Privacy Policy
Last updated: 18 August 2026
In short: Repzy uses your data only to build your plan and track your progress. We do not use your data for advertising, we do not sell it, and we do not share it with ad networks. You can delete your account from inside the app in one step; deleting the account deletes your data.
1. Who is responsible
Data controller: Kuzey Gökgöz
Address: Çankaya/Ankara
Contact: kuzey.gokgoz@outlook.com
2. What we collect
| Data | Why | Required? |
|---|---|---|
| Email address and password | Creating your account and signing in | Yes |
| First name (for greeting), sex, year of birth | Basal metabolism and calorie formulas depend on sex and age | Yes |
| Height, weight, tape measurements (neck, waist, hips) | Calorie/macro targets, BMI and body-fat estimate | Height and weight yes; tape measurements optional |
| Goal, experience level, equipment and daily activity level | Personalising your plan and exercise suggestions | Yes |
| Workout logs (exercise, sets, reps, weight, duration, perceived effort) | Showing progress, "last time" reference, coaching suggestions | No — created as you log |
| Food and water logs | Daily calorie/macro and water tracking | No |
| Meal photo | Analysed to estimate calories | No — only when you take one |
| Name and email address from your Google account | Creating your account and signing in with "Continue with Google" | No — only if you choose to sign in with Google |
| Body photos (front / side / back) | Letting you compare your own progress visually | No — only if you give separate consent and upload them |
| Step count, active calories and exercise minutes read from a connected health app | Showing today's activity on your home screen and shaping the coaching brief around it | No — only if you give separate consent and turn on the Health Connect link |
About meal photos
The photo is downscaled on your device and sent to an AI provider for analysis. We do not store your photo on our servers — only the resulting food name and nutrition values are saved to your diary. We do not request camera permission: your device's own camera app takes the picture.
About body photos
Uploading body photos is entirely optional and requires a separate explicit consent — the consent you give when you start using the app does not cover them. Until you give it, the camera and gallery buttons are not shown at all.
These photos are handled differently from meal photos:
- They are never sent to the AI. They are used neither for calorie analysis nor for the coaching brief.
- They are stored in a non-public area on the server. To display a photo the app generates a private link that expires after one hour.
- Only you can see them. You can delete them one by one, or all at once by deleting your account.
Connected health apps (Health Connect)
If you turn on advanced tracking in Settings, we read the step count, active calories and exercise minutes that your watch or phone writes to Health Connect. This is a read-only permission; Repzy never writes anything to Health Connect. Nothing is read while the switch is off.
Important: these three values are sent to the AI provider together with the other numeric summaries when your daily coaching brief is generated — they do not stay on your device. We do not read heart rate, sleep or location. Turning the switch off stops the reading, and you can also revoke the permission from the Health Connect app itself.
Health data and explicit consent
Body measurements, health metrics, body photos and activity data from connected apps are treated as sensitive personal data under Turkish data-protection law (KVKK Art. 6) and special category data under the GDPR. We collect three separate explicit consents for them:
- Body measurements and health metrics — when you first open the app
- Body photos — when you first open the progress photos screen
- Connected health app data — when you turn on advanced tracking
You can withdraw each one independently: turning off advanced tracking stops the activity reading, and deleting your photos stops the visual record. To withdraw all of them at once, delete your account — all of your data is deleted with it.
3. What we do not collect
- Location data
- Contacts, call logs, SMS
- Advertising identifiers (the app has no ads)
- Third-party analytics or tracking SDKs
- Other photos in your gallery — we only access the photo you pick
- Heart rate, sleep, blood pressure or any other Health Connect record — we read only steps, active calories and exercise minutes
- Your Google contacts, calendar, Drive or photos — "Continue with Google" performs authentication only
4. Who we share data with
We do not sell your data and do not share it for advertising. We use only the service providers (processors) needed to run the app:
| Provider | Purpose | What is sent |
|---|---|---|
| Supabase (database, authentication, server functions) | Hosting your account and logs | The data listed above |
| AI provider (meal photo analysis and daily coaching brief) | Calorie estimation and generating the coaching text | For photo analysis: the meal photo only. For the coaching brief: a numeric summary (targets, daily totals, workout counts and — if advanced tracking is on — steps, active calories and exercise minutes). Your name, email and body photos are never sent for the coaching brief. |
| Google (only if you use "Continue with Google") | Verifying your identity | Repzy sends no data to Google; Google passes us your name and email address in verified form. |
These providers may host servers outside your country, so your data may be transferred internationally. Your explicit consent covers this transfer.
5. Retention
We keep your data for as long as your account exists. When you delete your account, all records (profile, measurements, workouts, food, water, coaching history and any body photos you uploaded) are removed immediately; removal from technical backups takes up to 30 days. Step and active-calorie values read from a connected health app are not stored on our servers — they are re-read each time you open the app.
6. Deleting your account and data
In the app go to Settings → Delete my account. If you have already uninstalled the app, you can request deletion from this page.
7. Your rights
You have the right to access your data, have it corrected or deleted, and to object to processing. You can correct your profile and measurements yourself in the app's Settings screen. For anything else, write to kuzey.gokgoz@outlook.com — we respond within 30 days.
8. Security
Connections are encrypted with TLS. Row-level security is enabled in the database, so each user can only read their own rows. The area holding body photos is not public; the link generated to display one expires after an hour. The AI provider's API key is never shipped inside the app; it exists only on the server.
9. Children
Repzy is not directed to users under 16 and we do not knowingly collect data from them. If you believe we hold data belonging to someone under 16, contact us and we will delete it.
10. Medical disclaimer
Repzy is a wellness and educational app. It does not diagnose, treat or prevent any disease. Calculations and suggestions are estimates; consult a healthcare professional before changing your training or nutrition.
11. Changes
If this policy changes we will update the date on this page and notify you in the app for significant changes.