Last updated: August 11, 2026
Privacy Policy
Effective Date: August 8, 2026
This Privacy Policy explains how Ellim, LLC ("Ellim," "we," "us," or "our"), the operator of the Ellim fitness application and related services (the “Service”), collects, uses, discloses, and protects your personal information, including health-related data, when you use the Service.
1.1 Information You Provide Directly
Account Information: Email address, password, username.
Profile Data: Name, age, gender (optional), profile photo (optional), physical profile information such as weight, height, date of birth, biological sex, and body fat percentage.
User-Generated Content: Workout logs (exercises, sets, reps, weights, durations), calorie burn estimates, body measurements, goals, notes, photos, and comments.
Nutrition Data: Meal logs, food items, calorie and macronutrient information (protein, carbohydrates, fat), serving sizes, and meal timestamps.
Food Photos: If you use our AI meal detection feature, photos you take or upload for food analysis. These images are sent to third-party AI services for processing (see Section 4.3).
Payment & Billing: If you purchase Premium features, payment details are processed by third-party providers (we do not store full card data).
1.2 Information Collected Automatically
Usage Data: App interactions, feature usage, crash reports, and performance metrics.
Device & Technical Data: Device model, operating system version, app version, locale settings, and IP address (used for security, analytics, and fraud prevention).
1.3 Information from Third-Party Integrations
When you connect Ellim to third-party services such as Apple Health (HealthKit) or Google Fit, we may collect data only with your explicit permission, including:
Workout data (e.g., activity type, duration, calories burned).
Step counts and activity summaries.
Heart-rate data or intervals, if authorized.
Physical profile data such as weight, height, date of birth, and biological sex, if you choose to sync this information from Apple Health.
You can control what data is shared at any time through your device’s Health permissions settings.
We use your information to:
Provide & Maintain the Service: Store and display workouts and meals, calculate calorie burn and macronutrients, generate progress charts, and sync data across devices.
AI-Powered Features: We use third-party AI services to power certain features within Ellim, such as meal analysis, routine generation, nutrition-related features, and other personalized insights. Depending on the feature you use, we may send relevant data to our AI service providers, which may include photos you upload, analysis instructions, profile data (such as age, height, weight, and body fat percentage, whether entered manually or synced from Apple Health), fitness and nutrition data, workout history, current routines, and goals. We require AI service providers to process data only on our behalf and according to contractual restrictions, and we do not send more data than is reasonably necessary for the feature’s purpose.
Enhance & Personalize: Analyze workouts, nutrition data, and physical profile data to provide personalized insights, recommendations, and fitness metrics.
Research & Analytics: Aggregate and anonymize data to understand trends, improve functionality, and develop new features.
Communications: Send transactional messages (e.g., account notices, subscription confirmations) and optional marketing communications if you opt in.
Security & Fraud Prevention: Protect accounts, enforce our Terms of Use, and detect suspicious activity.
We do not use HealthKit data or other health and fitness data collected through the Service for advertising, marketing profiling, or sale to data brokers.
2.1 Legal Bases for Processing (EEA/UK Users)
Where applicable, we process personal data on the following bases:
To provide the Service and perform our contract with you.
With your consent, such as when you enable HealthKit integrations or choose to use optional AI-powered features.
For our legitimate interests, such as securing the Service, preventing fraud, and improving performance.
To comply with legal obligations.
Local Storage: Your workout data, nutrition logs, and User Content are stored locally on your device.
Cloud Storage: To enable features such as data backup, cross-device sync, and enhanced analytics, we also store your account information, workout data, nutrition data, and physical profile data (including weight, height, date of birth, biological sex, and body fat percentage) on our secure cloud servers.
All data is encrypted in transit and at rest using industry-standard security measures.
4.1 Service Providers
We share limited data with the following providers, who process it on our behalf and under contract:
Render — hosting and database
Amplitude — product analytics (usage events only; no health or nutrition values)
Google — Firebase and Google Analytics, for analytics and push notification delivery
Sentry — crash and error diagnostics
Cloudinary — storage of meal photographs you upload
Resend — transactional email such as verification and password reset
Meta — install attribution only, via Apple's SKAdNetwork; no advertising identifier is collected
We do not sell your personal information, and we do not use health or fitness data for advertising or marketing profiling.
