Privacy Policy

This Privacy Policy explains how Vixey collects, uses, stores, and protects personal data when you use the Vixey mobile application (the “App”).

Vixey is currently operated by:

Privacy contact: info@vixey.ai

For purposes of applicable data-protection laws, Mikael KHALIL is currently the data controller responsible for the processing described in this Privacy Policy.

This Privacy Policy applies only to the Vixey mobile application. It does not cover the Vixey website or other services that may have their own privacy notices.

1. About Vixey

Vixey is a personalized fitness coaching application.

The App uses information about your training profile, objectives, availability, training environment, previous workouts, and other relevant factors to create and adapt training recommendations.

Vixey is not a medical service. It does not diagnose, treat, cure, or provide medical treatment for any disease, injury, or medical condition.

If you experience significant, persistent, or unusual pain or other health concerns, you should seek advice from an appropriate healthcare professional.

2. Who can use Vixey

Vixey is intended for individuals aged 18 years and older.

During onboarding, the date-of-birth field only allows users to enter a date corresponding to an age of 18 or older.

Vixey does not knowingly provide accounts to individuals under 18.

3. Personal data we collect

3.1 Account and authentication information

An account is required to use Vixey.

Depending on the authentication method you choose, we may process:

• full name;
• email address;
• authentication credentials;
• information required to authenticate through Google Sign-In or Sign in with Apple.

For Google and Apple authentication, Vixey requests only the name and email address required to create or access your account.

For email-and-password accounts, authentication is managed through Vixey’s self-hosted identity system. Passwords are stored in protected hashed form, and Vixey does not have access to your original password.

4. Training profile information

To provide personalized training recommendations, Vixey requires certain information during onboarding.

This may include:

• gender;
• full date of birth;
• height;
• weight;
• selected body-shape category;
• training objective;
• whether your training is focused on body development or supporting performance in a sport;
• resistance-training experience and level;
• weekly training commitment;
• available training days;
• intended training start date;
• available time per workout;
• muscles you wish to prioritize;
• preferred language;
• time zone;
• selected gym or training environment.

These details are used to design, schedule, and personalize your training experience.

5. Pain, physical limitations and posture information

You may optionally provide information about:

• existing pain;
• physical limitations; and
• posture concerns.

This information is used only to help Vixey adapt exercise selection and training recommendations to your circumstances.

Vixey does not use this information to diagnose, treat, cure, or otherwise provide medical care.

Because this type of information may constitute sensitive or health-related personal data under applicable law, Vixey processes it only after obtaining your explicit consent.

Providing this information is optional. You may continue using Vixey without providing it.

You may withdraw your consent and remove the relevant information through the App. After withdrawal, Vixey will stop using that information for future personalization.

6. Training and performance data

As you use Vixey, we store information necessary to maintain your training history and adapt future recommendations.

This may include:

• generated roadmaps;
• active workout plans;
• schedules;
• completed, skipped, or otherwise recorded workouts;
• exercises performed;
• sets and repetitions;
• weight or resistance used;
• workout duration;
• exercise substitutions or changes;
• training progression;
• other information generated through or resulting from your workouts.

When a new workout plan replaces an existing plan, the superseded plan is not maintained as a separate historical version. Completed training history may continue to be retained while your account remains active.

7. AI-powered features

Vixey uses artificial intelligence to generate and adapt training content.

Depending on the feature or AI agent being used, Vixey may use services provided by:

• OpenAI
• Google Gemini
• xAI / Grok

To generate a relevant response, Vixey may provide these services with training-related context such as:

• age;
• gender;
• height and weight;
• training objectives;
• training level;
• availability;
• muscle priorities;
• workout history and performance;
• training environment;
• pain or posture information, where you have explicitly consented to its use;
• other sport or training information necessary for the requested functionality.

Vixey does not send AI providers your:

• full name;
• email address;
• authentication credentials;
• Vixey account identifier; or
• other direct account identifiers.

Your full date of birth is not sent to AI providers. Where age is relevant, Vixey sends the calculated age instead.

AI chat messages

Vixey may allow you to enter free-text messages when interacting with AI-powered features.

Vixey does not retain these messages as permanent chat history. They are processed to generate the requested response and are discarded by Vixey when the interaction ends.

Please avoid entering unnecessary personal or sensitive information into free-text fields.

Vixey does not use your personal data, training profile, workout history, or messages to train or fine-tune Vixey’s own AI models.

AI providers may process and temporarily retain information according to their applicable API or business-service terms, including where necessary for security and abuse prevention.

Generated training content that becomes part of your workout plan or training history may be stored by Vixey as described elsewhere in this Policy.

8. Location data

Location access is optional.

If you grant location permission, Vixey may use your device location to:

• display your current position on the gym map;
• center the nearby-gym map around your position;
• identify nearby gyms contained in Vixey’s own gym database; and
• determine locally whether you are sufficiently close to an eligible gym to activate certain Freemium benefits.

The proximity calculation used for Freemium activation is performed on the device.

