apple Health.

Raw samples and Coach Cloud Backup

Raw Apple Health samples remain on your device and are not uploaded to Levelan's servers.

If you explicitly enable Coach Cloud Backup, Levelan may upload account-linked daily summaries such as:

Coach Cloud Backup is optional. Turning it off stops future uploads and deletes the daily health-summary rows stored by Levelan for that account. Revoking Apple Health permission is managed in Apple's Health or Settings apps and is separate from disabling Coach Cloud Backup.

Levelan does not store personal health information in iCloud.

Gym and place information

When you search for a gym, Levelan sends the search text and a temporary search-session token to Google Places through Levelan's backend. Search results may include a place name, address, type, and Google place identifier. If you choose a result, Levelan may store that selected gym information with your training profile.

Information collected automatically

3. How we use information

We use information to:

We do not use Apple Health, workout, readiness, recovery, or other health or fitness information for advertising or marketing profiling.

4. AI-assisted features

Levelan uses OpenAI through Levelan-controlled backend services to assist with plan generation and related training features. Depending on the feature, information sent for this purpose may include onboarding answers, goals, schedule, experience, equipment, preferences, age or profile context, pain or limitation information, and relevant training context.

Levelan does not send raw Apple Health samples to OpenAI. AI output can be incomplete or incorrect and is validated or constrained by Levelan where practical, but you should use judgment and stop any activity that is unsafe or unsuitable for you.

Health and fitness data commitments

Levelan uses Apple Health and other health and fitness information only to provide, secure, support, and improve health and fitness features. We do not use or disclose it for advertising, marketing profiles, data brokerage, unrelated behavioral profiling, or employment, insurance, credit, or eligibility decisions.

We do not intentionally send raw Apple Health samples to OpenAI, PostHog, Sentry, advertising services, or data brokers. Service providers may process only the information needed to perform the specific service described in this Policy. We require providers handling personal information to provide the same or equal protection described in this Policy and required by applicable platform and legal rules, and we do not permit them to use Levelan health or fitness information for their own advertising or marketing.

5. How we disclose information

We disclose information only as needed for the following purposes:

RecipientInformationPurpose
Supabase Authentication, account, profile, onboarding, plans, workout/progression data, check-ins, preferences, and optional daily health summaries Authentication, database, backend functions, storage, and synchronization
OpenAI Onboarding, profile, goals, schedule, equipment, preferences, limitations, and training context needed for the requested AI-assisted feature Generate or revise personalized training output
PostHog Analytics identifier, device/app context, product interactions, workout/exercise properties, and currently certain derived readiness or sleep scores Product analytics and improving fitness features
Sentry Pseudonymous user identifier, crash/error context, route, device/app, release, and performance data Reliability, troubleshooting, and security
Google Sign-in information when Google login is selected; gym search text, session token, and place results for gym search Authentication and Google Places results
Apple Sign-in information when Apple login is selected; HealthKit permissions and data managed by Apple; push-notification delivery Authentication, optional Apple Health access, and notifications
Expo and notification infrastructure Push token, app/device delivery information Deliver notifications you request
Cloudflare and website infrastructure IP address, browser/device, request, security, and delivery logs Host, secure, and deliver the website
Email and support providers Email address, message content, attachments, and support history Receive and respond to communications

These providers process information under their applicable agreements and policies. We seek to use providers that offer protections appropriate to the information and the service they perform.

Providers are authorized to process Levelan information only for the service they perform for us or as legally required. They are not authorized to use Levelan health or fitness information for independent advertising, marketing, or data-broker purposes.

We may also disclose information:

We do not sell personal information or share it for cross-context behavioral advertising. We do not disclose Apple Health or other health and fitness information to data brokers, advertising networks, or marketing platforms.

If EEA or UK data-protection law applies, Levelan relies on:

Levelan does not use automated processing to make decisions that produce legal or similarly significant effects about you.

7. Retention and deletion

We retain account and service information while your account is active and as reasonably needed for the purposes described above. Retention depends on the type of information, sensitivity, operational need, legal requirements, security needs, and available provider controls.

You may delete your account in the app at You → Account → Delete account. The deletion process removes the authentication account and Levelan-owned account data from the active application database, including profile, plans, templates, workout and exercise logs, progression data, check-ins, decision history, preferences, and stored daily health summaries.

You may disable Coach Cloud Backup separately. Levelan then stops future health-summary uploads and deletes the stored daily health-summary rows for your account.

Some limited information may remain temporarily in encrypted backups, security logs, diagnostic systems, support records, or service-provider systems according to applicable retention schedules, legal obligations, and technical requirements. Such information is not used to recreate a deleted account. You may contact us if you need a privacy request to include information held in support or vendor systems.

Information stored only on your device may remain until you remove the app, clear its data, or use the relevant device controls. Revoking Apple Health permission does not delete information previously entered directly into Levelan or summaries previously uploaded through Coach Cloud Backup; use the corresponding Levelan controls for those records.

8. Your choices and rights

Depending on where you live, you may have the right to:

To make a request, email support@levelan.com with the subject Privacy Request. We may need to verify your identity and authority before acting. Authorized agents may make requests where applicable law permits. We will not discriminate against you for exercising a privacy right.

The Levelan Support and Privacy Choices page explains how to manage Apple Health permissions, Coach Cloud Backup, notifications, account deletion, and privacy requests. This page may be used as Levelan's User Privacy Choices URL in App Store Connect.

Because Levelan does not sell personal information or share it for cross-context behavioral advertising, there is no sale or targeted-advertising opt-out needed for those practices at this time.

9. International processing

Levelan and its providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use recognized transfer mechanisms or other safeguards for international transfers.

10. Security and incidents

We use administrative, technical, and organizational measures intended to protect information, including encrypted network connections and access controls. No system is completely secure. If a security incident occurs, we will investigate and provide notices required by applicable law, including applicable consumer-health breach-notification requirements.

You are responsible for protecting your device and authentication credentials and for notifying us if you believe your account has been compromised.

11. Children

The Services are intended for adults age 18 and older. We do not knowingly permit or collect personal information from children under 18. If you believe a person under 18 has provided information to Levelan, contact us so we can investigate and delete it as appropriate.

12. Changes to this Policy

We may update this Policy as the Services, providers, or laws change. We will update the date above and provide additional notice when a change is material or when law requires it. If consent is required for a new health-data category or purpose, we will request it before beginning that processing.

13. Contact

For privacy questions or requests, contact:

Levelan
Email: support@levelan.com