Privacy Policy

Plain-language summary

• We collect what Blevo needs to run challenges and coaching: your profile, the activity and health data you allow from Apple Health or Health Connect, and what you post.
• Blevo reads the Apple Health and Health Connect data you allow. It writes to them only if you turn on Save to Apple Health or Save to Health Connect (the meals, water and weigh-ins you log). Health data is never sold or used for advertising.
• Some features send data to AI providers (for coaching and meal estimates). If you connect Blevo to an AI assistant — ChatGPT, Claude, Gemini or another — it receives the data you approve, and you can disconnect it at any time. We name every provider below.
• You control what’s public: your profile, Passport and leaderboard presence each have privacy settings.
• Delete your account any time: You›Settings (gear, top right)›Danger zone›Delete account. It’s permanent after 7 days.

1. Who we are

Blevo is operated by Blevo, which is responsible for your personal data under this policy. Contact us about privacy at contact@blevo.app. This policy covers the Blevo apps for iPhone and Android, this website (including share pages such as invite links) and the Blevo connector for AI assistants.

2. What we collect

You give us

• Account — when you sign in with Apple or Google we receive an account identifier and, if you share it, your email address and name. You choose a handle.
• Profile — display name, photo, bio, city and country, and anything optional you add: birthday, gender, height, weight and target weight, fitness level, goals, favourite activities, units, coaching style and social links.
• What you post and send — posts, comments, reactions, photos, messages, voice notes, crew and challenge chat, polls, and reports you file.
• Meals and plans — meals you log, water, weigh-ins you enter, foods, recipes and meals you save, favourites, your nutrition goal and plan, and Life Moments you describe (for example “wedding on 12 December”). Photos of meals, leftovers or menus that you ask Blevo to analyse are sent for analysis and not stored — only the resulting estimates are saved, once you log them.
• Support — what you tell us when you email us.

From your phone, with your permission

• Activity and health data from Apple Health or Health Connect — see the next section for the exact list.
• Location — while you record a workout, to draw its route; and places attached to workouts to build your Passport (cities and countries). Blevo asks for location “while using the app”. Weather for your area is looked up using approximate coordinates.
• Camera and photos — only when you take or choose a photo (avatar, post, meal, leftovers, a menu) or scan a barcode. On iPhones with a LiDAR sensor, Measure portion also uses the depth camera; the depth image stays on your phone and only the measured food volumes are sent with the photo. Microphone and speech recognition — only when you record a voice note or dictate to the coach.
• Notifications — if you allow them, a push token from Apple (APNs) or Google (Firebase Cloud Messaging) so we can send you notifications.

Automatically

• Device and usage — app version, device model, OS, time zone, IP address, sign-in sessions, and request logs used for security, anti-cheat and debugging.
• Analytics and crash reports — when enabled, product events (such as “joined a challenge”) are sent to PostHog and crash and error reports to Sentry, tied to a pseudonymous account ID. There is currently no in-app switch for analytics; email us if you want it limited for your account.
• Game data — challenges, results, coins earned and spent, streaks, levels, crews and friends.

We don’t access your contacts, and we don’t buy data about you from anyone.

3. Apple Health & Health Connect

Blevo asks to read the types below. You choose which to allow and can change that at any time in the Health app (iPhone) or Health Connect (Android).

Writing is optional and off by default. Only if you turn on Save to Apple Health or Save to Health Connect in Nutrition settings does Blevo ask for write access, and then it writes only what you log in Blevo: meals (calories, protein, carbohydrates, fat, fiber, sugar and sodium), water, and weigh-ins. Deleting one of these in Blevo deletes the copy it wrote. Turn the setting off, or remove the permission in Health or Health Connect, to stop.

What we store on our servers: step totals (in hourly buckets), workouts with their routes, sleep sessions and stages, daily health measures (such as resting heart rate, heart-rate variability, VO₂ max, floors and exercise minutes) and individual readings with their source device (including weigh-ins, whether synced or entered in Blevo), plus the body measurements in your profile.

