Last updated: 6 September 2026

This Privacy Policy explains what the ElevateU mobile app (the "App") collects, why, and who it is shared with. It covers the App only. Purchases made on the nutritionist.ae online store are covered by our store Privacy Policy.

The App is provided by Ahmed Alshehhi (Nutritionist.AE), Dubai, United Arab Emirates. Contact: aenutritionist@gmail.com.

1. What we collect

• Account: your email address, and the sign-in method you choose (email & password, Sign in with Apple, or Google).
• Profile & health metrics: weight, body-fat percentage, height, age, sex, training goal and any injuries you tell us about.
• Training data: your programs, workouts, exercises, logged sets, weights and reps.
• Nutrition data: meals and foods you log, calories and macros, custom foods and favourites.
• Check-ins & body measurements: weight, waist, chest and arm measurements you enter.
• Photos you choose to upload: progress photos, and documents you add.
• Supplements and reminders you set up.
• Subscription status: whether your subscription is active, and when it renews or expires.
• Consent records: which version of the terms you accepted, and when.

The App contains no advertising SDKs and no third-party analytics or tracking SDKs. We do not track you across other apps or websites.

2. Apple Health (optional)

Connecting Apple Health is entirely optional and the App works fully without it.

What we read. If you connect it, the App reads the following from Apple Health on your device: steps, active and resting energy, workouts and exercise time, height, weight, body-fat percentage, heart rate, resting heart rate, heart-rate variability, and sleep. This is used to personalise your calorie targets and to calculate a daily recovery-readiness score. This data is used on your device — it is not sent to our servers or to any third party, and it is never sold or used for advertising.

What we write. If you record a workout using the ElevateU app on Apple Watch, that workout — together with the heart rate and active energy measured during it — is saved to Apple Health, so the session counts towards your Activity rings. This is the only thing ElevateU writes to Health. The iPhone app itself never writes to Health.

You can disconnect Apple Health at any time in the App, or change or revoke access at any time in the iOS Health app.

3. AI features and Anthropic

Some features use AI. When you use one, the specific item you submit is sent to Anthropic (our AI provider, USA) to be processed and a result returned:

• A photo of a meal, a nutrition label, a supplement, or gym equipment, plus any free-text note you add.
• For the AI coaches: your training program, your logged metrics and the goal you type.

Your progress and body photos are never sent to the AI. Body-fat estimates from photos are calculated on your device.

Before you use an AI feature for the first time, the App shows a notice naming Anthropic. Under our commercial terms with Anthropic, your content is not used to train their models. We strip location (GPS/EXIF) metadata from photos before they are sent.

AI output is an estimate, not medical advice. See section 9.

4. Who we share data with (sub-processors)

We do not sell your personal information, and we do not share it for advertising. We use these service providers to run the App:

• Supabase — hosting, database, sign-in and file storage for your account and app data.
• Anthropic — AI analysis of the photos and notes described in section 3.
• RevenueCat — manages your subscription status. Receives your account ID and purchase status.
• Apple — processes in-app purchases. We never see or store your payment card details.

5. Why we can use your data (legal bases)

• To perform our contract with you: providing the App's core features.
• Your consent: for health data, Apple Health, and AI features. You can withdraw consent at any time by disabling the feature or deleting your account.
• Our legitimate interests: keeping the App secure and preventing abuse.

6. How long we keep it

We keep your data while your account exists. When you delete your account, your data is deleted (see section 7). Backups are overwritten on a rolling basis.

7. Your rights — including deleting everything

You have the right to access, correct, export and delete your data, and to object to or restrict processing.

• Export: in the App, go to Profile → Account & security → Download my data. You get a full copy of your data.
• Delete: in the App, go to Profile → Account & security → Delete account. This permanently deletes your account, your data and your uploaded photos. It cannot be undone.

Deleting your account does not cancel an Apple subscription — cancel that in your Apple Account settings.

You can also email us at aenutritionist@gmail.com to exercise any of these rights. If you are unhappy with our response, you may complain to your local data protection authority.

