At Extramile, we are dedicated to leveraging technology to enhance your physical and emotional well-being, bring joy through music and entertainment, and improve productivity and convenience in your mobile experience. We believe in the transformative power of technology to create meaningful, positive change in people’s lives.
Protecting your privacy and maintaining the highest security standards are fundamental to our mission. We are committed to transparency and accountability in how we handle your personal data, ensuring you have clear insights and control over your information while seamlessly enjoying our Service.
This Privacy Policy (the “Privacy Policy“) sets out the main principles on which the data collected from you, or that you provide to us, will be processed by us in connection with your use of “Agevia” (the “App”), our websites (including but not limited to agevia.app, agevia.tech), our blog, and all related services, features, materials, and content available for your use (collectively the “Service“) provided by Extramile Limited, a company incorporated in Cyprus, company number ΗΕ 445953, whose registered office is located at Prodromou, 75, Oneworld Parkview House, Floor 4, 2063, Nicosia, Cyprus (“we”, “us”, “our” or the “Company”).
We encourage you to review our Privacy Policy in its entirety to gain insight into our personal data handling practices.
We have carefully designed this Privacy Policy to be clear, transparent, and accessible. However, if you have any questions or concerns regarding your privacy rights or how we handle your personal data, please feel free to contact us through:
For EEA/UK and Non-EU/EEA Data Subjects:
Online Contact Form: support@agevia.app
Mailing Address: Extramile Limited, Prodromou, 75, Oneworld Parkview House, Floor 4, 2063, Nicosia, Cyprus
Email: dpo@extramile-cy.com
We may revise this Privacy Policy from time to time to reflect:
Staying Informed. We encourage you to review this page periodically to stay informed about how we protect your personal data. The "Effective Date" at the top of this Privacy Policy indicates when the most recent changes were made.
Notification of Significant Changes. If we make material changes to this Privacy Policy that affect your rights or require your consent, we will notify you in advance through appropriate channels, such as:
Please note that your continued use of our Service following the Effective Date of the updated Privacy Policy constitutes your acknowledgment and acceptance of the changes.
“Personal Data” refers to any information that identifies you as an individual or relates to an identifiable individual. Extramile Limited acts as the ‘controller’ of your Personal Data. As the controller, we determine the purposes and means of the processing of your personal data when you use our Service. In certain situations, as specified within this Privacy Policy, we may act as a ‘processor’ of your personal data, meaning we process data on behalf of another controller.
For the purposes of data protection laws in the European Union, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Cyprus Law 125(I)/2018 on the Protection of Natural Persons with regard to the Processing of Personal Data (“Personal Data Protection Law”), Extramile Limited is the controller of your personal data. Additionally, for specific categories of personal data, we may act as a processor, as detailed below.
Certain aspects of our Service may be provided by our authorized partner Fulfilling Inc., acting as ‘processor’ of your personal data. This means that:
This partner processes your personal data solely for the purposes defined by us, ensuring compliance with applicable data protection laws and maintaining the security and confidentiality of your information.
This Privacy Policy also considers the UK General Data Protection Regulation (“UK GDPR”) as well as relevant U.S. privacy laws, including but not limited to the California Consumer Privacy Act (“CCPA”) to ensure compliance in jurisdictions where our Service is accessible. Further details about how we fulfill these obligations are provided in the sections below.
As you access and use our Service, we gather certain personal data through the following means:
Data Directly Provided by You:
Basic Information. We collect the information necessary to personalize your account and provide you with tailored Service. This may include your name, email address, age or date of birth, gender, account credentials, profile information, country or region, language preferences, weight, height, and any other information you choose to provide when registering for an account, completing your profile, or using the Service.
Purchase and Subscription Information. Payment information is required to process your subscription. This includes subscription plan details, and payment information. Note that we do not store or process your credit card information. This information is handled securely and directly by our third-party payment processing partners in accordance with their privacy policies.
Health Data and Special Category Personal Data. Certain information processed through the Service may constitute health data or other special category personal data under Article 9 GDPR and equivalent laws in other jurisdictions. This may include information you provide during onboarding, wellness assessments, behavioral questionnaires, and information imported from connected wearable devices or health-data platforms.
