Privacy Policy

Last updated: July 17, 2026

NexaLog is operated by Stellar Winds Technologies ("we", "us", or "our"). This policy explains what information we collect when you use the NexaLog app and website (the "Service"), how we use it, and the choices you have. We promise to always keep your personal information private and secure.

Collection of Your Information

We collect the following categories of information:

• Account information: your name, email address, username, password (stored hashed), and profile photo, plus linked sign-in accounts if you use Google or Apple to sign in.
• Profile information: details you provide during onboarding and in settings, such as bio, birthday, gender, height, weight, activity level, goals, dietary preferences, unit preferences, and timezone.
• Health and body data: weight history, body measurements, progress photos, and fasting sessions you log.
• Activity and nutrition data: workouts, exercises, sets, routines, habits and habit entries, meals, recipes, foods, daily notes, and to-dos you log in the app.
• Connected health service data: if you connect Apple Health, Health Connect, Samsung Health, Strava, Garmin, or Fitbit, we import the data you authorize — such as workouts, steps, calories, distance, heart rate, heart-rate variability, blood oxygen, respiration rate, and sleep stages.
• Social data: posts, captions, comments, likes, friend connections, and blocks.
• Photos and camera input: photos you take or upload for progress pictures and food recognition, and camera input used to scan nutrition labels and barcodes.
• Subscription data: subscription tier, status, and identifiers from our subscription provider. We never receive or store your full payment card details.
• Device and usage data: push notification tokens, device platform, language, and analytics events about how you use the app (see "Analytics" below).

Use of Your Information

We use your information to:

• Provide, maintain, and personalize the Service.
• Compute your daily targets, streaks, exercise ranks, analytics, and insights.
• Send the notifications and reminders you enable (meal, water, habit, workout, and streak reminders).
• Process email verification, password resets, and account changes.
• Operate social features with the visibility settings you choose.
• Understand product usage so we can improve the app.
• Provide customer support.

Health Data

Health data — including data read from Apple HealthKit and Health Connect — is used solely to provide the features of the Service, such as displaying your activity, sleep, and recovery, and importing workouts. We never use health data for advertising or marketing, and we never sell it or share it with third parties for their own purposes. You can disconnect a health integration at any time from the app's settings.

AI Features and Your Data

Some features — recipe and routine generation, weekly insights, daily suggestions, and food photo recognition — use a third-party AI provider (Google Gemini, on a paid tier whose terms prohibit using our data to train their models). We send only the minimum needed for each feature, such as training preferences, goals, aggregate statistics, and the photo you submit for food recognition. We never send your email, name, password, exact body measurements, individual log history, social connections, or payment information to the AI provider. Food-label scanning is performed on your device. AI requests are subject to daily quotas; if a request fails, we may retain diagnostic details for up to 30 days before automatic deletion.

Third-Party Service Providers

We share information with service providers that help us operate the Service. They may process your information only to perform tasks on our behalf and may not disclose or use it for other purposes:

• RevenueCat — subscription management and validation.
• PostHog — product analytics.
• Resend — transactional email (verification codes, password resets).
• Expo — push notification delivery.
• Google Gemini — AI features described above.
• FatSecret, USDA FoodData Central, and Open Food Facts — food and nutrition databases queried with your search terms and barcodes.
• Cloud infrastructure providers — database hosting and encrypted file storage for images such as profile and progress photos.

If you connect Strava, Garmin, Fitbit, Apple Health, Health Connect, or Samsung Health, those platforms share data with us under your authorization and their own privacy policies.

Sharing With Other Users

Social content you post is visible to the audience you choose — friends only or public. Items you share via an external link (such as a recipe or routine) can be viewed and imported by anyone with the link. Your profile name and username are visible to users who search for you. You control auto-sharing in settings, and you can block users at any time.

Log Data

When errors occur in the app, we collect information that your device provides, such as your device model, operating system version, app configuration, IP address, and the time and date of the error. We use this to diagnose and fix problems.

Security

We use commercially acceptable means to protect your personal information, including encrypted connections, hashed passwords, and secure token storage. However, no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee absolute security.

Data Retention and Deletion

We retain your information for as long as your account is active. You can delete your account at any time from the app's settings — the deletion is confirmed with a verification code sent to your email, and it permanently removes your account and all associated data, including logs, health data, photos, social content, and AI usage records. You can also revoke individual device sessions from settings.

Your Rights

Your data is always yours. You can access, update, download, and delete your data at any time. Depending on where you live, you may have additional rights, such as objecting to processing or lodging a complaint with a supervisory authority. To exercise any right, use the in-app tools or contact us at the address below.

Links to Other Sites

The Service may contain links to sites we do not operate. We have no control over, and assume no responsibility for, the content or privacy practices of any third-party site. We advise you to review the privacy policy of every site you visit.

Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this policy from time to time. Changes are effective immediately after they are posted on this page. We encourage you to review this page periodically.

Contact Us

If you have questions or suggestions about this Privacy Policy, contact us at support@nexalog.app.