We use this data only to provide Blevo’s features — challenges, leaderboards, anti-cheat, coaching, insights, your Passport — and never for advertising, never to sell, and never to share with data brokers. Data obtained through Apple HealthKit and Health Connect is handled in line with Apple’s and Google’s rules for that data.

4. How we use it

• To run Blevo — your account, challenges, leaderboards, coins, crews, messaging, Passport and notifications (performance of our contract with you).
• To keep it fair and safe — anti-cheat checks on activity data, fraud prevention, moderation of text and images, and enforcing the Terms (our legitimate interests, and legal obligations).
• Coaching and insights — briefings, recovery and readiness, plans and Life Moments, including with AI (performance of contract; for health data, your explicit consent given through the health permissions).
• To improve Blevo — aggregated usage and crash analysis (legitimate interests).
• To talk to you — service messages and the notifications you’ve allowed.

We don’t sell personal data and we don’t use it for targeted advertising.

5. AI features

Some features send the relevant part of your data to an AI model provider, which processes it on our behalf to produce a response and is not permitted to use it for its own purposes:

• Coach, agent, briefings, captions and Passport summaries — text built from your activity, goals and messages to the coach, sent to DeepSeek, or to OpenRouter (which routes the request to the model we select) when we configure it.
• Meal logging — meals you describe in words are parsed by DeepSeek, or by OpenRouter when we configure it. Photos you choose to analyse — a meal, what’s left on your plate, or a restaurant menu — and any note you add are sent to a vision model through OpenRouter (which routes the request to the model we select, currently Anthropic’s Claude), or to an OpenAI-compatible vision provider when we configure one. With Measure portion, the food volumes measured on your iPhone go with the photo. Blevo doesn’t keep the photos.
• Calories, goals and the coach tips on the Nutrition screen are worked out by Blevo’s own rules from your logs, body measurements and activity — not by an AI model.

If no AI provider is available, Blevo falls back to built-in rules. AI output can be wrong and is not medical advice.

6. AI assistant connector

You can connect your Blevo account to AI assistants and agents that support the Model Context Protocol (see the connector page). That includes chat assistants such as ChatGPT (including its always-on agents), Claude, Grok, Meta AI, Gemini, Perplexity and Mistral’s assistant; business agents built in Microsoft Copilot Studio; code editors; and developer tools or model APIs you set up yourself with a personal access token. Nothing is shared until you connect one.

• What an assistant can read — only your own data, and only the permissions you approve when connecting, each shown separately: profile basics (name, level, streak, daily step target), daily activity (steps, distance, active minutes), workouts, health metrics (sleep, resting heart rate, heart-rate variability, VO2max), challenges, coins and rewards, meals you logged, coaching metrics Blevo computes, and goals. It can’t see other people’s private data, your messages or your exact routes.
• Health data — much of this is health-related data: activity and workouts, measures derived from your heart rate and sleep (such as recovery and readiness) and nutrition. It is shared only with the assistant you connect, only within the permissions you approve, and only when that assistant asks for it. We share it because you ask us to — your explicit consent, given when you approve the connection — and you withdraw that consent by disconnecting.
• Only what’s needed — each connector response is built to answer that one request: summaries and the figures the question needs, not your raw health readings, identifiers or history it doesn’t need. We don’t sell connector data or use it for advertising.
• Background and always-on agents — some assistants run agents that work without you in the conversation (for example a scheduled weekly summary, or an always-on agent). If you connect one, it can read the data you approved from time to time on its own schedule, until you disconnect it. We limit how often any connection can call Blevo.
• Changes — a connection is read-only by default. Only if you also grant write permission can it set a goal or your daily step target, join a free challenge or log a meal — and Blevo requires your confirmation for each one: the assistant must show you what will change, and nothing happens until you say yes. It can never spend coins, join coin-entry challenges, message anyone or delete anything.
• Activity log and permissions — Blevo records each request a connection makes (which action, when, and whether it worked — never the data returned, and never your tokens) and keeps that log for 90 days, so you can review a connection’s recent activity in You›Settings›AI›Connect AI assistants›Connected apps. There you can also remove individual permissions from a connection at any time.
• Personal access tokens — for developer tools and model APIs you can create a token in You›Settings›AI›Connect AI assistants›Access tokens. A token lets whoever holds it use the permissions you gave it, so keep it private, like a password. You can revoke it there at any time and it stops working immediately.
• After data reaches the assistant — what the assistant receives is then handled by its provider under that provider’s own terms and privacy policy, including whether it is kept in your chat history or used to improve their models. Check those settings with the provider; we don’t control them.
• Disconnecting — remove Blevo in your assistant’s settings, or in the app: You›Settings›AI›Connect AI assistants›Connected apps lists every connected assistant with a Disconnect button, which ends that connection immediately. Codes for connecting live in You›Settings›AI›Connect AI assistants. Sign-in tokens from a connection expire after an hour and unused connections lapse after 30 days. You can also email contact@blevo.app to have every connection revoked, and deleting your account revokes them all.