We process such information solely for the purposes described in this Privacy Policy and only where:
You may grant or withhold consent independently for different health-data features and integrations. You may also withdraw your consent at any time by:
Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal. Please note that withdrawing consent may limit or disable certain features of the Service that rely on health-related information.
If you choose to share information related to your health or wellness, we may process data such as your physical characteristics (height, weight, age range, sex, or body measurements), lifestyle habits, physical activity, exercise routines, sleep patterns, nutrition habits, and other behavioural information relevant to your use of the Service.
Reproductive health data is subject to enhanced protections and is not processed by default. Processing of such information requires explicit user opt-in. This approach reflects compliance with applicable privacy laws, including Washington’s My Health My Data Act (RCW 70.372), California’s Confidentiality of Medical Information Act as amended, Virginia’s Consumer Protection Act amendments, and comparable laws in other jurisdictions. Reproductive health information is not used for advertising or marketing purposes under any circumstances. Disclosure to third parties is limited strictly to situations necessary for service provision under binding confidentiality obligations or circumstances in which disclosure is legally required by a valid court order or equivalent compulsory legal process. Voluntary disclosure to law enforcement or governmental authorities does not occur in the absence of such legal compulsion, and notice is provided where legally permitted.
Connected Wearable and Health Platform Data. With your explicit consent, we may access and process information from third-party wearable devices and health-data platforms, including but not limited to Oura Ring, WHOOP, Apple Health (HealthKit), and Google Health Connect. Depending on the permissions you grant, this may include sleep data, sleep stages, sleep duration, heart rate, resting heart rate, heart rate variability (HRV), activity metrics, exercise data, workout information, step counts, calorie expenditure, readiness scores, recovery metrics, strain metrics, movement data, and other health or wellness metrics made available through the connected platform. We do not sell health or wellness data to third parties. This information will be processed solely to provide the functionality and features of the App. Imported data remains subject to the privacy policies of the relevant third-party providers.
Survey and Communication Information. We may collect any information you voluntarily provide when: participating in surveys, questionnaires, or Service testing, communicating with us or directed to us via letters, emails, and social media, or submitting reviews or testimonials regarding our Service. If you participate in any promotions or competitions we may run, we process information relevant to your participation. This data is processed to assess user opinions, improve our Service, and support the development of new features.
Social Media Login and Account Linking. If you register or sign in using third-party platforms, such as Apple, Google, or Facebook, we may receive information necessary to verify your identity and create your Account. This may include your name, email address, user ID, locale, profile picture, or friends list (if authorized). You can control what information is shared with us through your settings on the respective social media platform. Your interactions with such platforms are governed by their own privacy policies.
AI Assistant Interaction Information. If enabled, our optional AI Assistant feature processes certain biometric health data that you authorize for use, excluding reproductive health information unless you provide explicit opt-in consent. Only the minimum information reasonably necessary to produce the relevant response is transmitted for processing. Our AI Assistant processes health data that you authorize us to access, including biometric data obtained from third-party applications. Reproductive health information is excluded by default and processed only upon your separate explicit opt-in. The feature provides educational and informational outputs intended to support understanding of health-related data and user-defined goals within the Services. It operates using third-party cloud infrastructure and machine learning models provided by external artificial intelligence technology partners. Health data is transmitted to and processed by such third parties solely for the purpose of generating responses and related outputs. Outputs generated by our AI Assistant are based on user inputs and health data and may be inaccurate, incomplete, or inconsistent. The feature does not provide medical advice and must not be relied upon as a substitute for professional medical diagnosis, treatment, or clinical judgment. Users remain responsible for consulting qualified healthcare professionals regarding any health-related questions or decisions. Content exchanged with the AI Assistant is processed solely to generate responses, deliver the requested functionality, maintain and improve Service reliability and security, investigate potential misuse, ensure service quality, and support product development and feature enhancement.
User Content and Community Interactions. If you choose to post comments, submit reviews, participate in discussions, upload images, or share other materials on the Service, we process the information you provide along with any associated metadata (such as date and time of submission). This also includes any information you voluntarily share in public forums, chat features, or within content feedback channels. Please remember that content shared publicly may be visible to other users and could be copied or shared by others.
Data Automatically Collected by Us:
We automatically collect certain information about your device, activity, and interactions while you interact with our Service. This data helps us ensure technical stability, optimize performance, personalize your experience, prevent fraud, and improve our products and services.
