Senvera — Privacy Policy

Last updated: 26 October 2026

Senvera ("Senvera", "we", "us") is a personal AI strength & nutrition coach. This policy explains what we collect, why, how long we keep it, and the rights you have. In plain terms: your data is used to run your experience — and, only as de-identified numbers that you can switch off, to make Senvera's rep measurement more accurate for everyone (see Improving rep measurement). We do not sell it, share it with data brokers, use it for advertising, or track you across other apps or companies.

What we collect

Account email — to create and sign in to your account, and for support.
Profile you enter — name, birthday, units, body stats, training preferences, and food notes you choose to provide.
Fitness data you log — workouts, sets, reps, and training history.
Apple Watch motion during your sets — if you wear the Senvera watch app while you train, it records your wrist's movement (acceleration and rotation) during each set to count reps, time how you lower and lift the weight, and measure how much your reps slow down. These recordings and the measurements derived from them are stored in your account and used for your coaching and, as described in Improving rep measurement, to tune the accuracy of those measurements. They contain no images, location, or audio.
Health & recovery data — weight, body-fat, sleep, heart-rate variability, resting heart rate, workouts and nutrition you log in other apps, and, if you record it in Apple Health, your menopause status (see Health data).
Body-scan and progress photos — images of your physique you choose to capture, and measurements derived from them (see Biometric & body-scan data).
Other photos and videos you provide — of your gym and meals, analyzed by AI to read your equipment and log food. Rep videos are converted to a few still frames for form analysis and are not stored as video.
Text you send the AI coach — meals you describe, injuries, and preferences.
Subscription status — whether you have an active Senvera Pro entitlement. Apple handles all billing; we never see your card details.
Usage data — feature and AI-generation counts, tied to your account, used for cost metering and fair-use limits.
Apple Health data, including in the background — with your permission, Senvera reads the measurements listed above when the app is open and when Apple Health tells it new readings have arrived while the app is closed (for example your sleep and heart-rate variability overnight). This exists so your plan is already updated when you open the app, rather than updating while you wait. It reads only the measurement types you granted, it never reads your location, and turning Apple Health off in Settings stops the background reading immediately.
Product analytics — pseudonymous records of how the app is used: which onboarding steps you reach, whether you connect Apple Health or add body photos, which screens and actions you use, and your app version. These are identified by a random per-install identifier and, once you create an account, a pseudonymous account identifier — never by your name or email. We use them only to understand where the product works and where people get stuck. They never include your Health measurements, your photos or anything derived from them, your injury notes, your meals, or your messages to the AI coach.
Limited technical data — crash and error reports (device type, app version, error details) to keep the app working. These contain no advertising identifiers.

Biometric & body-scan data

Some features read your physique. When you use a body scan or the movement (Live Coach) features, Senvera may capture images of your body and derive information from them — such as body proportions, posture, and, on device, pose landmarks used to count reps and check movement. Depending on where you live, some of this may be considered biometric information.

Purpose. This data is used solely to personalize your coaching — to read your physique, track progress, and give movement feedback. It is never used to identify you to anyone else.
Consent (written release). Body-scan and movement features are opt-in. We obtain your affirmative consent — a written release — before collecting or using biometric information, and you can decline or turn these features off at any time.
On-device processing. Live Coach pose detection runs on your device. No workout video is uploaded or stored — only derived, non-identifying set metrics (like rep count and tempo).
No sale, no profit. We do not sell, lease, trade, or otherwise profit from your biometric information.
No disclosure without your consent. We do not disclose biometric information except to processors that operate the app on our behalf under contract, with your separate consent, or where required by law or valid legal process (see How AI processing works).
Retention & destruction schedule. This is our publicly available policy for biometric data: we permanently destroy your biometric information when the purpose for collecting it has been satisfied, or within 3 years of your last interaction with Senvera, whichever occurs first — and sooner if you delete the data or your account. Destruction follows the timelines in Storage & retention.
Security. We store and protect biometric information using a reasonable standard of care, and in a manner at least as protective as how we handle your other sensitive information.

Health data

With your explicit permission, Senvera reads health and recovery metrics from Apple Health — such as weight, body-fat, sleep, heart-rate variability, and resting heart rate — to tailor training to your recovery. It also reads the workouts you record in other apps or on your watch (type, duration, distance, heart rate and heart-rate zones) and the calories, protein, carbohydrate and fat you log in other food apps, so your coach can count training and eating you did outside Senvera without you entering it twice. On iOS 27 and later, if you have recorded your menopause status in Apple Health, Senvera reads it so recovery and nutrition guidance can account for it; your coach does not bring it up unless you do. We request only the categories the app needs, and we do not send the names of the other apps you use to our servers. Health data is used to power your coaching and is never used for advertising and never sold, consistent with Apple's HealthKit requirements. You can revoke access at any time in iOS Settings → Privacy → Health; revoking stops future reads but does not delete data already used to build your plan (you can delete that with your account).

