Last updated: October 6, 2026
Privacy Policy
Effective Date: October 6, 2026
This Privacy Policy explains how Ellim, LLC ("Ellim," "we," "us," or "our"), the operator of the Ellim fitness application and related services (the “Service”), collects, uses, discloses, and protects your personal information, including health-related data, when you use the Service.
1.1 Information You Provide Directly
Account Information: Email address, password, username.
Profile Data: Name, age, gender (optional), profile photo (optional), physical profile information such as weight, height, date of birth, biological sex, and body fat percentage.
User-Generated Content: Workout logs (exercises, sets, reps, weights, durations), calorie burn estimates, body measurements, goals, notes, photos, and comments.
Nutrition Data: Meal logs, food items, calorie and macronutrient information (protein, carbohydrates, fat), serving sizes, and meal timestamps.
Food Photos: If you use our AI meal detection feature, photos you take or upload for food analysis. These images are sent to third-party AI services for processing (see Section 4.3).
Memory: If you turn on Memory, short facts you tell our AI features about yourself, such as goals, injuries, schedule, preferences and diet (see Section 4.4).
Payment & Billing: If you purchase Premium features, payment details are processed by third-party providers (we do not store full card data).
1.2 Information Collected Automatically
Usage Data: App interactions, feature usage, crash reports, and performance metrics.
Device & Technical Data: Device model, operating system version, app version, locale settings, and IP address (used for security, analytics, and fraud prevention).
1.3 Information from Third-Party Integrations
When you connect Ellim to third-party services such as Apple Health (HealthKit) or Google Fit, we may collect data only with your explicit permission, including:
Workout data (e.g., activity type, duration, calories burned).
Step counts and activity summaries.
Heart-rate data or intervals, if authorized.
Physical profile data such as weight, height, date of birth, and biological sex, if you choose to sync this information from Apple Health.
You can control what data is shared at any time through your device’s Health permissions settings.
We use your information to:
Provide & Maintain the Service: Store and display workouts and meals, calculate calorie burn and macronutrients, generate progress charts, and sync data across devices.
AI-Powered Features: We use third-party AI services to power certain features within Ellim, such as meal analysis, routine generation, nutrition-related features, and other personalized insights. Depending on the feature you use, we may send relevant data to our AI service providers, which may include photos you upload, analysis instructions, profile data (such as age, height, weight, and body fat percentage, whether entered manually or synced from Apple Health), fitness and nutrition data, workout history, current routines, goals, and, if you have turned on Memory, the saved memories that feature uses (see Section 4.4). We require AI service providers to process data only on our behalf and according to contractual restrictions, and we do not send more data than is reasonably necessary for the feature’s purpose.
Enhance & Personalize: Analyze workouts, nutrition data, and physical profile data to provide personalized insights, recommendations, and fitness metrics.
Research & Analytics: Aggregate and anonymize data to understand trends, improve functionality, and develop new features.
Communications: Send transactional messages (e.g., account notices, subscription confirmations) and optional marketing communications if you opt in.
Security & Fraud Prevention: Protect accounts, enforce our Terms of Use, and detect suspicious activity.
We do not use HealthKit data, memories, or other health and fitness data collected through the Service for advertising, marketing profiling, or sale to data brokers.
2.1 Legal Bases for Processing (EEA/UK Users)
Where applicable, we process personal data on the following bases:
To provide the Service and perform our contract with you.
With your consent, such as when you enable HealthKit integrations or choose to use optional AI-powered features. Where we process health information that you choose to share, such as injuries you save to Memory, we rely on your explicit consent (GDPR Article 9(2)(a)). You can withdraw it at any time in the app, for Memory in Settings › Memory; withdrawing does not affect processing that took place before.
For our legitimate interests, such as securing the Service, preventing fraud, and improving performance.
To comply with legal obligations.
Local Storage: Your workout data, nutrition logs, and User Content are stored locally on your device.
Cloud Storage: To enable features such as data backup, cross-device sync, and enhanced analytics, we also store your account information, workout data, nutrition data, physical profile data (including weight, height, date of birth, biological sex, and body fat percentage), and, if you turn on Memory, your saved memories on our secure cloud servers.
All data is encrypted in transit and at rest using industry-standard security measures.