Log and Technical Information. When you access or use the Service, certain technical information is automatically logged by our systems or by integrated third-party tools. This includes your IP address, browser type and version, language settings, time zone, operating system, App version, the date, and time of your visits, and the pages or features you access. We also collect data about your interactions within the Service, such as navigation paths, clicks, viewing duration, playback actions (e.g., play, pause, resume), and error logs.
Device Information. We collect information about the device you use to access the Service, including the device model, manufacturer, hardware type, screen resolution, unique device identifiers, operating system name and version, network type, Internet service provider or mobile carrier, and limited location information (such as country or city derived from your IP address). This information enables us to maintain compatibility, detect technical issues, and deliver optimized content streams based on your device’s capabilities.
Advertising and Analytics Identifiers. When you access our App, we may collect device-specific advertising identifiers, such as your Apple Identifier for Advertisers (“IDFA”), Identifier for Vendors (“IDFV”), or Google Advertising ID (“AAID”), depending on your device’s operating system. These identifiers are used for analytics, performance measurement, and, where applicable, the delivery of non-intrusive, interest-based advertising. You can reset or limit tracking through your device settings. We also assign a unique internal user ID to your account or device to measure engagement and maintain service integrity.
Usage and Interaction Data. We record how you interact with the Service to understand usage trends and improve user experience. This may include your in-app navigation patterns, search queries, and engagement with notifications or promotional content. This information helps us refine recommendations, monitor technical performance, and detect abnormal behaviour such as unauthorized sharing or automated access attempts.
Referrer and Acquisition Data. We collect data about how you arrived at our Service, such as referral URLs, campaign identifiers, or advertising sources. For example, we may record the app store page, advertisement, or referring link you clicked before downloading or visiting the Service. This data helps us analyse the effectiveness of our marketing campaigns and optimize how users discover our content.
Cookies and Similar Technologies. We and our partners use cookies, pixels, SDKs, and other similar tracking technologies to collect and store information automatically when you interact with the Service. Cookies are small data files placed on your device to remember your preferences, maintain login sessions, and understand how you use the Service. These technologies help us improve site functionality, measure traffic, and deliver relevant promotions. You can manage your cookie preferences through your browser or device settings. However, disabling certain cookies may affect the functionality of the Service. For detailed information, please refer to our Cookies Policy.
Location Data. We may collect approximate geolocation information (for example, country, region, or city) based on your IP address or device settings. This helps us comply with regional licensing restrictions, customize available content, and ensure compliance with applicable legal requirements. We do not collect precise or continuous location data unless you explicitly consent.
Information from Other Sources. We may combine the information automatically collected through your use of the Service with data lawfully obtained from third parties, such as app stores, analytics vendors, or advertising partners, to improve accuracy, enhance personalization, or ensure compliance with legal and payment verification requirements. Such processing is subject to applicable data protection laws and your consent preferences.
Please note that this Privacy Policy does not apply to information collected by:
Third-Party Service. Any third party, including through any application or content (including advertising) that may link to or be accessible from or through our Service.
Personnel and Job Applicants: This Privacy Notice does not apply to the collection of personal data from employees, job applicants, contractors, business owners, directors, officers, or other staff members except for California Residents.
Non-Personal Data: Information that cannot reasonably identify, relate to, describe, or be linked (directly or indirectly) to a specific individual is not considered personal data. This Privacy Notice does not govern the processing of such non-personal information.
We collect and process personal data to deliver, enhance, and secure our Service, ensuring a seamless and personalized experience. Below, we outline the purposes for which your data is processed:
To Provide and Operate the Service. We process personal data to enable you to create and manage your Account, sign in securely, and access the content and features of the Service. This includes authentication, maintaining your Account preferences, managing access to premium content, and resolving technical or performance issues. Our systems process basic identifiers (such as your email, device ID, or Account credentials) to maintain a stable connection between your device and our servers, ensure compatibility, and prevent unauthorized access or errors. We use secure hosting and storage technologies to serve video and multimedia content efficiently and to store User Content such as comments or profile media.
