DELVA Privacy Policy

Effective date: October 17, 2026 · Version: 1.0

This Privacy Policy explains how Eidovis, Inc. ("Eidovis", "we", "us") collects, uses, shares and protects information when you use the DELVA app for iPhone, including test versions we distribute through Apple's TestFlight, our crew invite web pages, and the services we provide through them (together, the "Service"). The App Store version of the app is offered only in the United States.

We also publish a separate Consumer Health Data Privacy Policy for residents of Washington, Nevada and Connecticut, and for anyone whose health data is collected in Washington. Use of the Service is also governed by our Terms of Use.

The short version

• Your camera feed is analyzed on your phone. The app uses it to count reps and read your form. The App Store version doesn't record or save video, and camera images aren't uploaded.
• After each workout, the app sends us your "movement data". It means the positions of points on your body over time, like a moving stick figure. The points include your face and hands. It's sent with your profile name. We use it to improve how the app reads exercise. Sharing is on by default. You can turn it off with the Share movement data switch in the Privacy section of Profile.
• We also collect usage and diagnostic data, including exercise measurements such as joint angles and rep events. Some of it can be connected to your account. It helps us run, fix and improve the app. The Share movement data switch doesn't turn it off, and there's currently no setting that does.
• If you join a crew, its members, and anyone with an active invite code for it, see your name. Members also see which days you trained this week.
• We don't sell your personal data or show you ads. The app doesn't track you across other companies' apps or websites.
• Our servers are in India, run by Amazon Web Services. Some of our service providers process data in the US and other countries.
• You can delete your account at any time in the app, under Profile → Delete Account. Some records, such as usage and diagnostic data, are kept afterwards (section 10). To delete only your movement data, email us (section 9).

The rest of this policy gives the details.

1. Who we are

Eidovis, Inc. is the company behind the DELVA app and is responsible for your personal information under this policy.

• Postal address: Eidovis, Inc., Sunnyvale, CA 94086
• Email: contact@eidovis.ai

2. What stays on your phone

Some processing happens on your phone. For each item below, we say what, if anything, reaches us:

• Camera images. The app reads the live camera picture on your phone to find your body position, count reps and assess form. In the App Store version, camera images are not saved or uploaded. Test versions may save a workout video on your phone, and upload it only if you choose to send it (section 3.5).
• Casting to a TV. When you cast a workout to a TV or external display, the live camera picture appears on that screen. No video or images are recorded or uploaded because you cast. Usage data about the connection is included in section 3.6. Anyone in the room can see the screen.
• Voice recordings. When you answer a question by voice, the app records your answer, turns it into text on your phone, and then deletes the recording. Only the text is sent to us (section 3.8). If the app closes before it finishes, the recording stays on your phone until the next time you open the app.
• Contacts. If you invite friends to a crew (a small training group, section 3.9) from your contacts, the app reads names and phone numbers on your phone so you can pick people. Invitations go out from your own Messages app. We don't upload or store your contacts.
• Motion sensor readings. The app uses your phone's motion sensor to measure how the phone is tilted during a workout. Raw readings stay on your phone; summaries of phone tilt are included in usage and diagnostic data (section 3.6). Your iPhone doesn't ask permission for this and has no setting for it.
• iCloud Keychain. So you can sign back in after reinstalling the app, it saves a copy of your profile in your iCloud Keychain, labelled with your email address. The copy includes your name, email, date of birth, gender, height, weight, fitness level, goals, training schedule and equipment. Apple stores it encrypted, and we can't read it there.
• Files app. The app keeps usage and diagnostic data that's waiting to be sent in a folder on your phone that you can see in the Files app. The files include your profile ID. When you delete your account in the app, it removes the entries with your profile ID from these files.

The app doesn't currently read or write your Apple Health data, access your photo library or location, or use Apple's advertising identifier.

3. Information we collect

3.1 Account information

When you sign in with Apple or Google, we receive:

• your name (Apple gives it to us only the first time you sign in);
• your email address (or a private relay address, if you choose Hide My Email with Apple);
• an identifier for your Apple or Google account.

