Health and fitness data we collect

• Body measurements, age, sex used for reference values, sport, goals, training level, and race plans.
• Planned and completed workouts, duration, distance, intensity, heart-rate or recovery metrics, and training load.
• Food, nutrient, hydration, supplement, fueling, sweat, gastrointestinal, and recovery entries.
• Allergies, intolerances, dietary restrictions, pregnancy or lactation information, and health-related check-ins you choose to provide.
• Data imported from services you connect, such as Apple Health, Garmin, Strava, calendars, and training-plan providers.
• Inferences and outputs, including calorie and macronutrient targets, nutrient-screen priorities, glycogen and recovery estimates, sweat estimates, training classifications, and AI-generated coaching responses.

Sources

We collect data directly from you, from your use of MAVR, from devices and services you choose to connect, and from calculations or AI features that derive information from those inputs. We do not access a connected service unless you authorize it through that service or your device permissions.

Why we process it

• Personalized nutrition, hydration, fueling, and meal-timing targets.
• Training-load, recovery, glycogen, sweat, and race-preparation analysis.
• AI-assisted nutrition coaching and related safety checks.
• Synchronizing and displaying information from services you connect.
• Security, troubleshooting, user support, legal compliance, and product reliability.

In the EEA, UK, and Switzerland, personalized processing of health and fitness data relies on your explicit consent. Contract and legitimate interests may apply to ordinary account administration, security, billing, and non-health support data. MAVR does not use health data for targeted advertising.

Who receives it

We disclose only the information reasonably necessary to contracted processors that provide hosting, authentication, database, AI, analytics, crash-reporting, communications, customer-support, and payment services. Connected services receive data only when you direct a sync or feature that requires it. Our current processors are listed on the Sub-processors page. We may disclose information when legally required or necessary to protect people, rights, and service security.

We do not sell consumer health data. We do not share it for cross-context behavioral advertising.

AI and nutrition limitations

AI and automated outputs are general wellness and sports-nutrition education. Nutrient coverage screens a limited set of key nutrients from available food-log data; it does not establish adequacy, deficiency, diagnosis, or treatment. Food and allergen data may be incomplete. Pregnancy, lactation, suspected deficiency or excess, symptoms, eating-disorder concerns, and medical conditions require a qualified clinician or sports dietitian.

Consent and withdrawal

MAVR records the notice version and time when you affirmatively consent. You can withdraw at any time in the mobile app under Account → Health data & consent, or by emailing info@mavr.app. Withdrawal stops new personalized health-data processing and does not affect processing that was lawful before withdrawal. If consent is required for a personalized feature, that feature will remain unavailable unless you consent again.

Retention

We retain health-feature data while your account is active. Following a verified deletion request, active data is removed or de-identified within 30 days unless law requires longer; encrypted backups may persist for up to 90 additional days. Consent evidence, security records, payment records, and legal-claim material may be kept for the applicable legal period.

Your rights and appeals

Depending on where you live, you may request access, confirmation, correction, deletion, portability, a list of third parties or categories of recipients, restriction, or withdrawal of consent. Washington and Nevada residents may exercise the consumer-health-data rights available in their state. Send a request to info@mavr.app. We may verify your identity before responding. If we deny a request, reply with “Appeal” and the reason you disagree; we will review the appeal and explain the outcome and any right to contact the relevant regulator or attorney general.

Contact

Branvang (Belgium) is the controller. Contact info@mavr.app. EEA residents may also complain to their local supervisory authority or the Belgian Data Protection Authority.