To Process Payments and Manage Subscriptions. We process your personal data to complete transactions, manage subscriptions, and issue refunds when applicable. This includes maintaining purchase records, verifying payment status, and granting access to the Content. All payment card information is handled directly by approved payment processors through secure channels. We receive limited transactional metadata (for example, date, amount, and confirmation of payment) to fulfil your order and maintain financial compliance. Subscription data is also processed to manage renewals, expirations, and entitlements to content.
To Provide Customer Support. When you contact our support team, we process your personal data to respond to your inquiries, resolve technical issues, and assist with Account or payment matters. This includes using communication tools via email to identify your Account, verify your request, and ensure proper follow-up. We may keep records of support communications to maintain service quality, train staff, and resolve future disputes.
To Communicate with You. We may use your personal data to send you important service-related communications, such as notifications about Account activity, content availability, technical updates, or changes to our Terms and policies. We may also send you optional reminders or alerts about new releases, events, or features. These communications may be delivered via email or push notifications, depending on your preferences. You can opt out of marketing emails at any time by clicking “unsubscribe,” and disable push notifications in your device settings.
To Research and Analyse Use of the Service. We analyse how users interact with our Service to understand what features are most popular, assess Content performance, and improve user experience. This includes aggregated analysis of viewing behaviour, click patterns, and subscription engagement. Analytics help us troubleshoot technical problems, test new interface designs, and plan improvements. The insights gained are used to refine our recommendation algorithms, enhance playback quality, and ensure that our Service performs reliably across devices and regions.
To Personalize Your Experience and Recommendations. We process personal data, including your preferences, search history, and interactions, to personalize your experience and provide relevant recommendations. This helps us display content, genres, and promotional offers that reflect your interests. Personalization is achieved through internal analytics and, where permitted by law and your consent, may include non-intrusive advertising relevance adjustments.
For Marketing and Advertising Purposes. We may process your personal data to inform you about new features, promotions, or Content, and to deliver or measure advertising effectiveness within the Service and across digital platforms. Where legally permitted, we and our partners may use cookies, advertising identifiers, and other technologies to display interest-based ads and analyse their performance. You can influence personalized advertising preferences directly through your device or browser settings, or through applicable industry opt-out tools. You may also disable interest-based advertising entirely where your jurisdiction provides that option.
To Administer Promotions and Events. If you participate in promotions, contests, or special campaigns, we process your personal data to manage participation, verify eligibility, deliver rewards, and communicate with winners. Your data is used solely for the specific promotion you enter and will be deleted or anonymized once the campaign concludes, except where retention is required by law.
To Improve and Develop the Service. We process aggregated usage data, feedback, and survey results to improve our products and develop new features. This includes refining the design and functionality of the Service, testing beta features, and analysing overall system performance. Aggregated or anonymized data may also be used for internal reporting, business intelligence, and service optimization.
To Maintain Security and Prevent Fraud. We process personal data to protect the integrity and security of our Service, prevent unauthorized transactions, and detect fraud, spam, or abuse. This includes monitoring login attempts, verifying user identity, analysing unusual activity patterns, and enforcing our Terms. Data may also be processed to investigate and prevent illegal behaviour such as Account manipulation or unauthorized distribution of content.
To Comply with Legal and Regulatory Obligations. We process your personal data when required to comply with applicable laws, regulations, and court orders. This includes tax, accounting, and reporting obligations, responding to lawful requests from authorities, enforcing our Terms, and asserting or defending legal claims. We may also process data to comply with sanctions, anti-fraud, and consumer protection regulations.
We are committed to transparency in how we collect, use, and process your personal data. Under applicable data protection laws and other relevant regulations, we rely on specific legal bases for processing your personal data. The legal basis varies depending on the purpose of personal data processing, as outlined below.
