Privacy Policy

Roviqo is a fitness coaching platform operated from the United Kingdom. References to "we", "us", or "Roviqo" in this policy mean the Roviqo service and its operators. You can contact us at hello@roviqo.uk.

We collect the following categories of personal data:

• Account data — your name and email address when you register.
• Profile data — profile photo if you choose to upload one.
• Fitness data — check-in responses, workout completions, training logs, personal bests, progress photos, and messages you send through the platform.
• Health data — body weight and measurements, nutrition and food logs, sleep, recovery, heart rate and related metrics, and any injuries or health notes you record. Where you connect Apple Health, Health Connect, or a wearable, we read the metrics you permit. Some users may also record menstrual cycle information. This is health data, and we treat it as a special category requiring extra protection.
• Video and form analysis — where you use form analysis, video of your lifts is uploaded and processed to produce technique feedback.
• Payment data — billing information handled directly by Stripe. We do not store card details.
• Usage data — pages visited, features used, and device/browser information collected via Vercel Analytics and PostHog (only with your consent).

We use your data to:

• Provide and operate the Roviqo platform.
• Allow coaches to manage their clients, programs, and check-ins.
• Power the Rovi AI coach feature (see section 5).
• Process payments via Stripe.
• Send transactional notifications relevant to your account.
• Improve the platform through pseudonymous analytics (with your consent).

We do not sell your data to third parties.

We process your data under the following legal bases:

• Contract — processing necessary to provide the service you signed up for.
• Legitimate interests — platform security, fraud prevention, and improving our service.
• Consent — analytics cookies and any optional communications. You may withdraw consent at any time.

Roviqo includes an optional AI coaching feature powered by Anthropic Claude. When you interact with Rovi:

• Your messages and relevant fitness data (check-ins, program details) are sent to Anthropic's API to generate responses.
• Anthropic processes this data in accordance with their Privacy Policy. Anthropic does not use your data to train their models by default.
• You can choose not to use the Rovi AI feature at any time.

We share personal data with the following categories of recipients, who process it on our behalf or, where indicated, under their own terms:

• Hosting and infrastructure — Supabase (database, authentication, file storage and server functions; EU region) and Vercel (website hosting).
• Payments — Stripe (billing and subscriptions, PCI DSS compliant). We do not store card details.
• AI coaching — Anthropic (see section 5).
• Analytics — PostHog (product analytics, EU-hosted) and Vercel Analytics. Enabled only with your consent. Analytics events identify you by a random account identifier, never by name, email, or message content.
• Error and crash reporting — Sentry. Crash reports may include device and app details and your account identifier.
• Push notifications and app delivery — Expo, which delivers push notifications to your device and hosts our mobile app updates. Notification content may include coaching and check-in summaries.
• App distribution and sign-in — Apple (App Store and TestFlight distribution, Sign in with Apple) and Google (Sign in with Google). Where you sign in with Apple or Google, that provider confirms your identity to us and processes the sign-in under its own privacy policy.
• Wearable integrations — where you choose to connect a device, WHOOP or Oura. You authorise this yourself, and the provider handles your data under its own privacy policy and terms. You can disconnect at any time.
• Nutrition database — Open Food Facts, an open food database queried when you search for foods.
• Support and issue handling — Slack and GitHub, used internally to triage bug reports and feedback. Content you submit in a report, including screenshots, may be processed there.

We do not sell your data, and we do not share it for advertising.

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at hello@roviqo.uk.

We use the following cookies:

• Essential cookies — session tokens required for login. These cannot be disabled without breaking the service.
• Analytics cookies and similar technologies — Vercel Analytics and PostHog to understand how the platform is used. These are only enabled with your consent via the cookie banner.

We may update this policy from time to time. We will notify you of significant changes by email or via the platform. Continued use of Roviqo after changes constitutes acceptance of the updated policy.

Questions about this policy? Email us at hello@roviqo.uk.