We don't receive your Apple or Google password. If you use Google, the app also keeps your Google profile photo address and name on your phone.

3.2 Profile information

When you set up the app, and when you edit your profile later, we collect:

• the name you want the app to call you, which can be a nickname (required, to tell profiles apart and to show in crews);
• your fitness goals (required);
• your date of birth, from which we work out your age. The app asks for it to check you meet the minimum age and to choose suitable workouts. You can skip this step;
• optional answers:
  • gender;
  • height and weight;
  • fitness level;
  • how often and on which days you want to train;
  • workout length;
  • the equipment you have, including dumbbell weights.

The app doesn't ask about medical conditions or injuries.

You can also add profiles for other people in your household (section 12). Each profile holds the same kinds of information. A profile can have a display name.

3.3 Workout records

For each workout, we collect:

• the workout's name;
• start and end times, and your time zone;
• the exercises and their order;
• sets, reps, durations and rest periods;
• whether you completed the workout or stopped it early;
• the form scores and form measurements the app calculated on your phone (such as range of motion, tempo and symmetry), and the overall scores it shows you;
• calorie estimates based on your profile, with the body weight used to work them out;
• a snapshot of your goal, fitness level and equipment when you worked out;
• how a workout felt, if you tell us.

We also keep your streaks and training history.

3.4 Movement data

What it is. During a workout, the app works out where points on your body are, such as your face, shoulders, elbows, wrists, hands, hips, knees and ankles. It does this up to about 16 times per second while the camera is on during a workout, from the moment the workout starts. The points include points on your face (eyes, ears, nose and mouth).

What's in each upload. After each workout, including one you end early, the app sends us a file containing:

• the body-point positions, each with a depth value and a confidence value;
• when each set started and ended, when each rep was counted, and the form faults the app noticed;
• the ID of the profile you're using (which links to your account), a workout ID and a session ID;
• your profile name;
• the app version, your phone model and your iOS version, and technical details such as frame rate and dropped frames.

An upload can be up to about 30 MB, and it can use cellular data.

Why we collect it. We use movement data to check and improve how accurately the app counts reps and reads form. That includes testing the app against it, and using it to develop and train the software, including machine-learning models, that counts reps and reads form. Members of our team may review it for this purpose. We don't use it to train large language models. We don't use it to recognize who someone is, for example from their body shape or the way they move, and we don't sell it or use it for advertising.

Your choice. Sharing movement data is on by default. Before the first workout on a phone, the app shows a notice explaining it, and shows it again after each sign-out. The notice is shown once on a phone; it isn't shown separately to each household profile. If you choose Remind me later on the notice, sharing stays on and your movement data is still sent; the notice comes back after a few workouts. You can turn sharing off at any time with the Share movement data switch in the Privacy section of Profile. When you turn it off:

• the app stops capturing and sending movement data from then on, including for a workout in progress;
• it deletes any movement data still waiting on your phone to be sent;
• movement data already sent stays with us until it's deleted under section 8. You can ask us to delete it sooner (section 9);
• workout records (section 3.3) and usage and diagnostic data (section 3.6) are not affected.

The setting belongs to your phone, not your account. It applies to everyone who uses the app on that phone. It goes back to on if you delete and reinstall the app. If your phone can't read the saved setting, for example straight after a restart, the app treats it as on. If you restore your phone from a backup, the setting may come back as it was.

3.5 Workout video (test versions only)

The version of the app on the App Store does not record or upload workout video. Test versions we distribute through TestFlight can work differently:

Recording. A test version may record a short, low-resolution video of a workout on your phone:

• 256 × 256 pixels, with no sound;
• only for workouts planned at 12 minutes or less;
• up to 20 minutes long.

Sending. The video is sent to us only if you choose to send it, by tapping Send it at the end of the workout or by including it in an issue report. It's sent with your profile name, profile ID, phone model and iOS version.

Deleting. If you tap Not this time, the video is deleted from the app's storage straight away. Any other video that isn't sent is deleted the next time you open the app, once it's more than a day old. Some test versions also save a copy of each workout's video and movement data in the Files app (section 15).