4.1 Service Providers
We share limited data with the following providers, who process it on our behalf and under contract:
Render — hosting and database
Amplitude — product analytics (usage events only; no health or nutrition values, and never the text of a memory)
Google — Firebase and Google Analytics, for analytics and push notification delivery
Sentry — crash and error diagnostics
Cloudinary — storage of meal photographs you upload
Resend — transactional email such as verification and password reset
TypeSafe AI, Inc. (US) — automated safety review of coach debriefs and of proposed memories before they are saved; does not train on our data (see Section 4.4)
Meta — install attribution only, via Apple's SKAdNetwork; no advertising identifier is collected
We do not sell your personal information, and we do not use health or fitness data for advertising or marketing profiling.
4.2 Google Analytics
We use Google Analytics to understand how users interact with our app. This may include app usage patterns, screen views, session duration, and crash reports.
We do not send the contents of workout logs, meal logs, or HealthKit data to Google Analytics.
Google processes data in accordance with its Privacy Policy: https://policies.google.com/privacy
4.3 AI Services
We use third-party AI providers — currently Anthropic, OpenAI, and Google — to power features such as meal analysis from photographs, workout generation, and nutrition insights. When you use these features, the relevant content (for example, a photograph of a meal, your recent workout history, or memories you have saved) is transmitted to the provider for processing. We require providers to process data only on our behalf, under contractual restrictions on retention and on use for model training. We also use TypeSafe AI, Inc. to automatically check coach debriefs, and each proposed memory, for safety before they are shown or saved.
4.4 Memory
Memory lets Ellim's AI features remember lasting things you tell them, so you don't have to repeat yourself. It is optional and off until you turn it on.
What we keep: Short facts you state about yourself in the Routine Coach chat, Smart Session or meal describe, or that you add yourself in Settings › Memory. Each memory is kept in your own words, up to 200 characters, under one of these categories: goals, health (injuries and pain), preferences, schedule, life events, and diet. Before saving, we remove details such as email addresses, phone numbers and card numbers.
Health information and your consent: Memories about your health, such as an injury, pain or your diet, are health data. We process them only with your explicit consent, which you give in the app, either on the card the app shows the first time or with the switch in Settings › Memory. We record when you said yes or no and the wording you were shown.
What we never keep: Allergies and food intolerances, medical conditions or diagnoses, medications, and statements related to disordered eating. If you mention one of these, it is refused and never stored. If you mention an allergy, the app reminds you to check every food item yourself, because our AI cannot detect allergens or cross-contamination. If Memory is on, we keep a record that a save was declined and the general reason, never what you said.
Where memories are used: Saved memories are used by the Routine Coach (chat and routine building), Smart Session, the post-workout debrief, and meal describe and meal photo analysis. Each feature only uses the categories it needs. Meal features only use diet memories, and workout features never use diet memories.
Who processes memories: When a feature uses your memories, they are sent inside the request to the AI provider that answers it: Anthropic for the Routine Coach, Smart Session, the debrief, and for spotting new memories in what you type; Google (Gemini) and OpenAI for meal analysis. Before a new memory is saved, TypeSafe AI, Inc., a US company, reviews it for safety; it receives the proposed memory and the message it came from. TypeSafe also reviews coach debriefs. TypeSafe processes this data only on our behalf, does not use it to train its models, and receives data from the EU and UK under Standard Contractual Clauses. These providers process data as described in Section 4.3.
Seeing, getting a copy, and deleting: You can see every saved memory in Settings › Memory, and delete one or all of them at any time. The in-app data export does not currently include memories; to get a copy, contact us at privacy@ellim.app.
When you delete a memory: Its text is removed immediately. We keep a record that a memory existed (its category and dates, not its words) until your account is deleted, so we can measure how the feature is used. Deleted text may remain in encrypted backups for up to 30 days. Deleting a memory does not change routines or analyses you already have, and it does not edit the conversation you said it in.
Turning Memory off: Turning off the switch in Settings › Memory stops new memories being saved and stops your memories being used. It does not delete anything; you can still review and delete what was saved, one at a time or all at once.
AI conversations: Your Routine Coach conversations are kept while your account exists. We periodically delete conversations older than 90 days.
