VimVoPrivacy policy
Last updated: 5 November 2026
1. Who we are
VimVo is made by Xelron AI ("we", "us"). We are the controller of the personal data described here, within the meaning of the EU General Data Protection Regulation (GDPR). You can reach us about anything in this policy at support@xelron.in.
2. What we collect
Your account
You sign in with Apple or Google. We receive your email address (with Apple, this can be a private relay address that hides your real one), your name if you choose to share it, and an identifier for your Apple or Google account. We never see your Apple or Google password.
Your profile
Your username and display name, and if you add them, a short bio and a link. Your settings, such as kg or lb and your weekly workout goal.
Your training
The workouts you log (title, start and end time, exercises, sets, weights, repetitions, durations, distances, effort ratings and notes), your routines, the exercises you create, and the personal records worked out from them.
Your money-back guarantee
When you sign your first 60-day plan, we keep a short record of it so the guarantee follows your account even if you reinstall VimVo or change phones: an identifier for the plan, the day it starts, its length and when you signed it. It holds none of your answers, habits or health data. If you claim the guarantee, the app sends us only the share of verified habit days you completed, and we ask for what we need to pay you back.
Your VimVo Plus subscription
Payment is handled by Apple, through the App Store: we never see your card or bank details. Apple sends us only the details of your subscription, signed so we know they're genuine: which plan you chose (yearly or monthly), when it ends or renews, whether it will renew, whether you're in the free trial or in a grace period after a failed payment, whether it was refunded, and, for the guarantee, the date, amount and currency of your first payment. We link these to your account (if you subscribe before signing in, when you sign in). We keep nothing else from Apple: not your Apple ID, your country or your device.
A subscription gives VimVo Plus to one VimVo account only: the one that bought it. If someone signs in to a different VimVo account on a phone using the same Apple ID, VimVo tells them the subscription belongs to another account, how that account signs in (Apple, Google or email) and a masked email such as s•••@example.com, so the person who paid knows which account to use. Never your name or your full email address.
Your evening nudge (VimVo Plus, only if you turn it on)
The evening nudge is a notification we send before your day ends, saying what's left of today's plan and how to finish it (for example, "2 habits left today: 2,300 steps to go, about a 20-minute walk"). It's off until you turn it on, signed in with VimVo Plus, in Settings → Reminders or when the app offers it after you sign your plan. While it's on, the app sends us:
- your iPhone's push token (an address for notifications to VimVo on that iPhone), your time zone, the time you chose and the app's language;
- today's count: how many habits are planned today and how many are done, and for each habit still left, only its type (steps, water, workout, focus, breathing, journal, a habit you're cutting down, sleep or your own) and how much is left (steps to go, millilitres of water, minutes), or nothing. Some of these amounts come from Apple Health, such as steps to go. Each day's count replaces the day before's.
Never your habits' names, which habit you're cutting down or quitting, your answers, your check-ins, your journal, your notes or any other health data. We use it only to write and send the nudge, from fixed wording, and never invent a number.
Technical information
When the app talks to our server, the server records the time, the request and your device's IP address. We use this to keep the service secure and to fix problems, and delete it after 30 days. The same applies when you visit this website.
3. What stays on your phone
If you allow it, VimVo reads these from Apple Health: steps, heart rate, resting heart rate, sleep, workouts recorded by an Apple Watch, cardio fitness (VO₂ max), date of birth and sex. VimVo uses them only on your iPhone: to show them next to your training, to estimate your daily strain and VimVo Age, to set your plan's targets, and to confirm which habits you completed (for example, that your heart rate rose during a workout you logged, or that steps were recorded by your iPhone or Watch rather than typed in).
- Apple Health data is not sent to our servers, with one exception that's yours to choose: with the evening nudge on, how much is left of today's habits, such as steps to go (see "Your evening nudge" above). Beyond that, VimVo never stores it, never uses it for advertising and never shares it with anyone.
- VimVo never writes to Apple Health.
- Your answers to VimVo's questions (including about your sleep, food, mood and any habits you want to quit or cut down), your plan and its habits, what you tick off each day, your evening check-ins and journal lines, and your breathing and focus sessions are saved only on your phone. They are used there to build and adjust your plan, and never sent to us (with the evening nudge on, only today's count described above).
- Details you type in for VimVo Age (such as your age or resting heart rate), and sleep you log by hand, are saved only on your phone.
- Reminders for your habits, check-in and weekly review, and the rest and focus timers, are scheduled on your phone. The only push notification we send is the evening nudge, if you turn it on.