Use. Videos you send may include your face and your surroundings. Members of our team may watch them to check and improve how the app reads form.

3.6 Usage and diagnostic data

While you use the app, it sends us information about how the app and your phone are performing and how you use the app:

• Device and app performance:
  • phone temperature state;
  • battery level and Low Power Mode;
  • processor and memory use, and memory warnings;
  • camera frame rate;
  • processing speed and dropped frames;
  • pose-detection quality.
• App activity:
  • starting, pausing and ending workouts and sets;
  • connecting to and disconnecting from a TV, and steps in the cast-to-TV flow, including your TV's brand if you choose it;
  • streak moments;
  • whether a feedback question was asked and answered (your answer itself is covered in section 3.8).
• Exercise measurements during sets:
  • rep events;
  • joint angles and other body measurements, sampled about four times per second. For some exercises these include the position of body points such as your wrists, hips, shoulders, knees and ankles, and measurements of your head position, such as how far your head is from your hands or the angle of your neck;
  • form faults the app detected, with the measurements behind them, and reps it didn't count;
  • phone tilt during the set.

The app sends this information with the ID of the profile you're using, but our servers don't keep that ID with it. They store it with:

• a device identifier derived from your phone's identifier for our apps, which changes monthly (some performance data also carries an identifier that changes every quarter, and your phone's region setting);
• an ID for each app session;
• your phone model, and your iOS and app versions;
• for some events, the ID of the workout they relate to, through which we can connect them to your account.

Our servers don't accept every kind of event the app sends, so some of it isn't kept.

Our servers also record events about your workouts, streaks and workout plan, such as when a workout is completed or a streak changes. These can include your age band, goals, how a workout felt, the muscles worked and the days you train. These are stored with a coded version of your profile ID and deleted when you delete the profile or account.

The Share movement data setting does not turn this data off.

3.7 Crash and performance reports

When the app crashes, freezes or hits an error, it sends a report to our crash-reporting provider, Sentry. It also sends performance measurements from a sample of sessions, even when nothing goes wrong. Reports include:

• technical details of the problem;
• performance measurements;
• a record of recent app activity before the error, such as network requests (we remove query strings from web addresses) and, for workouts, the workout's ID and the number of exercises;
• battery and phone-temperature state;
• device and app details;
• the ID of the profile you're using;
• a random installation identifier Sentry creates on your phone.

Reports don't include screenshots or screen recordings.

Our servers also send error reports to Sentry. These can include the content of the request that failed, such as profile details, workout data or feedback text.

3.8 Feedback and support

• Issue reports. If you report a problem during or after a workout, we collect:

  • the options you pick and any note you write;
  • the workout, exercise and set it relates to;
  • the ID of the profile you're using.

  If Send diagnostic data is on, the report also includes, for that set:

  • reps, form score, form faults and form measurements (such as range of motion and symmetry);
  • durations and rep timings;
  • camera frame rate;
  • your phone model and iOS version, and an app-session ID.

  That switch starts on when Share movement data is on. In test versions you can also attach that workout's video (section 3.5). Please don't put sensitive information in notes.

• Voice answers. The app sometimes asks a short question about the app or your workout. If you tap to answer, the app records what you say; iOS shows an orange indicator while the microphone is on. We receive the text of your answer, the question, the workout it relates to, the ID of the profile you're using and your device's language setting. We don't receive the audio.

• Support emails. If you contact support from the app, your email app opens with your app version, iOS version and phone model already filled in. We receive whatever you send us.

3.9 Crews

If you create or join a crew, we collect:

• the crew's name;
• who is in it, and how each person joined (for example by invite code or link);
• the kudos and boosts you send and receive;
• crew invitations you've opened;
• your crew's weekly activity.

Section 6 explains what other crew members can see.

3.10 Notifications, reminders and device identifiers

To deliver reminders and workout updates, the app sends us:

• your phone's push-notification token;
• an install identifier the app creates, and a second device identifier kept in your phone's keychain, which can stay the same if you reinstall the app;
• which profile is in use on the phone;
• for scheduled workouts and Live Activities (the countdown to a scheduled workout on your Lock Screen): the scheduled time, the workout title, related tokens, how early to remind you, whether you snoozed or started the workout, and whether your battery was low.