Deleting your account: Deleting your account deletes your memories, your Memory consent records and your AI conversations. AI providers and TypeSafe that received the text when a request was made keep it under their own retention terms.
Who at Ellim can see them: Our internal reports show counts only, never the text of a memory. If you contact us for support, authorized staff can view your current memories to help, and every view is logged.
What we don't do: We don't use memories for advertising or marketing, we don't sell them, and we don't share them beyond the providers named here. Memory is meant for facts about you. Please don't use it for other people's information.
Viewing & Editing: You may view, edit, or delete individual entries (e.g., workouts, meals, body measurements, or memories) in the app at any time. You can also delete all memories at once in Settings › Memory.
Account Deletion: You may delete your account via the app. This removes your active data; backup copies are deleted within 30 days.
Bulk Export: You may export a copy of your data from within the app (Profile → Export My Data). The export is provided as a machine-readable JSON file and is available once every 24 hours. The export does not currently include memories; you can see them in Settings › Memory and request a copy from us. You may also contact us at privacy@ellim.app.
5.1 GDPR (EU Users)
If you are located in the European Union, you have rights under the GDPR, including the right to access, correct, delete, and request portability of your personal data in a machine-readable format.
5.2 CCPA (California Users)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
Right to Know what personal information we collect and use.
Right to Delete personal information we hold about you.
Right to Opt-Out of Sale: We do not sell personal data.
Right to Non-Discrimination for exercising your rights.
To exercise these rights, contact privacy@ellim.app.
5.3 Privacy Act 2020 (New Zealand Users)
If you are in New Zealand, the Privacy Act 2020 applies to how we handle your personal information. In addition to the rights described above:
Access and Correction: You may ask for a copy of the personal information we hold about you, or ask us to correct it. We will respond within 20 working days of receiving your request.
Information Collected Indirectly: We receive limited attribution data about app installs from third parties such as Apple and Meta — for example, the campaign or referrer that led to a download. We use it only to understand how people find Ellim.
Overseas Disclosure: Your information may be processed outside New Zealand by the service providers listed in Section 4. See Section 10 for details.
Complaints: Contact our Privacy Officer at privacy@ellim.app. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner at privacy.org.nz.
With Your Consent: We share data only when you explicitly authorize it (e.g., syncing with Apple Health).
Service Providers: We use trusted third-party vendors (e.g., cloud hosting, payment processors, analytics) under strict contractual obligations.
AI Service Providers: We share data with AI service providers as described in Section 4.3. Depending on the feature used, this may include uploaded photos, profile data (whether entered manually or synced from Apple Health), fitness and nutrition data, workout history, goals, current routines, and saved memories (see Section 4.4). We require all providers to process data only on our behalf and according to contractual restrictions.
Legal Requirements: We may disclose data if required by law or legal process.
Business Transfers: In the event of a merger, acquisition, or sale, your information may be transferred as part of that transaction, with notice where required.
Active Data: Retained while your account is active and as needed to provide the Service.
Memories: Kept until you delete them or your account. When you delete a memory, its text is removed immediately; a record without the text (category and dates) is kept until your account is deleted.
AI Conversations: Kept while your account exists and deleted with it. We periodically delete conversations older than 90 days.
Backups: Encrypted backups retained for up to 30 days after deletion.
Anonymized Data: Aggregated or anonymized data may be stored indefinitely.
We use industry-standard safeguards including encryption, access controls, and secure infrastructure. However, no system is completely secure, and you are responsible for maintaining the confidentiality of your credentials.
Ellim is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have done so inadvertently, contact us for immediate deletion. Memory is meant for facts about you. Please don't save health or other personal details about other people, including children.
Ellim is operated by Ellim, LLC, a Delaware limited liability company with its principal place of business in Israel. Your data may be processed in Israel, the United States, and other countries where our service providers operate. Where required by applicable law, we rely on appropriate safeguards, such as adequacy decisions or contractual protections, for international data transfers.
Ellim may link to third-party services. We are not responsible for their privacy practices. Please review their policies before sharing data.
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the app, by email, or by other appropriate means.
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Data Controller: Ellim, LLC
Privacy Officer: Greg Polak
Email: privacy@ellim.app
Principal place of business: Israel
Thank you for trusting Ellim with your fitness journey!