Privacy Policy.

Last Updated: July 9, 2026

Privacy Policy

Zivo ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your data when you use the Zivo mobile application (the "App") and the website located at https://zivofit.online (the "Website").

Please read this policy carefully. By using our App or Website, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We only collect information that is necessary to provide, maintain, and improve our services. The types of information we collect depend on how you interact with our App and Website.

A. Account Information

When you register for an account (via email/password or Google Single Sign-On) or configure your profile, we collect:

  • Identifier Data: Email address and display name.
  • Profile Metrics: Age, gender, height, weight, activity level, skin type, and daily health goals (target calories, protein, carbs, fats, and water intake).

B. Health & Fitness Data (Health Connect Integration)

Zivo integrates with Google Health Connect (on Android) to import health data. We request read-only permissions for:

  • Steps: Daily step counts.
  • Sleep Session: Sleep duration and timestamps.
  • Active Calories Burned: Active energy expenditure.

This health data is cached locally on your device in our secure local database and synced to your private Cloud Firestore collection.

Health Connect Compliance Statement: Zivo's use and transfer of information received from Google Health Connect APIs will adhere to the Google Play Developer Distribution Agreement, including the Health Apps policy. We do not sell your health data, share it with advertising platforms, or use it for marketing/tracking purposes.

C. Workout and Activity Logs

We collect fitness logs you enter manually or track via the App:

  • Workout logs: Exercise names, categories, sets, weights, repetitions, set durations, and completion status.
  • Tracker logs: Distance, active duration, and route summaries. (GPS coordinates are processed locally in-memory for real-time map displays and are NOT saved to the database or synced to our servers).

D. Scan & AI Analysis Data

  • Barcode Scans: Product barcodes queried against public databases (Open Food Facts, Open Beauty Facts, USDA FoodData Central, UPCItemDB).
  • AI Analysis Input: Text, voice logs (transcribed locally on-device), or product images uploaded for food and ingredient analysis. These are processed via secure Firebase Cloud Functions utilizing Google Gemini AI.

E. Captured Images

If you choose to use image logging or personalization features, the App accesses your device camera/gallery to upload:

  • Profile Picture and Custom UI Backgrounds.
  • Physique Photos: Body progress photos logged by you.
  • Food Photos: Images of food and ingredient labels logged by you.

F. Device Information

We collect technical indicators to optimize App performance and limits, including:

  • Operating system version and device brand/model.
  • App installation details and anonymous user tokens.

2. Device Permissions

To enable health tracking and scanner features, the App requests permissions from your operating system:

  • CAMERA: To scan product barcodes/ingredient labels and capture food or profile photos.
  • LOCATION (Fine/Coarse): Used locally in-memory to map and calculate run tracker distances. Location coordinates are never saved to our servers.
  • POST_NOTIFICATIONS & SCHEDULE_EXACT_ALARM: To send daily notifications, water logging reminders, and streaks updates.
  • RECEIVE_BOOT_COMPLETED: To reschedule local notifications after a device reboot.
  • ACTIVITY_RECOGNITION: To access Health Connect and local steps data.

3. How We Use Data

We process your information for the following purposes:

  • Core Functionality: To calculate caloric/macro allowances, compile workout history, and display progress metrics.
  • AI-Powered Insights: To generate health ratings, product warnings, ingredient decoding, and alternative recommendations using Google Gemini AI.
  • Subscription Verification: To manage premium account access and verify transaction eligibility via RevenueCat.
  • Anonymized Model Training: Logged food items (ingredients, nutrient totals, and food names) are stripped of all personal identity markers and saved to a global training database (global_food_logs) to improve Zivo's custom AI models.

4. Legal Basis for Processing

We process personal data under the following legal bases:

  • Performance of a Contract: To create your account, manage subscriptions, and deliver our core health tracking services.
  • Consent: When you explicitly grant permissions (e.g., Camera access, Location, Health Connect data, or notification alerts). You may withdraw consent at any time through device settings.
  • Legitimate Interests: To analyze anonymized food logs to train and refine our product analysis algorithms.