The app registers your phone for notifications even if you haven't allowed alerts. Whether alerts appear is controlled by your iPhone's notification settings.

3.11 Information our servers record

When the app, or a crew invite web page we host, connects to our servers, we record:

• your IP address;
• the time and the request made;
• your app or browser, and device type.

We use this to operate and secure the Service and to prevent abuse.

3.12 TestFlight invitations

If we invite you to test the app, we send your email address to Apple's App Store Connect, which sends the invitation. We keep a record of the invitation, including your email address, and your email address may appear in our error logs and error reports if sending it fails.

3.13 Our website

When you visit eidovis.ai, some pages load fonts from Google, so Google receives your IP address and browser details.

Some pages, including our homepage, also use Google Analytics to count visits and show us how the site is used. Google Analytics sets cookies in your browser and sends Google the pages you view, the page you came from, your browser and device details, and your IP address, from which Google works out your approximate location. You can block it with your browser's cookie settings or with Google's opt-out browser add-on. The pages that hold this policy, our Terms of Use and our Consumer Health Data Privacy Policy don't use Google Analytics.

4. How we use information

We use the information above to:

• Provide the Service: your account, workouts, rep counting and form feedback, history, streaks, crews, reminders, and casting to a TV.
• Personalize your workouts: for example, using your profile to estimate calories and, where the app offers it, to choose and schedule your workouts.
• Improve how the app reads exercise: using movement data, the videos you send, exercise measurements and workout records.
• Keep the app working well: finding and fixing bugs, crashes and performance problems, including problems with heat and battery.
• Understand how the app and our website are used and improve them: using usage and diagnostic data, workout records and website analytics, for example to see which workouts people finish and how streaks, crews and reminders are used.
• Communicate with you: answering support requests and telling you about important changes to the Service or our policies.
• Keep the Service safe: preventing fraud and abuse, enforcing our Terms of Use, and protecting our users and the Service.
• Comply with the law and respond to lawful requests.

Some of this involves people. Members of our team may review movement data, videos you send, issue reports and voice-answer text to understand and improve the app.

We do not:

• sell your personal data;
• use it for advertising or share it with data brokers;
• use it to train large language models;
• use it to make decisions that have legal or similarly significant effects on you.

The app's rep counts and form scores are calculated automatically. They shape the feedback the app gives you. Where the app plans your workouts, the reps and timed work it counts also decide whether a workout counts as completed and how hard your next workouts are. They aren't used for anything outside the Service.

If we want to use your personal data for a new purpose that isn't compatible with these, we will ask for your permission first.

5. Health and fitness information

Some of what we collect relates to your body and your exercise. Specifically:

• height and weight;
• date of birth or age, and gender;
• fitness level and goals;
• workout records and form scores;
• movement data;
• workout videos you send (section 3.5);
• exercise measurements such as joint angles and rep events;
• phone-tilt summaries from your phone's motion sensor;
• the content of issue reports and voice answers.

We use this information only for the purposes in section 4. We don't use it for advertising, marketing or data mining. We don't sell it, and we share it only as described in section 6. Your iCloud Keychain holds a copy of your profile (section 2).

6. How we share information

• Service providers. These companies process information for us:

  Provider	What they do for us	Information they receive
  Amazon Web Services	Hosting, database and file storage	Everything stored on our servers
  Sentry	Crash and error reporting	Crash and performance reports from the app (section 3.7), and error reports from our servers, which can include the content of the request that failed
  Grafana Labs	Monitoring dashboards and server logs	Usage and diagnostic data, server logs, and feedback content our team reviews
  Zoho	Email	Emails you send us, such as support and privacy requests, and our replies
  Google	Website analytics (Google Analytics)	The pages you view on our website, the page you came from, browser and device details, IP address and cookie identifiers (section 3.13)

  These providers process information on our behalf, under their standard terms. The app's coaching audio is pre-recorded, and the app doesn't send your profile, name or movement data to outside AI services.