8. Security and international transfers

Data is encrypted in transit. Your sign-in token is stored in the iOS Keychain. Access to your data is restricted at the database level so that only you (and a coach you have explicitly accepted) can read it. Our providers are located outside the UAE, including in the USA and the EU, so your data is transferred and stored internationally.

9. Health disclaimer

ElevateU provides general fitness and nutrition information. It is not a medical device and does not provide medical advice, diagnosis or treatment. Always speak to a qualified professional before changing your training, diet or supplements — especially if you have a health condition or an injury.

10. Children

The App is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

11. WHOOP (optional)

Connecting WHOOP is optional. ElevateU works fully without it, and none of this applies unless you connect your own WHOOP account. WHOOP is a separate company: the data inside your WHOOP account is governed by WHOOP's privacy policy, not ours.

Before the connection starts. ElevateU first shows you what it will read from WHOOP, that it keeps copies of that information and why, how long it keeps them, and how to withdraw, and asks you to agree. If you do not agree, WHOOP's page does not open and nothing is read.

How the connection is made. You sign in on WHOOP's own page rather than inside our app, so your WHOOP password is entered only on WHOOP's site and does not reach our server. WHOOP asks you to approve access to your recovery, sleep and workout data, plus permission to keep the connection working while the app is closed. That last permission matters in a specific way: when new data is ready, WHOOP sends our server a short notification — not the data itself — and our server then asks WHOOP for it. This happens without you opening ElevateU, and we use your WHOOP user ID to match the notification to your account.

What we read. We do not ask for access to your WHOOP profile at all. Your WHOOP user ID — the number WHOOP uses to label your records — is recorded when we first receive WHOOP data for your connection: for most members that is during the connection itself, when your recovery and sleep records are first read; for a brand-new WHOOP account with no recovery or sleep history yet, it is when the first record arrives. We keep it for one purpose: matching WHOOP's notifications to your account. Until it is recorded, WHOOP's notifications about you cannot be matched to an account and are discarded. We do not receive your name, email, height, weight or date of birth from WHOOP. From recovery we read your recovery score, resting heart rate, heart-rate variability and the time of the reading. From sleep: how much sleep your body needed, your total time asleep, how often your sleep was disturbed, when it started, and whether it was a nap. From workouts: strain, average and maximum heart rate, and start and end times.

What we use it for. To write your daily Body Receipt, to calculate your readiness score, and to suggest an adjustment to your training — a lighter session when recovery is low, an extra set when it is high. It does not affect your calorie or macro targets. No advertising, no marketing profiles, no resale.

What we keep, and why. ElevateU stores copies of the WHOOP information above on its own servers: your daily Body Receipts, your workout strain records, and the WHOOP recovery figure inside your readiness history. We keep them so that your history stays available to you in the app while you use it — a past day's receipt, the strain on a past workout, your readiness over time — and so that today's receipt can be compared with your recent baseline. We keep them while your WHOOP connection is active, and in any case for no longer than 12 months from the date of each record; the table below sets that out record by record. We hold these copies on the basis of the permission you give before connecting; disconnecting withdraws that permission and deletes them, as described below.

Your consent record. When you agree, we record the consent version, the time, the purposes and data categories you were shown, the retention text you were shown, the language you read it in, and the app version. Disconnecting marks that record as withdrawn and keeps it as proof of what you agreed to; deleting your account deletes it. It is included in "Download my data".

What we store, and for how long.

What	Where	Kept for	Removed when
Access and refresh keys to your WHOOP account	Our server, in a table the app cannot read, encrypted by us before they are stored	The life of the connection; the access key itself expires every hour and is replaced	Disconnect, or account deletion (if WHOOP could not be reached at that moment, the refresh key alone is kept until the revocation succeeds or the retry period ends, up to 7 days — see "If you delete your account")
Body Receipts (one per day)	Our server, your account's area	While your WHOOP connection is active, and for at most 12 months from the receipt's date	Disconnect, account deletion, or the record reaching that maximum
Workout strain (one per session)	Our server, your account's area	While your WHOOP connection is active, and for at most 12 months from the record's date	Disconnect, account deletion, or the record reaching that maximum
The WHOOP part of your readiness scores	Our server, with your readiness history	The WHOOP recovery figure is kept while your connection is active and removed once it is older than 12 months; your own check-in answers stay with your history	Disconnect, account deletion, or the figure reaching that maximum
Connection record (your WHOOP user ID, the access you granted, connection dates)	Our server	The life of the connection; a connection that has received no WHOOP data for 180 days is closed for you, and the same removal runs	Disconnect, or account deletion
Your consent to connect WHOOP, and your withdrawal of it	Our server	Kept after you disconnect, marked withdrawn — it is the record that you agreed, and that you later withdrew	Account deletion
Latest recovery score	The app's private storage on your phone	Until your next morning check-in replaces it, and at most 7 days	Disconnect, sign-out, account deletion, or deleting the app
Copies in server logs and daily database backups	Our hosting provider	7 days	On the provider's schedule — see "What removed means"

