Vura: AI Fitness Coach — Privacy Policy

Last updated: October 9, 2026

Vura: AI Fitness Coach (“Vura”, “we”, “us”) is published by [Your full legal name], an individual developer. This policy explains what information Vura collects, how it is used and shared, and the choices and rights you have. By using Vura you agree to this policy. If you do not agree, please do not use the app.

1. Who is responsible for your data

[Your full legal name] is the data controller for the personal information processed through Vura. You can contact us at any time at lumi@vura.fit.

2. Information we collect

Information you give us:

Account details: email address, and a password (stored only in hashed form by our authentication provider), or your Google or Apple account identifier if you sign in with them. Optionally your name and a profile photo.
Profile and goals: gender, date of birth or age, height, weight, goal weight and weekly pace, activity level, diet type, eating window and daily reset time, coaching style, reminder choices and notification settings.
Health and fitness logs: meals and the foods, calories, macro- and micronutrients in them; water; supplements; weight and body measurements; workouts, exercises, sets and custom exercises; cardio; sleep and steps you log; progress photos; cheat days and recovery plans.
Photos you choose to take or upload: profile photos, progress photos, meal photos and nutrition-label photos. Meal photos you analyse are kept in your AI food history so you can log them again; you can delete them there.

Information from connected services (only if you allow it):

Health Connect (Android) or Apple Health (iOS): steps, active calories, basal metabolic rate, weight, heart rate, exercise sessions and sleep. Vura may also write workouts, active calories and weight back to these services when you log them.

Information created by the app: daily scores (Vura Index), streaks, XP and achievements, calorie targets and their history, and estimates such as your adaptive maintenance calories.

Technical information: basic request logs (such as time, IP address and error details) kept by our servers to run and secure the service. Vura does not use advertising identifiers or third-party advertising or analytics trackers.

3. Health information

Much of what you log is health information, which the law treats as sensitive. We process it only to provide the features you use, and only with your consent, which you give by entering it or by connecting a health service. You can withdraw that consent at any time by deleting the data, disconnecting the health service in your device settings, or deleting your account.

Data from Health Connect and Apple Health is used only to provide and improve Vura’s fitness features. It is never sold, never used for advertising or marketing, and never shared with third parties except the service providers listed below that are needed to run those features.

4. How we use your information

To create and run your account and keep your data in sync across your devices.
To calculate your targets, scores, streaks, trends and progress, and to show insights and suggestions (for example from Lumi).
To analyse meals, labels, exercises and searches with AI when you use those features (see section 5).
To send the reminders and notifications you have turned on.
To provide support, keep the service secure, prevent abuse and fix problems.
To meet legal obligations.

We do not sell your personal information and do not use it for targeted advertising.

5. AI features

When you analyse a meal from text or a photo, scan a nutrition label, ask Lumi to find or create an exercise, or read a Lumi insight, the relevant text, photo or summary of your logged numbers is sent to Google’s Gemini API to produce the result. Google processes it under its own terms as our service provider. We do not send your name or email address with these requests.

AI results are estimates and can be wrong. Check them before relying on them (see our Terms of Service).

We share information only with service providers that help us run Vura, and only as needed for their part:

Supabase: account sign-in, database and photo storage.
Google: Gemini AI analysis; Google Sign-In if you use it.
Apple: Sign in with Apple and Apple Health, if you use them.
Google Health Connect, on your device, if you connect it.
Open Food Facts: only the barcode number when you scan a product.
Our email provider: your email address and a code when you verify your email or reset your password.
jsDelivr: delivers exercise demo animations, so it sees your IP address when they load. YouTube opens only when you tap a video link.
The App Store or Google Play, and our payment partner, if paid plans are offered: they process payments; we never receive your card details.

We may also disclose information if the law requires it, to protect the rights and safety of users or others, or as part of a transfer of the app to a new owner (who would remain bound by this policy).

7. Where your data is stored

Your data is stored with our service providers, who may process it in countries other than yours, including the United States and the European Union. Where the law requires it, we rely on appropriate safeguards such as the providers’ standard contractual clauses.

8. How long we keep it

We keep your information while your account is active. When you delete your account, your profile, logs and photos are deleted straight away from our live systems; copies in our providers’ backups are removed within 30 days. We may keep limited records longer where the law requires it.

9. Your choices and rights

See and correct most of your information directly in the app.
Delete individual logs and photos at any time.
Delete your account and its data: Profile → Account & Settings → Delete account.
Turn off notifications or health-data access in the app or your device settings.

Depending on where you live (for example in the EU, the UK or California) you may also have the right to request a copy of your data, to object to or restrict processing, and to complain to your data protection authority. To use any of these rights, email lumi@vura.fit. We will reply within 30 days and may need to confirm your identity first. We will not treat you differently for using them.

10. Security

Your data is sent over encrypted connections and stored with providers that use industry-standard security, and we limit access to it to what is needed to run Vura. No system is perfectly secure, so please use a strong, unique password and keep your device locked.

11. Children

Vura is not meant for children under 13, and we do not knowingly collect information from them. If the law where you live requires a higher age to agree to data processing (for example 16 in parts of the EU), you need the permission of a parent or guardian. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as Vura changes. We will change the date at the top and, for important changes, tell you in the app before they apply.

13. Contact

Questions or requests about your privacy: lumi@vura.fit.