●

Privacy Policy

Excelcia
Last updated: May 28, 2026

1. Introduction

Excelcia (“we”, “us”, or “our”) operates the Excelcia mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our App. Please read this policy carefully. If you disagree with its terms, please stop using the App.

2. Information We Collect

2.1 Information You Provide Directly

Account information: Email address and password when you register. If you sign in with Google, we receive your name and email address from Google.
Profile information: Username, age, sex, height, weight, fitness level, training location, and home equipment — entered during onboarding.
Workout data: Exercise logs (sets, reps, weight, time, intensity), routine configurations, and workout history.
Goals: Goal titles, target values, progress logs, and deadlines you set within the App.
Food scan data: Photos you submit for AI nutrition analysis and the resulting nutrition estimates. Photos are sent directly to our servers for processing and are not retained after analysis is complete. Nutrition results are stored locally on your device only.
Pledge: A written pledge text and a digital signature image you draw during onboarding. The signature image is stored in Firebase Storage under your account.
Referral codes: Invite codes you generate or enter.

2.2 Information Collected Automatically

Usage data: Which features you use, session frequency, and in-app events, collected via Firebase Analytics.
Authentication tokens: Maintained by Firebase Authentication to keep you signed in securely.
Device information: Device type, operating system version, and app version — collected automatically by Firebase.

2.3 Location Data

GPS location: If you use the Running Tracker feature, we collect your GPS coordinates in real time to track your route, calculate distance, and measure pace. Location data is used solely to generate your run session record. Your GPS route is stored locally on your device only and is not transmitted to our servers.
Location access is optional. You can use all other features of the App without granting location permission.

2.4 Camera

Camera access: Used only for the Food Scanner feature. When you take a photo of food, the image is sent to our servers, processed by an AI model (GPT-4o-mini via OpenAI) to estimate nutrition values, and then discarded. We do not store your food photos.

3. How We Use Your Information

We use your information to:

Operate and maintain the App and your account
Display your workout history, stats, progress, and achievements
Power the AI food scanner (images sent to OpenAI’s API for analysis)
Send one-time verification codes to your email address during account creation or login
Show you relevant advertisements via Google AdMob (see Section 5)
Display a community leaderboard that shows aggregated challenge progress
Enable the social friends feature (your public profile — username, stats, cosmetics, and selected exercises — is visible to friends you have accepted)
Improve the App and diagnose technical issues via Firebase Analytics

We do not use your information for automated decision-making that produces legal or similarly significant effects.

4. How We Store and Protect Your Information

4.1 Cloud Storage

Your account information, stats, achievement progress, routines, and public profile are stored in Google Firebase (Firestore and Firebase Storage). Firebase provides industry-standard encryption in transit (TLS) and at rest (AES-256).

Your food scan results, running sessions, meditation sessions, and goal logs are stored locally on your device only and are not backed up to the cloud. This data is lost if you uninstall the App or delete your account.

4.2 API Keys and Secrets

Our OpenAI API key is stored in Firebase Secret Manager and is accessed only by our server-side Cloud Functions. It is never transmitted to your device.

4.3 Data Retention

We retain your account data for as long as your account is active. If you delete your account (available in the App under Account settings), we permanently delete:

Your Firestore user document and all subcollections (exercises, achievements, routines, stats)
Your public profile
Your invite code
Your pledge signature from Firebase Storage
Your Firebase Authentication account

Deletion is permanent and irreversible. Locally stored data (food scans, runs, goals) is removed when you uninstall the App.

5. Advertising

We use Google AdMob to display banner advertisements within the App. AdMob may collect and use your device’s advertising identifier and usage data to show you personalized ads, subject to your device’s ad personalization settings and applicable consent choices.

In regions where required (such as the European Economic Area), we use Google’s User Messaging Platform (UMP) to obtain your consent before showing personalized ads.

You can opt out of personalized advertising at any time through your device settings:

Android: Settings → Google → Ads → Opt out of Ads Personalization
iOS: Settings → Privacy & Security → Apple Advertising → Personalized Ads

For more information on how Google uses data in advertising, please visit: https://policies.google.com/technologies/partner-sites

6. Third-Party Services

The App integrates with the following third-party services. Each is governed by its own privacy policy:

Service	Purpose	Privacy Policy
Google Firebase (Auth, Firestore, Storage, Analytics, App Check, Functions)	Account management, data storage, analytics	firebase.google.com/support/privacy
Google AdMob	In-app advertising	policies.google.com/privacy
OpenAI	AI food nutrition analysis	openai.com/privacy
RevenueCat	Subscription management	revenuecat.com/privacy
Google Play Billing	Payment processing	policies.google.com/privacy
OSMDroid / OpenStreetMap	Map display during runs	osmfoundation.org/wiki/Privacy_Policy

We do not sell your personal data to any third party.

7. Children’s Privacy

The App is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us and we will delete it promptly.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you
Correction: Request correction of inaccurate data
Deletion: Delete your account and associated data at any time within the App (Account → Delete Account)
Portability: Request your data in a portable format
Objection: Object to processing based on legitimate interests
Withdraw consent: For advertising consent, withdraw at any time through device settings

To exercise any right not available directly within the App, contact us at the address below.

EEA/UK residents: You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data lawfully.

9. International Data Transfers

Firebase and other third-party services we use may store and process your data in the United States or other countries outside your own. Where required, such transfers are made under appropriate safeguards (e.g., Standard Contractual Clauses).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this policy. Your continued use of the App after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, contact us at:

Excelcia
Email: info@excelcia.app