EZMOD

Privacy Policy

Last updated · October 15, 2026

EZMOD is a coaching app: it turns your training, food and daily habits into a plan built by Apollo, our AI coach. This page says what we collect to do that, who else touches it, how long we keep it, and what you can do about it.

1.Who is responsible for your data

Quiro AI LLC, a limited liability company registered in Wyoming, USA ("EZMOD", "we", "us"), 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Contact for anything in this policy: contact@quiroai.com.

2.What we collect

We collect what the app needs to work — nothing decorative.

  • Account — your email address and a password (stored hashed; we never see it), or your Google account's name, email and picture if you sign in with Google.
  • Your profile — age, sex, height, weight, an estimated body-fat range, your goal, your level, your equipment, your language and units, and what you tell us in onboarding.
  • Training — workouts, sets and reps you log, notes you write after a session, records, levels, ranks, XP and streaks.
  • Food — meals you log, photos of meals, the estimates made from them, your calorie and step targets, steps and weigh-ins.
  • Conversations — your messages with Apollo and, in life mode, with Kairos, plus the notes, goals and to-dos you keep there.
  • Videos, photos and voice — proof clips (Big Moves, rank checks), Form Check clips, photos you post, and short voice notes you record.
  • Community — your username, posts, and what you choose to share in the feed.
  • If you write to us before you have an account — for example from our ambassador page: your name, email, your TikTok or Instagram name if you give it, and the messages you send, kept to answer you. If you create an account with the same email, that conversation moves into it.
  • Billing status — whether your subscription is active, its dates and plan. Your card details go to Whop and its payment provider, never to us.
  • Device and usage — your push-notification address (only if you turn notifications on), the pages and actions you use in the app, and your IP address for security and rate limiting.

We don't ask for your legal name, home address or government ID.

3.Why we use it

What we doWhy we're allowed to (GDPR)
Build your plan, targets and rank; run Apollo, Kairos and the gameTo provide the service you signed up for (contract)
Analyse your body, food and movement data and videosYour explicit consent — see the next section
Send reminders and notifications you turned onYour consent, which you can withdraw in Settings
Review proofs before they appear in the feed; stop cheating and abuseOur legitimate interest in a fair, safe app
Rate limiting, security, fixing bugs, understanding use in aggregateOur legitimate interest
Take payment, keep records the law requiresContract and legal obligation

We don't sell your personal data, and we don't share it for advertising. We use no advertising cookies and no third-party analytics: the usage events we record are stored in our own database.

4.Body and health data

Some of what you give us is about your body and health: weight, body fat, injuries or limits you mention, what you eat, and photos or videos of you training. In the EU and the UK this is called special-category data. We use it only to coach you. By entering it, or by choosing to film or photograph, you agree that we process it for that purpose. You can stop at any time by not using the feature, and you can ask us to delete it (see “Your rights”).

5.How AI is involved

Apollo, Kairos, meal analysis, Form Check, proof review and your weekly plan are produced by AI models. To do that we send them the part of your data they need — for example a meal photo and your note, your recent training and targets, a clip to review, or a voice note to transcribe. A person can review proofs.

The models can be wrong. Our own code sets limits on what they can change (for example XP or safety limits), and nothing here is medical advice.

We don't use your data to train our own models. The AI providers below handle it under their own terms, which we use through their business services; ask us if you want details for a specific provider.

6.Who we share it with

Only the companies that run the service, each for a specific job:

CompanyWhat it does for usWhere it may process data
SupabaseDatabase, sign-in, file storageUnited States and other regions
VercelHosting and delivery of the appUnited States and other regions
Google (Gemini)Video analysis (proof clips, Form Check), web lookups for packaged or restaurant foods, Kairos, and a backup when another model is busyUnited States and other regions
Google Sign-InSigning in with Google, if you choose itUnited States
DeepSeekPowers Apollo's conversation, reads your meal photos and notes, and builds your plan, recaps and check-ins (your messages and the context each one needs)Servers that may be outside the EU/UK, including in China
Our search server (SearXNG)Looks up a food product or a business question on public search engines for the AI: a short search phrase only, never your name or accountA server we run, which queries public search engines worldwide
OpenAITurning voice notes into textUnited States
UpstashRate limiting (short-lived counters tied to your account or IP)United States and other regions
Whop (and its payment provider)Checkout, subscription, billing, affiliate trackingUnited States and other regions
Apple, Google, Mozilla push servicesDelivering notifications to your device, if you turn them onWorldwide

We may also disclose data when the law requires it, or to protect people from fraud, abuse or a safety risk. If the business is sold or merged, your data can move with it under this policy.

7.Moving data between countries

Quiro AI LLC is in the United States and the providers above work internationally, so your data may be processed outside the country where you live, including outside the EU/UK. Where the law requires it we rely on safeguards such as the European Commission's standard contractual clauses or the providers' data-privacy framework certifications.

8.How long we keep it

  • While your account exists, we keep your data, including your history, photos, videos and conversations — that history is what your plan is built on.
  • When you ask us to delete your account, we delete or anonymise your personal data within 30 days. Backups roll off on their normal schedule, within 90 days.
  • Billing records are kept by Whop and its payment provider for as long as tax and accounting law requires, which can be several years.
  • Aggregated or anonymised figures that can't identify you may be kept without limit.
  • Rate-limiting counters last minutes to a day.

9.Your rights

Wherever you live, you can ask us to show you your data, correct it, delete it, or give you a copy in a portable format. If you're in the EU, the UK or Switzerland you can also ask us to restrict or stop using it, and withdraw a consent you gave. If you live in California or another US state with a privacy law, you have the rights to know, delete and correct, and to opt out of the sale or sharing of your data — we do neither — and we won't treat you differently for using them.

To use any of these, or to delete your account, email contact@quiroai.com from the address on your account. We answer within 30 days, usually much sooner. If you have an active subscription we cancel it for you.

If you think we've handled your data wrongly, tell us first and we'll fix it. You can also complain to your data-protection authority — in France, the CNIL (cnil.fr).

10.How we protect it

Every table in our database is locked to your account by default. Photos and videos are stored privately and shown through short-lived links. Data travels encrypted. Only a small team can see user data, and their actions on proofs and accounts are logged. No system is perfectly safe; if a breach puts you at risk we'll tell you and the authorities as the law requires.

11.Age

EZMOD is for people aged 16 or older. We don't knowingly collect data from anyone younger, and we delete an account when we learn it belongs to someone under 16. If you think a child has signed up, email us.

12.Cookies and similar storage

We use only what the app needs to work, so we don't show a cookie banner:

  • a sign-in session (set by Supabase);
  • your language, your chosen plan, and which mode (fitness or life) you're in;
  • if you arrived through a partner's link, a short-lived cookie that remembers the partner so they can be credited;
  • a private key for your conversation with our team, if you write to us before you have an account, kept for a year; and a random visitor number, kept for a year, that lets us count visits and see where people stop in sign-up. To avoid counting one person twice, we also keep a scrambled code made from your network address and browser type; the address itself is never stored and the code can't be turned back into it. None of this carries a name or email, none of it is shared with an advertiser or analytics company, and it is linked to your account only once you create one;
  • your device's own storage, which keeps the app usable offline and holds an unfinished onboarding.

13.Changes to this policy

If we change how we handle your data in a way that matters, we'll tell you in the app or by email before it applies. The date at the top always shows the latest version.

14.Contact

Quiro AI LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA — contact@quiroai.com — quiroai.com