• Apple and Google. When you sign in with Apple or Google, receive notifications, or join TestFlight, they receive what's needed to do that, and handle it under their own privacy terms. Apple receives sign-in requests, notifications and tester invitations. Google receives sign-in requests; if you use Google, the app also checks your Google sign-in when it opens and loads your Google profile photo from Google.

• Other crew members. If you join a crew, its members can see:

  • your display name (or your profile name if you haven't set one) and initials;
  • how and when you joined;
  • which days you trained this week, and how many;
  • your name on crew badges you helped earn;
  • the kudos and boosts you send.

  Your sessions and minutes also count toward the crew's weekly totals, which members can see. Notifications about kudos and boosts show your name to the person who receives them. Members' apps also receive each other's internal profile IDs. While a crew invite code is active, anyone with the app who has the code can see the crew's name and streak, and its members' names and how each joined.

• People you choose to share with. If you share something from the app, such as your score, the people and services you share it with receive it.

• Our website. Google receives your IP address and browser details when a page on our website loads its fonts, and visit data from the pages that use Google Analytics (section 3.13).

• Legal and safety reasons. We may disclose information if we believe in good faith that the law requires it, or to protect the rights, safety or property of our users, the public or Eidovis.

• Business changes. If Eidovis is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that deal. It stays subject to this policy unless you are told otherwise and given any choices the law requires.

• With your permission. We share information in other ways only if you ask us to or agree to it.

7. Where we store information

Our servers and databases are in India, in Amazon Web Services' Mumbai region. Our service providers may process information in the United States and other countries. Members of our team work in the United States and India and may access information from there. Wherever it's processed, we protect your information as this policy describes.

8. How long we keep information

We may keep information longer if the law requires it, or to resolve disputes, enforce our agreements or deal with a security issue. When we no longer need it, we delete it, or make it so it can no longer be linked to you and don't try to link it again.

9. Your choices and how to withdraw consent

You can change what you share at any time:

Withdrawing consent doesn't affect anything we did with your information before you withdrew it.

10. Deleting your account and data

How to delete. You can delete your account in the app: Profile → Delete Account. You'll be asked to confirm, and you may be asked to sign in again. You can also email us to ask for deletion. Deleting the app from your phone does not delete your account.

What gets deleted. Deleting your account deletes all of the following:

• your account;
• every profile on it, including household profiles;
• your workout records and history;
• movement data and videos you sent;
• issue reports and voice-answer text;
• crew memberships, kudos and boosts;
• your profile and workout history saved on the phone you delete from, and the copy of your profile in your iCloud Keychain.

Most of this is removed from our live systems within a few hours, and we aim to finish within 30 days. Copies in backups are overwritten as section 8 says. Movement data still waiting on your phone isn't sent after you delete your account, and is removed from your phone the next time you open the app at least a day later. When you delete your account in the app, it also removes the usage and diagnostic data waiting on your phone that carries your profile ID. Some can still reach us: data without a profile ID, such as phone-performance data, data the app was already sending, and data left waiting if the app closes before it finishes deleting.

If you deleted a profile before 11 August 2026, some of its data may not have been deleted. Email us and we'll delete it.

What we keep. We keep:

• a minimal record that the account existed and was deleted: an internal account number and profile numbers, which sign-in service you used, each profile's time zone and notification settings, and dates. It contains no name, email, workout or health information. We keep it to make sure the deleted account's sign-in sessions stay closed, and for security and legal record-keeping. We keep it for as long as we need it for those purposes.
• usage and diagnostic data, server logs, crash reports and backups, as section 8 says;
• a record of any TestFlight invitation we sent to your email address;
• your crew's weekly totals, without your name;
• crews you created, which stay for their other members with the crew name you chose, but no longer show you as their creator;
• emails you sent us;
• anything the law requires us to keep.

Deleting one profile. You can delete a single household profile without deleting the account. This deletes that profile's information as described above.

Sign in with Apple. You can also stop using your Apple Account with our app in your iPhone's Settings: tap your name, then find Sign in with Apple (where it sits depends on your iOS version).

