Privacy Policy

    Last Updated: November 1, 2025

    At Veyr Limited ("we," "us," or "our"), we're committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your personal data when you use the Veyr mobile application ("App"), available on the Apple App Store and Google Play Store. The App is designed for users in the United Kingdom and the United States. If you have questions, reach out to us using the contact details below.

    Who We Are

    We are Veyr Limited, the creators of the Veyr app, which helps you generate and log tailored workouts and connect with a fitness community.

    We're the "data controller" under UK law, meaning we're responsible for your personal data.

    Contact us at:
    Email: jointhemovement@veyr.fit
    Address: 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom

    What Data We Collect

    • Account Data: Name and email (via Apple or Google login).
    • Onboarding Data: Date of birth, gender, height, weight, preferences, and fitness background (via questionnaire).
    • Usage Data: Location (e.g., for outdoor workouts), device information (e.g., device type, OS), and workout logs.
    • Community Data: Content you share (e.g., workout plans, notes) and interactions with profiles, friends communities, or leaderboards.
    • Future Data: When wearable integrations (e.g., Apple, Whoop, Garmin) are added, we may collect health metrics like heart rate, HRV, and sleep hours via hardware APIs.
    • Analytics Data: Usage data collected via Firebase and Google Analytics for essential (e.g., app functionality) and non-essential (e.g., marketing) purposes.

    How We Use Your Data

    • To personalize workout generation and improve App functionality.
    • To provide community features (e.g., leaderboards, sharing).
    • To conduct internal analytics to enhance user experience.
    • To send marketing communications (where you've consented, as required by UK GDPR).
    • To comply with legal obligations (e.g., financial record-keeping).

    Legal Basis for Processing (UK GDPR)

    • Contract: To provide the App's services (e.g., account creation, workout generation).
    • Consent: For non-essential cookies/trackers and marketing communications.
    • Legitimate Interests: For analytics, app improvement, and fraud prevention.
    • Legal Obligation: For financial record-keeping (12 months post-account deletion).

    Special category data (e.g., health data like fitness background, future wearable metrics) is processed with your explicit consent under UK GDPR Article 9.

    Data Sharing

    Third-Party Services:

    • Google Firebase (for app functionality, storage): Anonymized data where possible.
    • Google Analytics (for usage analytics): Anonymized data.
    • Server storage providers: Anonymized data where possible.
    • Advertising platforms (e.g., Meta): Email addresses for targeted ads (with consent).
    • Future Wearable Partners: Limited health metrics (e.g., heart rate) via APIs, when implemented.
    • Legal Requirements: If required by law (e.g., court orders).

    We ensure third parties comply with UK GDPR and CCPA (for US users) via data processing agreements.

    Cookies and Trackers

    • We use Firebase and Google Analytics for essential (e.g., app performance) and non-essential (e.g., marketing) tracking.
    • You can manage non-essential trackers via App settings. Essential trackers are required for functionality.

    Data Retention

    • We retain your data indefinitely until you delete your account.
    • After account deletion, we retain data for 12 months for financial record-keeping, then delete it unless required by law.

    Data Security

    • We use secure authentication for Apple/Google logins and industry-standard encryption for data storage and transmission.
    • Despite these measures, no system is 100% secure. You acknowledge the risk of data breaches.

    Your Rights (UK GDPR and CCPA)

    • UK GDPR Rights: Access, correct, delete, restrict, or object to processing of your data, or request data portability.
    • CCPA Rights (US Users): Request disclosure of data collected/sold, opt out of data sales, or request deletion. We do not "sell" data as defined by CCPA but share emails with advertisers (with consent).

    To exercise rights, contact us at jointhemovement@veyr.fit. We will respond within 30 days (UK GDPR) or 45 days (CCPA).

    International Data Transfers

    • For US users, data may be transferred to the UK or third-party servers (e.g., Firebase). We use Standard Contractual Clauses to ensure UK GDPR compliance.
    • For future wearable integrations, data may be shared with US-based providers (e.g., Apple, Garmin), subject to data protection agreements.

    Children's Privacy

    The App is for users 13+. We do not knowingly collect data from users under 13. No parental consent features are provided for users under 18.

    Changes to This Policy

    We may update this Privacy Policy. We will notify you of material changes via the App or email. Continued use constitutes acceptance.

    Contact Us

    For questions or to exercise your rights, contact: jointhemovement@veyr.fit

    Veyr Limited, 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom.