Privacy policy
Last updated: November 2026
This text accurately describes what EVOCU does with your data today, based on its own code. It doesn't replace legal advice: before publishing the app, or if your jurisdiction requires additional requirements (GDPR, etc.), have it reviewed by a professional to confirm it's still valid before publishing any significant changes.
Who processes your data
EVOCU is a personal training, nutrition and sports-coordination app. The data controller is Nicolás Gustavo Cutuli Ballán, reachable at evocu.soporte@gmail.com. We don't use advertising networks or sell your data. We work with only two technical providers (data processors): Supabase, which hosts your account and data, and Sentry, which receives technical reports when the app crashes.
What data we collect
Everything you enter in the app is linked to your account. Specifically:
- Account: email and password, managed by Supabase Auth.
- Profile: name, goal, experience, equipment and the profile photo you upload.
- Wellbeing and health: daily check-ins (sleep, energy, fatigue, stress, discomfort), injuries or restrictions you log, body weight and, if you provide them, age, height and sex to estimate your energy expenditure.
- Training: routines, completed sessions, perceived effort, active program, progress and your training and match calendar.
- Footballers (if you use that section): sports profile (position, level, team days, season phase), the health questionnaire with your consent (health conditions, recent injuries and treatment), your weekly and monthly plans, and usage events within that section (which screens and sessions you open) to improve it.
- Nutrition: calorie and macro targets, food log, water and, if you choose, a photo of each meal.
- Subscription: if you have EVOCU Plus or Footballers, the plan, its status and expiry date. Payment is handled by the store (App Store or Google Play): we never see your card details.
- Error reports: when the app crashes, Sentry receives a technical report (error type, screen, device model, system and app versions), which may include the connection IP address. It doesn't include the content of your logs.
- Settings: daily reminder time and which meals you want to see in your log. Language and light/dark theme are stored only on your phone.
- App usage (Footballers section): we record internally which screens you open and which sessions you start or complete, only to improve the app. It is stored in your account, never shared and we use no third-party analytics tools.
What we use it for
Only to provide the app: working out your daily readiness and training recommendation, generating your plans and nutrition target, showing your progress and weekly summary, enabling your subscription features, sending the daily reminder you choose, and detecting and fixing bugs. We don't use your data for advertising or to build commercial profiles.
Legal basis
We process your data because it's necessary to provide the service you accept when signing up (Art. 6(1)(b) GDPR). Health data (check-ins, injuries, the Footballers questionnaire) is processed only with your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw in Settings. Error reports are based on our legitimate interest in keeping the app working (Art. 6(1)(f) GDPR).
Where it's stored and who we share it with
Your data is stored in Supabase, on servers in the European Union (Ireland), protected by row-level security rules: only your account can read or write your records, and we don't access them unless strictly necessary to give you technical support. Error reports are processed on Sentry servers in the European Union (Germany). We don't share your data with any other third party.
Your photos
Profile photo: stored in a publicly readable space, so anyone who knows the exact link could see it, although it doesn't appear in any listing or search engine. Meal photos (EVOCU Plus): stored in a private space that only your account can access, and the app shows them through temporary links that expire after one hour. You can delete any photo whenever you want.
Artificial intelligence
Today the app doesn't send your data or photos to any artificial intelligence service: plans and recommendations are worked out with our own rules. If we enable AI features, we'll say so here first, explaining what is sent, to which provider and for what purpose.
Device permissions
- Camera and photo library: for your profile photo and, if you choose, photos of your meals. Only when you ask.
- Notifications: only for the daily check-in reminder, which is generated on your own phone; we don't send notifications from a server.
How long we keep your data
As long as your account is active. From Settings → Reset EVOCU data you can delete your training, nutrition and check-in data without closing your account. From Settings → Delete account, your account, sign-in access, all your data and your photos are deleted immediately. Error reports are kept by Sentry for a limited period and then deleted automatically.
Your rights
- Access and portability: Settings → Export my data gives you a copy in JSON format that you decide where to save.
- Rectification: you can edit your profile, check-ins and logs at any time.
- Erasure: complete from Settings → Delete account, or partial from Reset data.
- Withdraw health consent: in Settings, at any time, without affecting earlier processing.
- Objection, restriction or other rights: email us at evocu.soporte@gmail.com. If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
Minors
EVOCU isn't intended for children under 16. If you believe a minor has created an account, contact us and we'll delete it.
Changes to this policy
If we significantly change what data we collect or what we use it for, we'll reflect it here and update the date at the top.
Contact
Privacy questions: evocu.soporte@gmail.com.