Health and fitness data we collect

• Body measurements, age, sex used for reference values, sport, goals, and training level.
• Planned and completed workouts, duration, distance, intensity, heart rate, resting heart rate, sleep (from Garmin, if you allow it), and training load.
• Food, nutrient, hydration, supplement, fueling, sweat, and recovery entries.
• Allergies, intolerances, dietary restrictions, and health-related check-ins you choose to provide. We do not collect pregnancy or menstrual-cycle information.
• Data imported from services you connect, such as Apple Health (workouts, active energy, heart rate, distance, steps, weight, body fat, lean body mass, and water), Garmin, Strava, TrainingPeaks, intervals.icu, and Runna.
• Inferences and outputs, including calorie and macronutrient targets, nutrient-screen priorities, glycogen and recovery estimates, sweat estimates, training classifications, and AI-generated coaching responses.

Sources

We collect data directly from you, from your use of Mavr, from devices and services you choose to connect, and from calculations or AI features that derive information from those inputs. We do not access a connected service unless you authorize it through that service or your device permissions.

Why we process it

• Personalized nutrition, hydration, fueling, and meal-timing targets.
• Training-load, recovery, glycogen, and sweat analysis.
• AI-assisted nutrition coaching and related safety checks.
• Synchronizing and displaying information from services you connect.
• Security, troubleshooting, user support, legal compliance, and product reliability.

In the EEA, UK, and Switzerland, personalized processing of health and fitness data relies on your explicit consent. Contract and legitimate interests may apply to ordinary account administration, security, billing, and non-health support data. Mavr does not use health data for targeted advertising.

Who receives it

We disclose only the information reasonably necessary to contracted processors that provide hosting, authentication, database, AI (OpenAI and Google Gemini), crash-reporting, push-notification, and subscription services. Workouts that come from Strava are never sent to an AI provider. Connected services receive data only when you direct a sync or feature that requires it. Our current processors are listed on the Sub-processors page. We may disclose information when legally required or necessary to protect people, rights, and service security.

We do not sell consumer health data. We do not share it for cross-context behavioral advertising.

AI and nutrition limitations

AI and automated outputs are general wellness and sports-nutrition education. Nutrient coverage screens a limited set of key nutrients from available food-log data; it does not establish adequacy, deficiency, diagnosis, or treatment. Food and allergen data may be incomplete. Mavr is for healthy adults and is not for use during pregnancy or breastfeeding. Suspected deficiency or excess, symptoms, eating-disorder concerns, and medical conditions require a qualified clinician or sports dietitian.

Consent and withdrawal

Mavr records the notice version and time when you affirmatively consent. You can withdraw at any time in the app under Settings, Health data, from the paywall menu, or by emailing info@mavr.app. Withdrawal stops syncs, AI features and health notifications, and signs you out. If you do not consent again within 30 days, we delete your account and its data. Withdrawal does not affect processing that was lawful before it.

Retention

We retain health-feature data while your account is active. Coach Kai conversations are deleted 12 months after their last message. Deleting your account in the app deletes its data straight away; after a deletion request by email we do the same within 30 days. Encrypted backups may keep a copy for up to 90 more days. Consent records are kept while your account exists and are deleted with it.

Your rights and appeals

Depending on where you live, you may request access, confirmation, correction, deletion, portability, a list of third parties or categories of recipients, restriction, or withdrawal of consent. Washington and Nevada residents may exercise the consumer-health-data rights available in their state. Send a request to info@mavr.app. We may verify your identity before responding. If we deny a request, reply with “Appeal” and the reason you disagree; we will review the appeal and explain the outcome and any right to contact the relevant regulator or attorney general.

Contact

Branvang (Belgium) is the controller. Contact info@mavr.app. EEA residents may also complain to their local supervisory authority or the Belgian Data Protection Authority.