Privacy Policy
Last Updated: March 2026 · Version 2.4
Zyvra exists to help you understand your body, not to monetize your biometric signals. We do not sell, rent, or trade your health data to data brokers, insurers, or advertisers. We will never use Apple HealthKit or Google Fitbit data for marketing or advertising purposes.
1. Information We Collect
When you use Zyvra, we ingest health and fitness metrics exclusively with your explicit on-device permission:
- Apple HealthKit Data: Heart rate, resting heart rate, heart rate variability (HRV), sleep stages (REM, Core, Deep, Awake), active energy burned, step count, VO₂ max, respiratory rate, wrist temperature, and body composition.
- Google / Fitbit Wearables Data: Activity minutes, resting heart rate, and sleep intervals authorized through secure OAuth 2.0 PKCE.
- Smart Scale & Body Composition: Weight, skeletal muscle mass, body fat percentage, visceral fat level, and basal metabolic rate (BMR).
- Account Credentials: Email address and encrypted session authentication tokens.
2. Apple HealthKit Data Protection
In strict accordance with the Apple Developer Program License Agreement and App Store Review Guidelines (Section 5.1.3):
- HealthKit data is never stored in iCloud without end-to-end encryption.
- HealthKit data is never shared with third-party tracking libraries or advertising networks.
- HealthKit data is used exclusively to provide health and fitness analysis services directly within the Zyvra app.
3. Multi-Source Deduplication & Storage
To prevent inaccurate readings when using both an Apple Watch and a Google Pixel Watch or Fitbit, Zyvra processes data through our on-device Smart Deduplication Engine. Continuous metrics like steps and calories prioritize your selected primary wearable to eliminate double counting.
4. Permanent Account & Data Deletion
You have full ownership of your data. In compliance with Apple Guideline 5.1.1(v), you can permanently delete your entire account and all associated metrics directly from the mobile app:
Upon confirmation, all records across our databases (metrics logs, user profiles, diary entries, and scan logs) are permanently purged with zero retention.
5. Contact Our Privacy Officer
For privacy inquiries, GDPR/CCPA data export requests, or security disclosures:
Support & Privacy Requests: zyvra.app/contact