How the connection is protected. The access and refresh keys to your WHOOP account live in a table no app session can read; only our own server functions can reach it. Before they are stored, our server encrypts them (AES-256-GCM) with a key that is not kept in the database — it lives only in our server functions' configuration, so a copy of the database, a backup or an exported dump yields ciphertext. Separately, our hosting provider encrypts stored data (AES-256) and traffic in transit (TLS), and our server talks to WHOOP over HTTPS only. To be exact about the limits: anyone able to run our server functions with their configuration could still use those keys; your Body Receipts, workout strain and readiness scores are not separately encrypted by us and rely on our access rules and the provider's at-rest encryption; and the recovery score cached on your phone sits in the app's private storage, which iOS encrypts on the device and unlocks after you first unlock your phone following a restart. That file is included in your device backups, and how those are protected depends on your backup settings.

Who can see it. We do not sell it, and we do not share it with advertisers or analytics companies. No WHOOP data is sent to an AI provider — none of it is used by any AI feature in the app. It is not shown to a coach. Beyond that, it is handled like the rest of your data described elsewhere in this policy: our hosting and infrastructure providers process it on our behalf, and it appears in server logs and encrypted backups as part of running the service. Authorised personnel may access it where needed to operate, secure or support ElevateU.

How to disconnect. Account → Health devices → WHOOP → Disconnect. This removes what we hold — your Body Receipts, your workout-strain rows, the readiness figures that came from WHOOP, the copy on your phone, and the connection record itself including our access keys — records the withdrawal of your consent, and attempts to revoke our access at WHOOP. If WHOOP cannot be reached at that moment, the removal still completes and we retry the revocation as described under "If you delete your account". Disconnecting withdraws the permission on which we kept those copies. Reconnecting does not bring any of it back, and your data inside WHOOP is untouched.

If you remove ElevateU from inside WHOOP instead. Your WHOOP settings let you remove ElevateU's access there. That ends our access at WHOOP, but it does not delete our copies by itself. We check the connection only when WHOOP next sends us a notification about new data for the connection, so we may learn of the removal late or not at all; we delete the copies when we next detect that our access has ended, and in any case once the connection has received no WHOOP data for 180 days, when it is closed and the same removal runs. To have them deleted immediately, use Disconnect in ElevateU or delete your account.

If you delete your account. Deleting your account first attempts to revoke our access at WHOOP. Whether or not WHOOP can be reached, we delete your account and WHOOP data immediately. If the revocation does not succeed, we retain only the encrypted credential needed to retry it for up to 7 days. We delete that credential as soon as revocation succeeds or when the retry period ends. If revocation still has not succeeded, the authorization may remain listed in your WHOOP account until you remove ElevateU there. Your WHOOP consent record is deleted with the account.

What "removed" means. On our live systems, immediately. For a short time, copies also exist in two other places: our hosting provider's server logs, kept for 7 days, and daily database backups, kept for 7 days. Neither is restored into everyday use, and both age out on that schedule — so once that period has passed, a removed item is gone from those copies too.

Getting a copy. "Download my data" includes your WHOOP receipts, your workout strain, your readiness records, your connection details and your consent record. It does not include our access keys to your WHOOP account. Those are active security credentials, and including them in an export could allow someone with access to the file to reach your WHOOP account.

12. Changes

We may update this policy. If we make a significant change we will tell you in the App. The date at the top shows when it was last updated.

---