Legal

Privacy Policy

Last updated: April 13, 2026 -- Beta

Steev is a WhatsApp-based AI fitness coach. To coach you effectively, we process messages you send, health data you share, and meal photos you submit. We use this data only to provide coaching -- not for advertising. We do not sell your data. EU users have full GDPR rights. California residents have CCPA rights. Both are described below.

1. Who we are

The data controller is Steev ("we", "us", "our"). Contact: info@steev.fit.

Steev is currently in beta. This policy reflects our current practices and will be updated as the product evolves.

2. What we collect

WhatsApp messages you send to Steev (text, voice, images)
Health and fitness data you share (weight, workouts, sleep, injuries, goals)
Meal photos submitted for nutritional analysis
Apple Health data synced via the optional iOS app (steps, heart rate, sleep, body composition)
Account information (phone number, subscription status)
Usage data (message timestamps, feature usage, response times)

3. How we use it

Providing personalized fitness and nutrition coaching via WhatsApp
Building and updating your coaching memory (injuries, goals, progress over time)
Generating training plans, nutritional analysis, and progress reports
Sending proactive check-ins and reminders per your preferences
Improving service quality and detecting technical issues
Processing payments and managing your subscription

We do not use your data for advertising. We do not profile you for any purpose outside of coaching.

4. Legal basis for processing (EU/EEA users)

Processing activity	Legal basis
Coaching and memory	Contract performance (Art. 6(1)(b) GDPR)
Health data processing	Explicit consent (Art. 9(2)(a) GDPR)
Payment processing	Contract performance
Service improvement	Legitimate interests (Art. 6(1)(f) GDPR)

5. Who we share your data with

We share data only with processors necessary to operate the service. All processors are bound by data processing agreements and may not use your data for their own purposes.

Processor	Purpose	Location
Meta (WhatsApp Cloud API)	Message delivery infrastructure	US (SCCs)
Anthropic	AI coaching responses (Claude API)	US (SCCs)
Stripe	Payment processing (future integration)	US (SCCs)
SteevLLM (in-house)	Reserved for future use -- anonymized conversation data for model improvement only	NL
Cloudflare	Hosting, DNS, CDN, DDoS protection	US/EU (SCCs)
Apple	App Store distribution, TestFlight beta	US (SCCs)

We do not sell your personal data. We do not share it with advertisers.

6. Your rights (EU/EEA -- GDPR)

If you are in the EU or EEA, you have the following rights:

Access -- request a copy of all data we hold about you
Rectification -- correct inaccurate data
Erasure -- request deletion of your data ("right to be forgotten")
Portability -- receive your data in a machine-readable format
Restriction -- restrict processing in certain circumstances
Objection -- object to processing based on legitimate interests
Withdraw consent -- withdraw consent for health data processing at any time
Lodge a complaint -- file a complaint with your local supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl)

To exercise these rights, email info@steev.fit. We will respond within 30 days.

7. Your rights (California residents -- CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Know -- request disclosure of the categories and specific pieces of personal information we collect about you
Delete -- request deletion of your personal information
Opt-out of sale -- we do not sell personal information. No opt-out needed.
Non-discrimination -- we will not discriminate against you for exercising your CCPA rights

To submit a verifiable CCPA request, email info@steev.fit.

8. Data retention

We retain your personal data for as long as your account is active plus 12 months after account closure, to allow for dispute resolution and legal compliance.

Raw message content is purged (replaced with a deletion marker) after 30 days. Anonymized coaching summaries and memories may be retained longer to provide continuity if you return.

Payment records are retained for 7 years as required by Dutch and EU tax law.

9. Cookies

We use functional cookies only. See our Cookie Policy for details.

10. Changes to this policy

We will notify you of material changes via WhatsApp message before the changes take effect. The "last updated" date at the top reflects the most recent revision. Continued use of the service after the effective date constitutes acceptance.

11. Contact

Questions about this policy or your data: info@steev.fit

Last updated: April 13, 2026 -- Beta -- Steev is currently in beta testing.