Privacy Policy

1. Information We Collect

Account information. Your email address, and a password stored only as a secure hash. If you sign up through a referral link, we record which account referred you.

Profile information you enter during onboarding. Your first and last name (optional), gender, age group, height, current weight, goal weight, fitness goal, body type, how often and how long you want to train, and the equipment you have available. Your unit preference, daily water goal, and macro targets are stored alongside these.

Activity you record in the app. Workout sessions and the sets, reps, and weights you log; food log entries; meals and recipes you create or import; meal plans and schedules; water intake; body weight history; and body measurements such as waist, chest, or body fat percentage.

Progress photos, if you choose to upload them. These are private by default and visible only to you unless you explicitly mark one as shareable.

Purchase information. Whether you have an active subscription, which store it came from, and the identifiers needed to manage it. We never see or store your card number.

Usage and diagnostic data. Pages visited, features used, and crash and error reports.

2. How We Collect It

Almost everything above is information you type into the app yourself. Usage and diagnostic data is collected automatically as you use Aventi. Purchase information comes from Apple or Stripe after you subscribe. We do not buy personal data about you from anyone, and we do not track you across other companies’ apps or websites.

3. How We Use Your Information

We use the information we collect to:

• Provide the service — storing your workouts, meals, plans, and progress, and showing them back to you
• Personalize your workout and nutrition plans
• Generate AI results when you ask for them (see section 4)
• Process subscriptions and provide premium features
• Send transactional emails (account confirmation, password resets, receipts)
• Understand which features are used, and find and fix bugs
• Respond to support requests

We do not sell your personal data, and we do not use it for advertising.

4. AI Features and OpenAI

Aventi’s AI features are powered by OpenAI, L.L.C. (United States). They only run if you have explicitly agreed in the app to share data with OpenAI. You can withdraw that permission at any time in Profile → Privacy & Sharing, and the rest of Aventi keeps working.

When you use an AI feature, we send OpenAI only what that feature needs:

• AI workout plans and recommendations — your gender, age group, fitness goal, body type, workout frequency and session length, available equipment, height and weight, and your logged exercises with their sets, reps, and weights
• AI macro recommendations — your gender, age group, height, current and goal weight, fitness goal, and workout frequency and duration
• AI food log and recipe parsing — the meal or recipe text you enter
• AI shopping lists — the ingredients of the meals in your plan

We never send your name, email address, progress photos, or body measurements to OpenAI, and we never send your data to OpenAI for any purpose other than producing the result you asked for.

Data sent through OpenAI’s API is not used to train OpenAI’s models. OpenAI may retain it briefly to monitor for abuse and then deletes it. OpenAI’s handling of this data is governed by its privacy policy and its API data usage policies.

5. Who Else Receives Your Data

We share data only with the service providers below, only for the purposes listed, and only to the extent each provider needs. Each is bound by contract to protect your data to a standard equivalent to this policy, to use it only to provide their service to us, and not to sell it.

Analytics data is sent through t.aventi.health, a proxy we operate, before reaching PostHog. We do not record your screen. We may also disclose data if required by law, or to protect the rights and safety of our users.

6. What Other Aventi Users Can See

Some features share your data with people you choose to connect with: friends’ activity feeds, challenges, and household meal schedules. You control this in Profile → Privacy & Sharing, where you can turn off sharing of workouts, weight and goals, and progress photos. Progress photos are private unless you mark one as shareable, and invite links you create can be revoked there too.

7. Data Storage, Security, and Retention

Your data is stored with Supabase on AWS infrastructure. Passwords are never stored in plain text. Row-level security ensures each account can only read its own data, and progress photos are served through short-lived signed links.

Payment information is handled entirely by Stripe or Apple and is never stored on Aventi servers.

We keep your data for as long as your account exists. When you delete your account, your data is deleted immediately, your subscription is cancelled, and progress photos are removed from storage. Stripe retains invoice records where tax law requires it.

8. Cookies

Aventi uses cookies and local storage to maintain your login session, and PostHog uses cookies/local storage to recognize you across visits for product analytics. We do not use advertising cookies or share this data with ad networks.

9. Your Rights

You can access, correct, export, or delete your data at any time. Profile settings let you edit your information and delete your account, which removes your data as described above. If you are in the EU, UK, or a similar jurisdiction, you also have the right to object to or restrict processing, and to lodge a complaint with your data protection authority.

10. Children's Privacy

Aventi is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Where a change affects how your data is shared, we will ask for your consent again in the app.

12. Contact

If you have questions about this Privacy Policy, contact us at hello@aventi.health.