Privacy Policy

Performance of contract (art. 6.1.b): your account, your subscription, and the service itself: your program, your logs, your meals, and advice fitted to your sport profile.

Legitimate interest (art. 6.1.f): security, fraud prevention, and crash reports to fix the app.

Consent (art. 6.1.a): usage measurement and advertising measurement in the app, dictation, and this website's audience and advertising cookies.

Explicit consent (art. 9.2.a): three separate consents, each asked on its own screen: reading Apple Health or Health Connect; what you note about your health (injuries or discomfort, how you feel each day, body measurements); and sending your data to Zepo. Reading your periods is asked separately, only if you switch on cycle tracking. Section 9 and section 4-ter.

You can withdraw each consent at any time. Every decision, given or withdrawn, is logged with its date and the version of the wording shown to you.

Zepo is an artificial intelligence assistant. If you switch it on, Zepraug sends a third-party artificial intelligence service what it needs to answer you, create your programs, prepare your sessions and estimate your meals:

• ▸your messages and your meal photos;
• ▸your profile, your goals, and the injuries or discomfort you have noted;
• ▸your program, your sessions, your meals and your water;
• ▸a summary of your health measurements: sleep (duration, times, stages), heart (resting, variability, recovery after exercise), breathing during sleep, cardio capacity, steps, weight, the sessions recorded in your health app and their effort, and how you feel each day;
• ▸what the app concludes from them, such as your form or your effort of the day.

This service acts on our behalf, processes this data in the European Union and does not use it to train its models. It keeps a request only if its automated abuse filters flag it: then for up to ninety days, in the European Union, solely to examine it.

We do not keep your conversations: they stay on your phone (exchanges before 29 September 2026: see the update of 3 October 2026, section 4-sexies).

Without Zepo switched on, no health measurement and no injury goes to this service. Creating a program then only sends your sport profile (goal, level, age, sex, height, availability, equipment, target muscle groups).

The Sunday letter: it is written on our servers, by fixed rules, without artificial intelligence. When Zepo is switched on, it receives the duration of your nights over the last eight weeks and the days your watch recorded a session. A letter you keep stays with your account until you switch Zepo off. Letters you do not keep are deleted after eight weeks.

Reporting an answer: you can report an answer from Zepo. The reported text is kept, linked to your account, for the time it takes to review it, six months at most, and it is erased with your account.

Zepo can be wrong and does not replace medical advice. Legal basis: your explicit consent (art. 9.2.a GDPR). You switch Zepo off at any time in Profile: sending stops at once, and the rest of the app keeps working.

Google Sign-In is one of several optional ways to sign in, with email and Sign in with Apple. This section follows the Google API Services User Data Policy.

Access: openid, email and profile only. Zepraug never accesses Gmail, Drive, Calendar, Contacts or any other Google API.

Data received: your verified email address, your name and Google's unique identifier. No profile picture.

Use: only to create your account or sign you in. Never for marketing, profiling, advertising or training AI models.

Storage and sharing: saved with your account, with our database host (section 4). Never sold, and never sent to an advertising network.

Retention and deletion: kept as long as your account exists, and erased when you delete it, from the app or by writing to us.

We write to you for your account: sign-in codes, subscription notices required by consumer law, and answers to your requests. A promotional email is only ever sent with your prior consent, which you withdraw in one click. We never send text messages and never make sales calls.

Our emails contain no tracking pixel, and we keep no open or click statistics per person.

Usage measurement: from version 3.10, only if you agree to it in the app ("Your choices"). It counts screens opened and actions taken, to improve the app, without any health data. Earlier versions are an exception (update of 3 October 2026, below). The tool is hosted in the European Union.

Crash reports: when the app fails, a technical report is sent so we can fix it. From version 3.10, without any screen recording; earlier versions are an exception (update of 3 October 2026, below). The tool is hosted in the European Union.

Advertising: we advertise on a social network. From version 3.10, and only if you give your "Advertising" consent, the app tells that network about its installation, its opening and the start or renewal of a subscription, so we know which adverts bring in subscribers. Earlier versions send data to that network without your consent (update of 3 October 2026, below). On iOS, your advertising identifier is only used if you also allow it in Apple's tracking prompt. Nothing about your health, your sessions or your conversations is ever sent.

You change these choices at any time in Profile. Refusing costs you no feature.

Zepraug can write down what you say, when you describe a meal and in the chat with Zepo. The sound of your microphone then goes to a third-party transcription service in Europe, which turns it into text. Nothing leaves until you allow dictation: this permission is asked the first time you press the microphone, it is separate from switching Zepo on, and you can withdraw it at any time.

Only the sound is sent, while you speak: never your profile, your sessions, your meals or your health measurements. A dictation lasts 30 seconds at most. Zepraug asks this service to keep your sound only for the time of the transcription, and not to use it to train its models. Our servers neither receive nor store the sound, and no audio file is written on your phone.