| PURPOSE OF THE PROCESSING | LEGAL BASIS | CATEGORIES OF PERSONAL DATA |
|---|---|---|
|
To Ensure Access to and Proper Delivery of our Service |
Performance of a Contract (Article 6(1)(b) GDPR) Legitimate Interests (Article 6(1)(f) GDPR) Consent for Special Category Data (Article 9(2)(a) GDPR) |
All categories of data. Health recommendations, Wearable integration, AI personalization using health data - Articles 6(1)(b), 9(2)(a) GDPR. |
|
To Fulfil Transactions* |
Performance of a Contract (Article 6(1)(b) GDPR) Legitimate Interests (Article 6(1)(f) GDPR) |
Transactional Data
|
|
To Customize Your Experience |
Performance of a Contract (Article 6(1)(b) GDPR) Legitimate Interests (Article 6(1)(f) GDPR) Consent for Special Category Data (Article 9(2)(a) GDPR) |
Personalization & Preference Data
|
|
To Analyse Usage and Performance |
Legitimate Interests (Article 6(1)(f) GDPR) |
Usage & Analytics Data
|
|
To Improve the Service |
Legitimate Interests (Article 6(1)(f) GDPR) |
Service Improvement Data
|
|
For Advertising and Marketing Purposes |
Legitimate Interests (Article 6(1)(f) GDPR) Consent for Special Category Data (Article 9(2)(a) GDPR) |
Marketing & Advertising Data
|
|
To Ensure the Security and Integrity of our Service |
Legitimate Interests (Article 6(1)(f) GDPR) |
Security & Fraud Prevention Data
|
|
To Provide Support and Communicate with You |
Performance of a Contract (Article 6(1)(b) GDPR) Legitimate Interests (Article 6(1)(f) GDPR) |
Customer Support & Communication Data
|
|
To Comply with Legal Obligations |
Compliance with Legal Obligations (Article 6(1)(c) GDPR). |
Legal & Compliance Data
|
*We provide you with the option to make purchases directly within our App or through our websites. Your payment information is processed securely through third-party payment systems and providers, and we do not collect, store, or process any sensitive payment data, such as your credit card number or expiration date.
In-App Purchases. If you purchase within our App, your payment will be processed through third-party payment providers, such as:
These platforms handle all payment transactions independently, and we do not have access to, or store, your payment card details.
Website Purchases. If you choose to purchase a subscription or other services directly through our websites, the payment will be processed through an authorized third-party payment provider. In this case:
Payments on our website may be processed through Stripe, Braintree, PayPal, Adyen or Checkout.com.
Payment Provider Privacy Policies. For all transactions, we strongly recommend reviewing the Privacy Policy of the payment provider processing your transaction. For example:
Stripe Privacy Policy
PayPal Privacy Policy
Security and Compliance. We take your financial security seriously and ensure that all payment providers we work with:
To provide our Service effectively and maintain a secure and optimized experience, we may share your personal data with certain trusted third parties. All sharing is carried out strictly in accordance with applicable data protection laws, and each third party is bound by contractual obligations to protect your information and use it only for the purposes for which it was disclosed.
Service Providers. We share your personal data with carefully selected service providers who help us operate, maintain, and improve our Service. These providers process your data only under our instructions and are required to maintain strict confidentiality and security standards. Depending on the nature of your interactions with the Service, your information may be shared with providers that support:
These service providers are prohibited from selling or using your personal data for any unrelated commercial purposes.
Marketing and Advertising Partners. Where you have provided consent or where permitted by law, we may share certain information with marketing and advertising partners to deliver and measure promotional campaigns and improve audience engagement. This may include limited data such as anonymized device identifiers, advertising IDs, or aggregated analytics information that helps tailor advertising content to your interests. You can withdraw your consent or manage advertising preferences through your device settings or the opt-out links provided in our marketing communications.
Corporate Affiliates and Group Companies. To support our global operations and provide seamless service delivery, we may share your personal data with affiliated entities, subsidiaries, or parent companies within our corporate group. Such transfers are conducted under strict data protection agreements, ensuring that your information remains protected and is processed in accordance with this Privacy Policy and applicable law.
Legal and Regulatory Disclosures. We may disclose your personal data when required by law or when we believe such disclosure is necessary to:
In all such cases, we will assess the scope and necessity of the disclosure and limit it to the minimum required under applicable law.
Change of Control. In the event of a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, your personal data may be transferred as part of that process. Any such transfer will occur in accordance with applicable data protection laws, and the receiving entity will be required to continue protecting your personal data consistent with this Privacy Policy. You will be notified of any material changes to ownership or control of your data if legally required.
With Your Consent. In specific cases, and only with your explicit consent, we may share your personal data with third parties for purposes that are not otherwise covered by this Privacy Policy. You will always have the right to withdraw your consent at any time without affecting the lawfulness of processing that took place before its withdrawal.