11. Your privacy rights

Depending on where you live, you may have the right to:

• ask whether we process your personal data, and get a copy of it;
• correct inaccurate information;
• delete your information;
• withdraw consent you've given;
• get a list of the third parties we've shared your information with;
• appeal a decision we make about your request.

How to make a request. Email us at contact@eidovis.ai from the address linked to your account, or tell us which account you use. To protect you, we'll confirm your request comes from you before acting on it, usually by asking you to confirm through your account email. You can use an authorized agent; we may ask for proof that they're acting for you.

Timing. We'll respond within 45 days. If we need more time, we'll tell you why, and we may extend once by up to 45 more days.

Appeals. If we decline your request, you can appeal by replying to our decision. We'll answer your appeal in writing within 45 days. If you're not satisfied, you can contact your state's attorney general.

We won't treat you differently for exercising your rights.

Washington, Nevada and Connecticut. If you live in one of these states, or use the app in Washington, our Consumer Health Data Privacy Policy explains your rights over consumer health data.

Nevada residents. You can review and correct your profile details, such as your age, height, weight and fitness level, in Profile. To review or correct any other consumer health data, email us. If we make a material change to our Consumer Health Data Privacy Policy, we'll post the updated policy and change its date before it takes effect.

California residents. We don't sell or share personal information for cross-context behavioral advertising. We don't disclose personal information to third parties for their own direct marketing.

Do Not Track and other opt-out signals. Some browsers and devices can send a signal, such as "Do Not Track" or Global Privacy Control, asking that your activity not be tracked across other companies' apps and websites. The app doesn't track you that way, and we don't sell your personal data or use it for targeted advertising. So we handle your information the same way whether or not such a signal is sent. Our website loads fonts from Google, and some of its pages use Google Analytics, whether or not such a signal is sent.

Tracking by other companies. The app doesn't contain advertising or cross-app tracking tools. Apple and Google receive sign-in requests when you sign in with them. If you use Google, the app also checks your Google sign-in when it opens and loads your Google profile photo from Google (section 6).

12. Household profiles and shared phones

Household profiles. One account can hold up to five profiles, for example for people in your household. If you add a profile for someone else:

• you must have their permission;
• they must be 13 or older, the minimum age in our Terms of Use;
• you must tell them that their movement data is shared by default, and how to turn sharing off (section 3.4);
• you can see, change and delete their profile, and deleting the account deletes every profile on it.

Shared phones. Some settings belong to the phone rather than to an account. For example, turning Share movement data off on a phone applies to every account used on that phone, and deletes movement data still waiting to be sent for all of them.

13. Security

We use administrative, technical and physical safeguards designed to protect your information. For example:

• you have to be signed in to read or change your account's data in the app;
• movement-data files are encrypted when stored on our servers;
• we use monitoring tools to find errors and problems.

No system is completely secure, and we can't guarantee the security of your information. If a breach affects your information, we'll notify you and the authorities as the law requires.

14. Age requirement

The Service is for people aged 13 and older. We don't knowingly collect personal information from anyone under 13.

If we learn that someone under 13 has created an account or profile, we'll delete it. If you believe someone under 13 is using the Service, contact us at contact@eidovis.ai.

15. Test versions

Test versions of the app distributed through TestFlight may:

• include features that aren't in the App Store version, such as workout video (section 3.5);
• collect more detailed diagnostic information, such as measurements of how well the app detects your body position;
• send us, through Apple, crash reports and any feedback or screenshots you submit in the TestFlight app. Apple's privacy policy covers what Apple collects;
• save a copy of each workout's video and movement data, with your profile name, in a folder you can see in the Files app. The app doesn't delete these copies, and Not this time and the Share movement data switch don't remove them. You can delete them in the Files app or by deleting the app.

Information from test versions is handled under this policy.

16. Changes to this policy

We'll update this policy when our practices change, and we'll change the effective date and version at the top. If we make a material change, we'll post the updated policy and change the date before it takes effect. If we want to use information you've already given us for a new purpose that isn't compatible with section 4, we'll ask for your consent first. This section also applies to our Consumer Health Data Privacy Policy.

17. Contact us

Eidovis, Inc.
Sunnyvale, CA 94086
Email: contact@eidovis.ai