4.2 Google Analytics
We use Google Analytics to understand how users interact with our app. This may include app usage patterns, screen views, session duration, and crash reports.
We do not send the contents of workout logs, meal logs, or HealthKit data to Google Analytics.
Google processes data in accordance with its Privacy Policy: https://policies.google.com/privacy
4.3 AI Services
We use third-party AI providers — currently Anthropic, OpenAI, and Google — to power features such as meal analysis from photographs, workout generation, and nutrition insights. When you use these features, the relevant content (for example, a photograph of a meal, or your recent workout history) is transmitted to the provider for processing. We require providers to process data only on our behalf, under contractual restrictions on retention and on use for model training.
Viewing & Editing: You may view, edit, or delete individual entries (e.g., workouts, meals, or body measurements) in the app at any time.
Account Deletion: You may delete your account via the app. This removes your active data; backup copies are deleted within 30 days.
Bulk Export: You may export a copy of your data from within the app (Profile → Export My Data). The export is provided as a machine-readable JSON file and is available once every 24 hours. You may also contact us at privacy@ellim.app.
5.1 GDPR (EU Users)
If you are located in the European Union, you have rights under the GDPR, including the right to access, correct, delete, and request portability of your personal data in a machine-readable format.
5.2 CCPA (California Users)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
Right to Know what personal information we collect and use.
Right to Delete personal information we hold about you.
Right to Opt-Out of Sale: We do not sell personal data.
Right to Non-Discrimination for exercising your rights.
To exercise these rights, contact privacy@ellim.app.
5.3 Privacy Act 2020 (New Zealand Users)
If you are in New Zealand, the Privacy Act 2020 applies to how we handle your personal information. In addition to the rights described above:
Access and Correction: You may ask for a copy of the personal information we hold about you, or ask us to correct it. We will respond within 20 working days of receiving your request.
Information Collected Indirectly: We receive limited attribution data about app installs from third parties such as Apple and Meta — for example, the campaign or referrer that led to a download. We use it only to understand how people find Ellim.
Overseas Disclosure: Your information may be processed outside New Zealand by the service providers listed in Section 4. See Section 10 for details.
Complaints: Contact our Privacy Officer at privacy@ellim.app. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner at privacy.org.nz.
With Your Consent: We share data only when you explicitly authorize it (e.g., syncing with Apple Health).
Service Providers: We use trusted third-party vendors (e.g., cloud hosting, payment processors, analytics) under strict contractual obligations.
AI Service Providers: We share data with AI service providers as described in Section 4.3. Depending on the feature used, this may include uploaded photos, profile data (whether entered manually or synced from Apple Health), fitness and nutrition data, workout history, goals, and current routines. We require all providers to process data only on our behalf and according to contractual restrictions.
Legal Requirements: We may disclose data if required by law or legal process.
Business Transfers: In the event of a merger, acquisition, or sale, your information may be transferred as part of that transaction, with notice where required.
Active Data: Retained while your account is active and as needed to provide the Service.
Backups: Encrypted backups retained for up to 30 days after deletion.
Anonymized Data: Aggregated or anonymized data may be stored indefinitely.
We use industry-standard safeguards including encryption, access controls, and secure infrastructure. However, no system is completely secure, and you are responsible for maintaining the confidentiality of your credentials.
Ellim is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have done so inadvertently, contact us for immediate deletion.
Ellim is operated by Ellim, LLC, a Delaware limited liability company with its principal place of business in Israel. Your data may be processed in Israel, the United States, and other countries where our service providers operate. Where required by applicable law, we rely on appropriate safeguards, such as adequacy decisions or contractual protections, for international data transfers.
Ellim may link to third-party services. We are not responsible for their privacy practices. Please review their policies before sharing data.
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the app, by email, or by other appropriate means.
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Data Controller: Ellim, LLC
Privacy Officer: Greg Polak
Email: privacy@ellim.app
Principal place of business: Israel
Thank you for trusting Ellim with your fitness journey!
If you have any questions about this Privacy Policy, please contact us at privacy@ellim.app