5. Third-Party Services

We integrate with third-party SDKs and service providers to manage payments, host databases, and run AI analyses. These services process your data in accordance with their respective privacy policies:

  • Google Firebase: Used for database storage (Firestore), file uploads (Storage), authentication (Auth), and secure backend endpoints (Cloud Functions).
  • Google Vertex AI / Gemini API: Securely processes meal descriptions and product images. Input data is handled as private business data and is not used to train public Google AI models.
  • RevenueCat: Manages subscription purchases and Google Play Billing verification.

6. Cookies and Analytics

Our Website utilizes basic analytics and security measures to manage beta waitlist sign-ups:

  • Waitlist Form: When you sign up for our waitlist, your name, email, and goals are sent directly to a secure Google Sheet using a deployed Google Apps Script Web App.
  • Cookies: We do not use advertising or tracking cookies. We only use essential cookies to maintain Website performance.

7. Data Sharing

We do not sell, lease, or rent your personal information to third parties. We only share information under the following limited conditions:

  • With Service Providers: To Firebase, Google Vertex AI, and RevenueCat to run core app features.
  • For Legal Reasons: If required to comply with a valid legal request, court order, or governmental regulation.

8. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data:

  • All data transferred between the App, Website, and Firebase servers is encrypted in transit using SSL/TLS.
  • Firestore security rules strictly restrict database reads and writes to authenticated owners (only your specific UID can access your subcollections).
  • Files in Cloud Storage are restricted by path-based rules limiting access exclusively to the owning user.

9. Data Retention (Very Important)

Zivo complies with strict data retention limits. You can directly delete your information and account inside the App or request deletion by sending us an email. Your data is retained only as long as necessary to fulfill the purposes outlined in this policy:

  • Account Data: Personal profile information, display name, settings, and credentials are stored for the lifetime of your active account.
  • Logs & Histories: Manual food logs, workout logs, hydration records, physique pictures, product scan histories, and AI analysis histories are retained until you manually delete them in the App or request account deletion.
  • Subscription & Payment Records: Purchase and payment transactions handled by RevenueCat and Google Play Billing are retained only as long as required by applicable accounting and tax laws.
  • System and Crash Logs: Transient technical logs are retained only for a limited period (no longer than 90 days).
  • Deletion Processing: Upon requesting account deletion, all personal profiles, subcollections (workouts, daily metrics, scans), and storage files (physique/food photos, profile pictures) are permanently deleted or irreversibly anonymized within 30 days of request validation.

10. Account Deletion

You have the right to request the permanent deletion of your account and all associated data at any time.

  • In-App Deletion: You can request account deletion directly in the App under the Settings tab by tapping "Delete Account". This triggers the account deletion process which cleans up your database entries, deletes stored photos, and terminates your authentication credential.
  • Email Request: If you are unable to access the App, you may request deletion by sending an email from your registered address to: support@zivofit.online

Upon verifying your identity, we will permanently purge all associated personal information, workout logs, health metrics, and photos from our servers within 30 days.

11. User Rights

Depending on your jurisdiction, you may have the following rights:

  • Access and Portability: Request a copy of the data we store.
  • Correction: Rectify inaccurate or incomplete profile metrics.
  • Deletion (Right to be Forgotten): Request that we delete your personal details.
  • Withdraw Consent: Toggle off permissions (Health Connect, Location, Camera) at the OS level to stop processing.

12. Children's Privacy

Zivo does not knowingly collect personal information from children under the age of 13. If you believe we have accidentally collected data from a child under 13, please contact us at support@zivofit.online so we can immediately delete the information.

13. International Data Transfers

Zivo is headquartered in India. Personal data collected by the App is hosted and processed in Google Firebase servers located in the United States (us-central1) and other global data centers. By using Zivo, you consent to the transfer of your information to servers outside of your home country.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When updates are published, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Zivo

Owned and Operated by Sai Kiran Bhimashpanor

Address:
Siva Sai Homes 87-88, Venkatram Nagar, Suraram, Hyderabad 500055

Phone: +91 8639473457
Email: support@zivofit.online