Improving rep measurement

Senvera estimates how close to failure a set was from how much your reps slowed down. Those estimates start from published sports-science research and get more accurate as they learn from real sets, in two ways:

For you. When a set was measured by your Apple Watch and you logged how many reps you had left, or took the set to failure, Senvera uses that set to tune the estimate for that exercise to you. Answers you gave to a question the app suggested are not used. This stays in your account, is included in your data export, and is deleted with it.
For everyone. From sets measured by your Apple Watch, Senvera adds three things to a shared pool: the exercise name, how much your reps slowed (a percentage), and how much of the set you had done (a percentage). Nothing that identifies you is added — no name, email, account or device identifier, date, weight lifted, heart rate, or anything from the camera. The pool is used only to make these estimates more accurate for all Senvera users. Because the pooled numbers cannot be linked back to you, they cannot be removed individually later; deleting your account removes everything else.
Live Coach is never used for this. Measurements from Live Coach come from on-device pose detection and are used only for your own coaching, as described in Biometric & body-scan data. They do not tune these estimates and are never pooled.
Your choice. You can turn off contributing to the shared pool at any time in Settings → Coach voice → Help improve rep measurement. Turning it off stops future contributions; your own estimates keep learning from your sets.

How AI processing works

Photos, meals, health metrics, and messages you provide are sent to our backend and processed by an AI model to generate your programming and nutrition guidance. We use service providers (including cloud hosting, an AI model provider, and Sentry, a crash-reporting processor that receives technical crash data — never your health metrics, photos, or messages) that process this content on our behalf, under contract, only to provide the service — not for their own purposes, advertising, or model training on your personal content. This is app functionality that personalizes your own experience; it is not tracking.

What we never do

No advertising, no ad identifiers, no third-party ad networks.
No selling or sharing your data with data brokers.
No cross-app or cross-company tracking.
No using your body-scan, health, or biometric data for anything other than your coaching. (The de-identified Apple Watch numbers described in Improving rep measurement are motion measurements, not body-scan, health, or biometric data, and you can switch them off.)

Storage & retention

Your data is stored in your own isolated partition on our backend (hosted on Microsoft Azure) and secured in transit and at rest.

While your account exists, we keep your profile, training history, scans, and logs so your coach can remember and adapt.
When you delete your account, we permanently delete your data partition and de-identify remaining operational records (such as anonymized diagnostics). This typically completes within 30 days, except where we must retain limited records to meet legal, tax, security, or fraud-prevention obligations.
Biometric information (body-scan images and derived measurements) is destroyed when its purpose is satisfied or within 3 years of your last interaction, whichever comes first — sooner on your request (see Biometric & body-scan data).
Rep videos are never stored — frames are analyzed and discarded.
Backups may persist for a short, rolling window and are overwritten on their normal cycle.

Your rights & choices

You can access, correct, export, or delete your data at any time from the app (Settings → Legal & Privacy) or by emailing us. Apple Health access and notifications are opt-in and can be revoked anytime.

Depending on where you live, you may have additional rights — for example, California residents (CCPA/CPRA) and residents of the EU/UK/EEA (GDPR) may request access, correction, deletion, portability, and may object to or restrict certain processing. We do not sell or "share" personal information as those terms are defined under California law. To exercise any right, contact [email protected]; we will not discriminate against you for doing so.

Many U.S. states — including California, Colorado, Virginia, Connecticut, Utah, Texas, Oregon, and Montana — treat biometric data as "sensitive" information requiring extra protection. Regardless of where you live, we ask for your opt-in consent before collecting biometric data and honor your deletion requests.

Children

Senvera is not directed to children. You must be at least 13 years old (or the age of digital consent in your country, if higher) to use it, and users under 18 need the permission of a parent or legal guardian. We do not knowingly collect data from children under that age; if you believe a child has provided us data, contact us and we will delete it.

International users

We operate from the United States, and your data is processed there. Where we transfer personal data from the EU/UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

Changes

We may update this policy. If changes are material, we'll notify you in the app or by email. The "Last updated" date above reflects the current version.

Contact

Questions, requests, or deletion: [email protected]