Vixey does not transmit or store your device coordinates in its backend.

Vixey does not use background location.

The App uses Google Maps SDK to provide map functionality. Google Maps may separately process location, device, or map-related information as necessary to provide its functionality, subject to Google’s applicable privacy terms.

If you refuse location permission, you can still:

• manually navigate the map;
• manually choose a gym;
• use a default training environment; and
• subscribe to Premium.

Location permission is required only for functionality that specifically depends on your current location, including location-based Freemium activation.

9. Subscription and payment information

Premium subscriptions are processed through the:

• Apple App Store, or
• Google Play.

Vixey uses RevenueCat to manage subscription status and access entitlements.

RevenueCat may receive limited account information required for subscription management, including:

• your Vixey internal user identifier;
• your email address; and
• your full name.

Vixey’s backend stores only the information needed to authorize access to subscription features, such as:

• active entitlement status; and
• relevant subscription expiry information.

Vixey does not receive or store your full payment-card information.

Payment information is handled by Apple or Google according to the payment platform you use.

Account deletion and subscriptions

Deleting your Vixey account does not automatically cancel an active App Store or Google Play subscription.

If you have an active subscription, you must cancel it separately through the subscription-management option available from the App or through your Apple or Google account in order to prevent future renewals.

10. Communications

Vixey currently uses your email address for essential account-related communications such as:

• account and email verification; and
• password-reset messages.

Vixey does not currently use your email address for advertising newsletters or unrelated promotional marketing.

11. Technical, security and diagnostic information

Vixey may generate limited technical information required to operate, secure, monitor, and troubleshoot the App and its backend infrastructure.

This may include technical request metadata, timestamps, service identifiers, internal identifiers, authentication events, job identifiers, error information, exception information, and other diagnostic information generated by Vixey’s infrastructure.

Vixey may use this information to:

• secure accounts and infrastructure;
• investigate technical problems;
• prevent abuse;
• enforce fair-use safeguards;
• maintain service availability; and
• diagnose and correct software errors.

Vixey does not intentionally collect advertising identifiers or use device information for advertising profiles.

12. Fair-use and abuse prevention

Vixey may use automated safeguards to manage access to AI-powered functionality and protect the service from excessive, abusive, or automated usage.

These safeguards may temporarily limit certain AI-powered generations or functionality when applicable usage limits are reached.

These controls are related only to the operation and protection of the Vixey service. They do not make decisions concerning employment, credit, insurance, legal status, or similar matters with significant legal effects.

13. How and why we use your data

The principal purposes and legal bases for processing are:

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

14. Third parties and service providers

Vixey does not sell, rent, trade, or commercially provide your personal data to advertisers or data brokers.

Vixey does not use personal data for targeted advertising or cross-app advertising tracking.

We may share limited information with service providers only where necessary to operate Vixey.

RevenueCat

RevenueCat assists Vixey with subscription and entitlement management.

It receives limited account information as described in Section 9.

Apple

Apple may process information when you use Sign in with Apple, download Vixey through the App Store, purchase subscriptions, or manage your subscription.

Google

Google may process information when you use Google Sign-In, download Vixey through Google Play, purchase subscriptions, or use Google Maps functionality.

OpenAI, Google Gemini and xAI

These providers may receive the training context required to provide Vixey’s AI-powered functionality, as described in Section 7.

Vixey does not provide direct account identifiers such as your name or email address to these AI providers.

Infrastructure providers

Vixey’s core backend infrastructure and databases are hosted through cloud infrastructure located in Germany, within the European Union.

Service providers acting on Vixey’s behalf are permitted to process information only for the purposes necessary to provide their services and subject to applicable data-protection requirements.

15. Gym privacy and separation

Selecting a gym allows Vixey to adapt recommendations to the equipment available within that training environment.

Partner gyms, gym employees, and coaches do not receive access to your Vixey personal profile, workout history, performance information, weight, goals, pain/posture information, or other personal training data merely because you select their gym.

Vixey maintains technical separation between gym environments and individual user information.

Other Vixey users also cannot view your profile, workout history, or other personal information.

Vixey currently has no public profiles, social feeds, friend lists, or leaderboards exposing user data to other users.

16. Internal access

Access to personal information within Vixey is limited to authorized team members where reasonably necessary for purposes such as:

• user support;
• debugging;
• account assistance;
• security;
• investigating technical problems; or
• maintaining the service.

Authorized team members may, where necessary, inspect saved workout plans, training history, or generated recommendations to investigate a user-reported or technical issue.

17. Data storage and security

Vixey’s core backend and databases are hosted in Germany within the European Union.

Vixey uses organizational and technical security measures designed to protect personal information, including:

• encrypted HTTPS/TLS communication;
• access controls;
• restricted backend and database access;
• protected authentication infrastructure;
• hashed password storage;
• secure credential management; and
• backup and recovery procedures.

No internet-connected service can guarantee absolute security, but Vixey works to apply safeguards proportionate to the nature of the information being processed.