Once written, the sentence follows the same path as if you had typed it. Dictation is reserved for subscribers. Legal basis: your consent (art. 6.1.a GDPR).

Our database is hosted in the United Kingdom, which is covered by a European Commission adequacy decision. Our application servers are in the European Union (Paris).

Some recipients are in the United States (section 4). These transfers are governed by the EU-US Data Privacy Framework for certified companies, or by the European Commission's Standard Contractual Clauses.

Your account and what it holds: profile, program, logs, meals and their photos, steps, weigh-ins, what you note about your health. Kept as long as your account exists. Deleting your account is immediate: this data is erased from our database, and also from our subscription management, email and usage measurement providers.

What you note about your health: also erased if you withdraw the dedicated consent. What you had noted before this consent existed is asked again the next time you open the app, and erased if you decline, or if you have not answered 90 days after the release of the app version that asks. Your weight stays.

Meal photos: deleting a meal deletes its photo. A photo that never joined a meal is erased within forty-eight hours.

Conversations with Zepo: we do not keep them. They stay on your phone (exchanges before 29 September 2026: see the update of 3 October 2026, section 4-sexies). The answers Zepo wrote into your journal until September 2026 stay in that journal, with your account.

Sunday letters: a letter you keep stays until you switch Zepo off. The others are deleted after eight weeks.

Reported answers: for the time of the review, six months at most, and erased with your account.

Health measurements that stay on your phone: uninstalling the app erases them.

At the artificial intelligence service: It keeps a request only if its automated abuse filters flag it: then for up to ninety days, in the European Union, solely to examine it.

Crash reports: erased by the tool after 90 days at most. They carry your account's technical identifier, never your name or your email address.

Payment: Apple and Google keep their own records under their own policies.

Connection logs: 12 months at most.

What is read: with your consent, the mobile app reads from Apple Health (iOS) or Health Connect (Android): your steps, the distance and energy of your activity, your sleep (duration, times, stages), your heart rate (at rest, its variability, during exercise, while walking, and its drop after exercise), your breathing and the oxygen in your blood during sleep, your cardio capacity (VO2max), your time in daylight, your recorded workouts (sport, duration, distance, pace, heart rate, effort), your weight and body composition, what you eat and drink when another app logged it there, and, only if you switch on cycle tracking, your periods. The app only reads: it writes nothing into your health app. The sessions you start from the Zepraug app on your watch are recorded by the watch itself.

Where it goes: your steps and weigh-ins are saved in your Zepraug space, for your progress charts. Everything else stays on your phone, where the app computes what it shows you. The oxygen in your blood and your periods always stay there, even if you switch Zepo on: they go neither to the artificial intelligence service nor to our servers. If you switch Zepo on, a summary goes to the artificial intelligence service (section 4-ter), and the duration of your nights and the days your watch recorded a session reach our server for the Sunday letter. If you change phone, only what your health app can hand back comes with you.

What it is used for: showing you your scores and your form of the day, adapting the training suggested to you, and, if you switch Zepo on, answering you. Never advertising, commercial profiling or training models. Your health data is never sold. From version 3.10, it is never sent to our usage measurement or advertising tools; earlier versions are an exception (update of 3 October 2026, below).

Your consents: reading rests on your explicit consent (art. 9.2.a GDPR), asked in the app on a dedicated screen. You withdraw it in your phone settings (Apple Health or Health Connect), and reading stops at once. Sending to Zepo is a second, separate consent (section 4-ter). What you note about your health (injuries or discomfort, how you feel each day, body measurements) rests on a third one, "What you note about your health", asked before your first entry. You withdraw it in Profile, and withdrawing it erases these notes. Your weight stays. Cycle tracking is switched on separately, in Profile: reading your periods is only asked at that moment, on a screen of its own. Switching it off erases what the app had kept of it on your phone; nothing of it is kept on our servers, not even the fact that you switched it on.

Zepraug's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

From your figures, the app computes markers and shows them as they are, such as a body mass index placed within the World Health Organization ranges. It makes no diagnosis. Zepraug is not a medical device and does not replace medical advice.

Zepraug is intended for people in good health. If you have a medical condition, see your doctor before using the service.

Strictly necessary: sign-in and session cookies. They need no consent.

Audience measurement and advertising: refused by default. A consent banner lets you accept or refuse them, category by category. With your consent, an audience measurement tool counts the pages viewed and the clicks towards the App Store and Google Play; and, with your consent to advertising cookies, the social network we advertise on measures which adverts bring visitors here. Without your consent, no such cookie is set. None of these tools loads on the sign-in, account, administration and email preference pages, nor inside the mobile app.

You withdraw your consent the same way, from the banner. Clearing this website's cookies in your browser also brings the banner back.