Levl
Coming soon
Levl is a workout and nutrition tracker with an AI coach. This policy explains exactly what data we collect, why, who processes it on our behalf, and the control you have over it. We keep this policy, our App Store privacy label, and our sub-processor list in lockstep.
We use your data to run the app you signed up for: to store and display your training and nutrition, calculate your strength score, power social features you opt into, deliver notifications you enable, and generate your AI coaching insights. We do not use your data for advertising, and we never sell your personal data.
We use PostHog, hosted in the European Union, to understand how Levl is used — which screens people visit, which features they use, and where they get stuck. These events are linked to your Levl account identifier so we can measure things like whether a new user completes their first workout.
We do not send your name, email address, body measurements, workout notes, food entries, search terms, or coach conversations to our analytics provider, and we do not use this data for advertising or share it with advertisers or data brokers. We do not track you across other apps or websites.
Our legal basis is legitimate interest in improving the product. If you delete your Levl account, your analytics profile and its events are deleted along with the rest of your data.
Levl’s coach generates insights on request by sending an anonymized, aggregated summary of your recent training and nutrition context to our AI provider (Anthropic’s Claude API). Insights are produced per-request. Anthropic does not use data sent through its API to train its models, and Levl never uses your data to train any model.
Levl’s insights are general fitness guidance, not medical advice. Always consult a qualified professional before making significant changes to your training or diet.
We use a small set of trusted sub-processors to run the service. Each receives only the data needed for its purpose:
| Sub-processor | Purpose | Data | Region |
|---|---|---|---|
| Firebase (Google) | Auth, push (FCM), crash reporting | Identity, device tokens | US / global |
| PostHog | Product analytics | Account identifier, product interaction events | EU |
| Anthropic | AI coaching insights | Anonymized training + nutrition context | US |
| Open Food Facts | Food database lookups | Food queries (no PII) | EU |
| FatSecret | Food database lookups | Food queries (no PII) | US |
| AWS S3 + CloudFront | Image storage & delivery | Uploaded images | eu-north-1 |
| Railway | App & API hosting | All app data | EU |
| RevenueCat + Apple | Subscription management / IAP | Purchase status | US |
Download a complete, machine-readable JSON of your account anytime from Settings → Privacy → Export my data (GDPR Art. 15/20; CCPA right to know).
Delete from Settings → Account → Delete account. Your account is locked immediately, then enters a 30-day grace period during which you can recover it by signing back in; after that, your data is permanently purged. Content you contributed to the community (such as shared foods) is anonymized, not orphaned. See our deletion guide.
Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA), you may have rights to access, correct, port, or delete your data, and to object to certain processing. Email [email protected] to exercise any of these.
Data is encrypted in transit with TLS 1.3 and at rest with AES-256. We retain your data for as long as your account is active. When you delete your account, we purge it after the 30-day grace period, except where we’re required to retain limited records by law.
Levl is rated 17+ and is not directed to anyone under 17. You must be at least 17 to use Levl. We do not knowingly collect data from anyone under 17; if you believe someone under 17 has provided us data, contact us and we’ll remove it.
We’ll update this policy as our practices change and revise the “last updated” date above; material changes will be highlighted in-app. For any privacy question or request, email [email protected].