18. International data transfers

Although Vixey’s core infrastructure is hosted in the European Union, certain service providers may process information in other countries.

Where personal data is transferred outside the European Economic Area and applicable law requires safeguards, Vixey relies on appropriate transfer mechanisms, which may include:

• an adequacy decision recognized by the European Commission; or
• Standard Contractual Clauses or other legally recognized safeguards.

19. Data retention

Vixey retains personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to the following general rules.

Active accounts

Your account, training profile, active plans, workout history, preferences, and related information are retained while your Vixey account remains active and the information is required to provide the service.

Inactive accounts

If your account remains inactive for approximately two years, Vixey may notify you and subsequently delete or irreversibly anonymize your account and associated personal information unless retention remains necessary for a legitimate legal reason.

Technical and security logs

Technical and security logs are generally retained for up to six months, unless a longer period is reasonably necessary to investigate a security incident, fraud, abuse, or legal issue.

Support communications

General support communications may be retained for up to 12 months after the matter is resolved.

Communications concerning privacy or data-protection rights may be retained for up to three years after the request is completed so Vixey can maintain appropriate records of how the request was handled.

Backups

Personal information that has been deleted or anonymized from active systems may temporarily remain in secure backup copies for up to 30 days, after which those backups are overwritten or removed according to Vixey’s backup cycle.

Backups are not used for ordinary processing.

Fully anonymized information

Information that has been irreversibly anonymized so that it can no longer be associated with an identifiable individual may be retained for longer periods, including for:

• technical auditing;
• service reliability;
• security; and
• aggregate statistics.

20. Account deletion

You may initiate account deletion directly from the Vixey App.

Vixey also provides an external account-deletion resource at https://www.vixey.ai/delete-account for users who no longer have access to the App.

You may additionally contact:

info@vixey.ai

When your account is deleted, Vixey permanently removes or irreversibly anonymizes the information that identifies you.

Certain records may remain only where they have been irreversibly anonymized and can no longer be linked back to you, or where temporary retention is necessary in secure backups or required by applicable law.

Account deletion is irreversible.

Remember that deleting your Vixey account does not automatically cancel an Apple App Store or Google Play subscription.

21. Your privacy rights

Depending on where you live, you may have rights concerning your personal information.

Under the GDPR and similar data-protection laws, these may include the right to:

• obtain confirmation about whether your personal data is being processed;
• access your personal data;
• correct inaccurate or incomplete information;
• request deletion of your personal data;
• request restriction of certain processing;
• object to certain processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent data-protection authority.

Requests can be sent to:

info@vixey.ai

Where applicable, Vixey can provide portable information in a structured format such as JSON or CSV.

We may take reasonable steps to verify your identity before responding to a request.

22. California and other U.S. privacy rights

Residents of California and certain other U.S. jurisdictions may have additional rights under applicable state privacy laws.

Depending on the law that applies to you, these may include rights to:

• access personal information;
• obtain a copy of personal information;
• correct inaccurate information;
• request deletion; and
• receive information about certain disclosures of personal data.

Vixey does not sell personal information.

Vixey does not share personal information for cross-context behavioral advertising or targeted advertising.

Vixey does not discriminate against users for exercising privacy rights available to them under applicable law.

Requests may be submitted to info@vixey.ai.

23. Your choices

You can manage several privacy choices directly through Vixey.

You can:

• review and update your profile information;
• decline optional location permission;
• use a gym or default training environment without location access;
• remove pain/posture information and withdraw permission for its use;
• manage your subscription through the applicable store subscription controls;
• request access to or correction of your personal data;
• request account deletion.

Some required profile information is necessary for Vixey to provide personalized training functionality. If you do not provide required information, certain Vixey services cannot operate as intended.

24. Legal disclosures

Vixey may disclose personal information where reasonably necessary to:

• comply with applicable law;
• respond to a valid court order or legally binding request;
• respond to a competent regulatory or public authority;
• protect Vixey’s legal rights; or
• investigate fraud, security incidents, or unlawful activity.

Only information reasonably necessary for the applicable purpose will be disclosed.

25. Complaints

If you believe Vixey has not handled your personal information appropriately, please contact:

info@vixey.ai

If you are located in France or otherwise subject to the GDPR, you also have the right to lodge a complaint with a competent supervisory authority.

Vixey’s primary supervisory authority in France is the Commission Nationale de l’Informatique et des Libertés (CNIL).

26. Changes to this Privacy Policy

Vixey may update this Privacy Policy when the App, applicable law, or our data-processing practices change.

The “Last updated” date at the beginning of the Policy will be updated accordingly.

If a change materially affects how personal information is processed, Vixey may provide additional notice through the App, by email, or by another appropriate method where required.

If a new purpose requires additional consent under applicable law, Vixey will request that consent before processing the relevant information for that purpose.

27. Contact us

For questions about this Privacy Policy, privacy requests, data access, correction, deletion, consent withdrawal, or other personal-data matters, contact: