1. Introduction

AVNU Limited (“we,” “our,” or “us”) operates the Reelief mobile application (the “App”). Reelief converts screenshots into structured exercise cards. Users upload screenshots from social media or other sources, and Reelief processes them so users can build and store workouts.

This Privacy Policy explains how we collect, use, disclose, safeguard, and retain your personal information. It applies to all users globally, including those in the UK, EU, United States, and Canada.

Data Controller

AVNU Limited
128 City Road
London, United Kingdom
EC1V 2NX

Contact

Email: contact@avnu.ai

If applicable, a Data Protection Officer or privacy contact may be assigned and communicated in future policy updates.

2. Information We Collect

2.1 Personal Information You Provide

• Account details (name, email address, username, password)

• Uploaded content (screenshots, images)

• Exercise cards and workouts you create

• Metadata associated with exercise cards or workouts (titles, reps, sets, notes)

• Communications you send us (support tickets, feedback, inquiries)

User Identifier Linkage: Exercise cards, workouts, and uploaded screenshots are associated with your user ID so that you can securely access your stored content whenever you sign in and across supported devices.

2.2 Information Collected Automatically

• Device type, operating system, and device model

• App usage metrics, navigation patterns, features used

• Diagnostic logs, crash data, performance analytics

• IP address and general network data for security and troubleshooting

2.3 Information From Third Parties

• Authentication providers (Apple Sign-In, Google Sign-In: name and email)

• App Store analytics for downloads, ratings, crash diagnostics, or performance statistics

We do not receive data from third parties for advertising or behavioral profiling.

3. How We Use Your Information

We use personal information where permitted by applicable law:

3.1 Primary Purposes

• Convert uploaded screenshots into exercise cards

• Store, sync, and manage workouts and exercise card content

• Link your content to your user ID for secure access

• Authenticate and administer user accounts

• Provide feature improvements, functionality, diagnostics, and support

3.2 Optional or Secondary Purposes

Where required by law, we seek consent for:

• Marketing communications

• Optional analytics or product usage insights

• Feature notices and non-operational messaging

3.3 AI and Automated Processing

Reelief may use image processing and machine learning tools to extract exercise information from uploaded screenshots and convert them into structured exercise cards.

This processing:

• Does not constitute automated decision-making with legal or material effects under GDPR

• Is used solely to generate fitness content and features

• Is fully reversible and editable by the user

All AI providers operate under:

• Contractually restricted processing agreements

• Prohibition on training models or reusing your data

• Confidentiality and technical security controls

4. Legal Bases for Processing (GDPR / UK GDPR)

We process data under:

• Contract Performance: to provide secure access, content storage, account management, and screenshot processing

• Legitimate Interests: app improvement, diagnostics, troubleshooting, anti-fraud, customer service

• Consent: marketing emails, optional analytics, or local privacy permissions where required

• Legal Obligation: compliance with regulatory requests, record-keeping, or dispute management

You may withdraw consent at any time without affecting normal app functionality.

5. International Transfers

Your personal data may be processed or stored outside your home country, including the United States or other secure cloud regions.

To comply with GDPR, UK GDPR, PIPEDA, and similar laws, we apply:

• EU/UK Standard Contractual Clauses (SCCs)

• Adequacy decisions where applicable

• Vendor Data Processing Agreements

• Encryption and access control requirements

You may request a copy of transfer safeguards where legally permitted.

6. Sharing and Disclosure

We do not sell or rent personal data.

We may disclose data only as needed to:

6.1 Service Providers

For:

• Cloud hosting and secure storage

• AI content extraction and processing

• Authentication services (Apple, Google)

• Analytics and crash diagnostics (if implemented)

All providers:

• Must follow AVNU’s confidential processing instructions

• Cannot use your data for independent purposes

• Must comply with security and privacy obligations

6.2 Legal and Safety Requirements

We may disclose data to:

• Comply with legal or court requirements

• Investigate security risks, misuse, or fraud

• Protect the safety and rights of users or the company

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or asset transfer, users will be notified, and this policy will continue to apply until formally updated.

6.4 Future Community and Social Features (Optional and User-Controlled)

Reelief may introduce optional features that allow users to:

• Share exercise cards or workouts with other users

• Participate in collaborative workouts

• Publish or contribute content to community spaces

These features do not exist yet.

If they become available:

• Sharing will always be optional

• Your content is private by default

• No exercise cards, workouts, or user information will be shared publicly without explicit user action or consent

• You may decide whether a shared card displays attribution (e.g., username)

No content will ever be automatically disclosed or sold.

7. Data Retention

Data is retained only as long as needed for legal purposes:

• Account Data: retained until account deletion + 30 days (for safe restoration)

• Exercise Cards & Workouts: retained until deleted by the user or until account is closed

• Aggregated Analytics: stored in anonymized or non-identifiable form up to 24 months

• Legal or Security Data: stored only if legally required

Once retention periods expire, data is securely deleted or permanently anonymized.

8. User Rights

You may exercise rights under GDPR, UK GDPR, CCPA/CPRA, and PIPEDA.

EU/UK Users (GDPR / UK GDPR)

• Access your personal information

• Request correction of inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Receive data in a portable format

• Withdraw consent without penalty

California Users (CCPA/CPRA)

• Know categories of data collected and used

• Access or delete personal information

• Request correction of personal information

• Equal service regardless of privacy choices

• Opt-out of sale (not applicable—we do not sell personal information)

Canadian Users (PIPEDA)

• Access personal information

• Request correction or clarification

• Know how data is used, stored, and disclosed

• Challenge compliance

Deletion of Exercise Cards

You may delete exercise cards, workouts, or uploaded content at any time. If you delete your account, all user-associated content and identifiers are deleted unless retention is legally required.

How to Exercise Rights

Email: contact@avnu.ai

We must verify your identity before responding to a request.

Response Deadlines:

• GDPR/UK GDPR: 30 days

• CCPA/PIPEDA: 45 days
  Extensions are permitted where lawful.

9. Security

We use administrative, physical, and technical safeguards including:

• Encryption at rest and in transit

• Role-based access controls

• Vendor confidentiality and security controls

• Secure deletion procedures

• Security monitoring and periodic assessment

In the event of a data breach, we will notify:

• Affected individuals

• Relevant data authorities
  as required by GDPR, UK privacy law, PIPEDA, or U.S. state privacy regulations.

10. Children’s Privacy

Reelief is not intended for children under 13, and we do not knowingly collect personal data from children under 13.

This complies with:

• U.S. COPPA

• GDPR’s age-based consent rules

If under-age data is identified, it will be deleted promptly and the account may be closed.

11. Cookies and Tracking Technologies

We may use cookies or similar tools for:

• App functionality

• Authentication and session security

• Diagnostics and performance

Optional analytics requires user consent where mandated by GDPR/UK GDPR.

Users may disable tracking through device privacy controls.

12. Complaints

You may contact us at contact@avnu.ai if you have concerns.

If unresolved, you may contact:

UK: Information Commissioner’s Office (ICO)
EU: Your local supervisory authority
Canada: Office of the Privacy Commissioner of Canada (OPC)
California: California Privacy Protection Agency

13. Policy Updates

We may update this Privacy Policy from time to time. If material changes occur, we will:

• Notify users via email or in-app messaging

• Update the effective date

• Request renewed consent when legally required

14. Contact Information

For privacy matters, rights requests, or data questions:

Email: contact@avnu.ai
Address: 128 City Road, London, United Kingdom, EC1V 2NX