- Signing out offers to remove all of this from the phone, and deleting your account removes it.
You can switch Apple Health access on or off at any time in the iPhone's Settings → Health → Data Access & Devices → VimVo.
4. What we don't do
- No advertising, and no advertising or analytics trackers in the app.
- We don't sell your data, or share it with anyone for their own marketing.
- We don't track you across other companies' apps and websites.
5. Why we use your data (legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, signing you in, saving and syncing your workouts and routines | Performing our contract with you (Art. 6(1)(b)) |
| Keeping the record of the plan that carries your money-back guarantee | Performing our contract with you (Art. 6(1)(b)) |
| Knowing whether you have VimVo Plus on all your devices, and checking your first payment for the guarantee | Performing our contract with you (Art. 6(1)(b)) |
| Security, preventing abuse, fixing problems, and keeping backups so your data isn't lost | Our legitimate interest in a safe, reliable service (Art. 6(1)(f)) |
| Reading Apple Health data on your phone | Your explicit consent, given in iOS and withdrawable at any time (Art. 6(1)(a) and 9(2)(a)) |
| Sending your evening nudge (VimVo Plus), and keeping today's count of habits for it | Your consent, given when you turn it on and withdrawn by turning it off (Art. 6(1)(a)); for the amounts that come from Apple Health, your explicit consent (Art. 9(2)(a)) |
| Answering your messages to support | Our legitimate interest in helping you (Art. 6(1)(f)) |
6. Who processes it for us, and where
We use a small number of service providers, who process data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | Paris, France (EU) |
| Google Cloud | The app's server, and encrypted nightly backups | Paris, France (EU) |
| Google (Firebase Hosting) | This website | Google's global network |
| Apple, Google | Signing in with your Apple or Google account, and Apple's App Store taking payment for VimVo Plus, under their own privacy policies | Their own services |
| Expo (650 Industries, Inc.) | Passing the evening nudge on to Apple: your iPhone's push token and the nudge's words (not today's count itself) | United States |
| Apple (Apple Push Notification service) | Delivering the evening nudge to your iPhone | Apple's own services |
Your account and training data are stored in the EU. Some of these providers are based in the United States and may access data from outside the EU, for example for support. Where that happens, the transfer is protected by the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. This includes Expo, in the United States, through which the evening nudge passes on its way to your iPhone.
7. How long we keep it
- Your account and training data: for as long as you have an account.
- The guarantee record: for as long as you have an account. If we pay out a claim, the details of that payment are kept for as long as tax law requires.
- Your VimVo Plus subscription details: linked to your account for as long as you have one. When you delete your account, we unlink them: what Apple sent about the subscription stays, but no longer points to you or to any VimVo account, so it identifies no one. We keep it so the same payment never backs a second money-back guarantee, and so the next VimVo account that uses that subscription can have VimVo Plus.
- Your evening nudge: the push token, time zone, time and language while it's on; today's count for the latest day only (each day's replaces the one before). All of it is deleted when you turn the nudge off, when you sign out, and when you delete your account, and the push token as soon as Apple says VimVo is no longer on that iPhone.
- When you delete your account (in the app: Settings → Delete account), we delete your account, all your training data, the guarantee record and your evening nudge from our database straight away and unlink your subscription details from you (see above), and the app removes what it kept on your phone. If you signed in with Apple, we also tell Apple to remove VimVo's access to your Apple account. Deleting your account doesn't cancel a VimVo Plus subscription: only you can, in your iPhone's Settings → your name → Subscriptions.
- Backups: copies older than 30 days are deleted automatically, so deleted data is gone from backups within 30 days.
- Server and website logs: 30 days.
- Support emails: as long as needed to help you, and no more than 2 years.
8. Your rights
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time. Most of this you can do in the app; for the rest, write to support@xelron.in and we'll reply within one month.
If you think we've mishandled your data, you can complain to your data protection authority. In France, that's the CNIL (cnil.fr).
9. Security
Data is encrypted in transit (HTTPS) and at rest by our providers, and access to production systems is limited to the people who run VimVo.
10. People under 18
VimVo is for people aged 18 and over. We don't knowingly collect data from anyone under 18: the app asks your age first, and if you're under 18 it stops there without keeping your answers. If we learn that an account belongs to someone under 18, we delete it. If you're under 18 and have an account, or you're the parent of someone who does, write to us at support@xelron.in and we'll delete it.
11. Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll also let you know in the app.
12. Contact
Xelron AI · support@xelron.in