Privacy Policy

Last updated: March 2026

1. Introduction & Data Controller

Selvo ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Selvo application and services. The data controller for the purposes of GDPR is Selvo, contactable at privacy@selvo.ai.

2. Data We Collect

We collect the following categories of data:

  • Personal data: name, email address, profile information you provide.
  • Health and fitness data: workout logs, exercise data, body measurements, RPE ratings, and training programs. This is special category data under GDPR Art. 9.
  • Payment data: billing information processed securely through Stripe. We do not store full card details on our servers.
  • Usage data: device information, app usage patterns, and analytics to improve our service.

3. Legal Basis for Processing

We process your data based on the following legal grounds under GDPR Art. 6:

  • Contract performance: to provide you with our fitness tracking services.
  • Legitimate interests: to improve our services and ensure platform security.
  • Consent: for health and fitness data processing under GDPR Art. 9(2)(a), which you provide explicitly when creating your account.

4. How We Use Your Data

Your data is used to provide and improve the Selvo platform, including workout tracking, program management, social features, AI-powered coaching recommendations, and personalized training insights. We also use data to communicate with you about your account and service updates.

5. Data Sharing & Third Parties

We share data only with trusted third parties necessary to operate our service:

  • Stripe: payment processing.
  • Cloudflare: hosting, CDN, and security.
  • Resend: transactional email delivery.

We do not sell your personal data. Publicly shared content (programs, workout summaries) is visible to other users as configured in your privacy settings.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we remove your data within 30 days, except where retention is required by law (e.g., financial records).

8. Your Rights (GDPR Chapter III)

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of the data we hold about you.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to restriction: request limitation of processing in certain circumstances.
  • Right to object: object to processing based on legitimate interests.
  • Right to withdraw consent: withdraw consent for health data processing at any time.

To exercise any of these rights, contact us at privacy@selvo.ai. We will respond within 30 days.

9. Account Deletion

You can delete your account at any time through the app settings. Account deletion will permanently remove your personal data, workout history, and programs. This action cannot be undone.

10. Children's Privacy

Selvo is not intended for users under 16 years of age. We do not knowingly collect data from children. If we learn that we have collected data from a child under 16, we will take steps to delete it promptly.

11. Cookies & Tracking

The Selvo web application uses essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising trackers. Analytics data is collected in aggregate and anonymized form.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.

13. Contact / DPO

For privacy-related questions or to exercise your data rights, contact our Data Protection team at privacy@selvo.ai. You also have the right to lodge a complaint with your local data protection authority.