7. What other people can see

• Everyone can see your handle, display name and photo where you take part in public features — public challenge leaderboards, public crews and the Arena — unless you turn off appearing on leaderboards or make your profile private.
• Share pages on this website show a first name (or @handle) and summary details when you share a link: an invite shows who invited; a crew or challenge link shows its name and headline details (never the name of a private crew or private challenge); a ghost link shows the run’s distance, time and pace (never the route); a Passport link shows your first name, level and headline stats — only if your Passport is public. Links stop working if your account is suspended or scheduled for deletion.
• Your Passport can be public, friends-only or private, section by section. Profile settings let you hide your city and age, turn off messages, followers and challenge invites, and hide your online status.
• Posts and messages are visible to the audience you share them with (followers, a crew, a challenge room or a direct message).

8. Service providers

We use these providers to run Blevo. Each processes data only on our instructions:

We may also disclose data if the law requires it, to protect people’s safety, or as part of a merger or acquisition (with notice to you).

9. How long we keep data

• Account data, health and activity data and content are kept while your account exists. You can delete individual posts and messages at any time.
• When you delete your account, it is scheduled for deletion and permanently removed after 7 days (a little later if you’re in a challenge that hasn’t settled yet). Signing in during those 7 days cancels it.
• The coin ledger (and any purchase records) is moved to an anonymised tombstone record that is no longer linked to you, so other players’ pots stay correct and receipts can’t be reused. Records we must keep for tax, fraud or legal reasons are kept only as long as required.
• Database backups roll over automatically: continuous backups are kept for 7 days and nightly snapshots for 14 days, after which deleted data is gone from them too.
• Server request logs and security records are kept for a limited period, then deleted or anonymised.

Step-by-step instructions are on the Delete account page.

10. Your choices and rights

• Health permissions — change them any time in Apple Health or Health Connect; Blevo stops receiving new data immediately.
• Location, camera, microphone, notifications — controlled in your phone’s settings.
• Access and portability — on iPhone, Settings › Export my data downloads a copy of your data; on any device you can ask us by email.
• Correction — edit your profile in the app, or ask us.
• Deletion — You›Settings (gear, top right)›Danger zone›Delete account, or email contact@blevo.app from your account’s email address.
• Objection, restriction and withdrawing consent — where the law gives you these rights (for example in the EU, UK, India or California), email us. Withdrawing consent doesn’t affect processing that already happened.

We’ll answer within 30 days. You can also complain to your local data-protection authority.

11. Children

Blevo is not for children. You must be at least 13 years old, or 16 in the European Economic Area and the United Kingdom (as the Terms say), or older where local law requires. We don’t knowingly collect data from younger children; if you believe a child has an account, email contact@blevo.app and we’ll delete it.

12. Security and international transfers

Data is encrypted in transit (HTTPS) and stored with access controls; sign-in tokens are short-lived, refresh tokens are stored hashed, and admin access requires two-factor authentication. No system is perfectly secure, so please tell us at contact@blevo.app if you find a problem.

Our servers are in India (AWS ap-south-1), and some providers above process data in other countries, including the United States and China (DeepSeek). Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

13. Changes and contact

We’ll update this policy when Blevo changes and post the new date at the top; for material changes we’ll also tell you in the app before they apply. Questions or requests: contact@blevo.app.