Data Storage. We primarily store and process your personal data within the United Kingdom (UK) and European Economic Area (EEA) to ensure compliance with applicable data protection laws. Our commitment to data security and privacy means that all personal data is stored on secure servers that we either own or license from trusted third-party providers. These servers are protected using industry-standard security measures to prevent unauthorized access, data loss, or misuse.
Data Transfers Outside the UK & EEA. In certain circumstances, we may need to process or transfer your data to trusted third-party service providers outside the UK and EEA to ensure the effective operation and delivery of our Service. This may include servers or partners based in the United States or other jurisdictions.
Before engaging any third-party processor located outside these regions, we conduct thorough risk assessments and ensure they meet strict privacy and security requirements aligned with international data protection standards. We do not transfer personal data to jurisdictions that lack adequate data protection frameworks.
Legal Safeguards for International Transfers. Whenever personal data is transferred outside the UK or EEA, we comply with UK GDPR and EU GDPR by implementing legally recognized safeguards, including:
Where an adequacy decision is unavailable, we apply additional safeguards such as encryption, strict access controls, and security audits to mitigate risks associated with cross-border data transfers.
Data Minimization and Anonymization. To further enhance privacy and security, we apply principles of data minimization and anonymization, ensuring that only the necessary data is transferred outside the UK or EEA to fulfill specific purposes. This reduces potential risks associated with international data transfers.
Your Consent to International Transfers. By using our Service and providing your personal data, you explicitly acknowledge and consent to its transfer, storage, and processing outside the UK or EEA as outlined in this Privacy Policy. All transfers are conducted in strict compliance with applicable data protection laws to ensure your rights and personal data remain protected.
| Processor’s name | Processor’s privacy policy | Purpose |
|---|---|---|
|
Amplitude |
Tracking user interactions and engagement within the Service. Collecting user behavior data, event tracking, and Service usage statistics to analyze user behavior, measure Service performance, and improve user experience. |
|
|
AppsFlyer |
Providing mobile attribution and marketing analytics, including deep linking functionality. Collecting device information, user interactions, and attribution data to measure the effectiveness of marketing campaigns, improve user acquisition strategies, and facilitate deep linking within the Service. |
|
|
Firebase Crashlytics |
Tracking and reporting Service crashes and stability issues. Collecting crash reports, device state information, and user interactions leading up to a crash to help us identify and fix bugs, ensuring a stable and reliable Service experience. |
|
|
Firebase Authentication |
Providing secure authentication for users signing in to our Service. Collects user identifiers (e.g., email, phone number) and authentication tokens to manage user sessions and secure access to the App. |
|
|
Firebase Analytics |
Tracking user interactions and engagement within the Service. Collecting user behavior data, event tracking, and app usage statistics to analyze user behavior, measure Service performance, and improve user experience. |
|
|
Firebase In-App Messaging |
Sending targeted messages to users within the Service. Collecting data on user interactions with in-app messages and related events to deliver personalized content, improve user engagement, and support promotional activities. |
|
|
Facebook (Analytics) |
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 |
Tracking user interactions and engagement within the Service. Collecting user behavior data, event tracking, and Service usage statistics to analyze user behavior, measure Service performance, and improve user experience. |
|
Google Sign-In |
Allowing users to sign in to our Service using their Google account. Collecting user’s Google ID, name, email address, and profile picture to authenticate users and enable a seamless login and personalized experience. |
|
|
OpenAI (ChatGPT API) |
Processing customer support inquiries and subscription details to generate personalized responses and analyze tone for routing to appropriate support workflows. |
|
|
Reteno |
Enhancing user engagement through personalized communication and retention strategies, including marketing emails and push notifications. Collecting user activity data, preferences, engagement metrics, and contact information to create personalized user experiences, improve retention efforts, and send targeted marketing emails and push notifications. |
|
|
Apple HealthKit |
Providing integration with connected wearable devices and enabling the import of health, wellness, behavioral, and physiological information that you authorize us to access. Such information is processed solely to provide and personalize the Service and in accordance with your consent and applicable Apple Privacy Policy. This data is not used for advertising, marketing, or data-mining purposes and is not disclosed to third parties for advertising purposes. |
|
|
Google Health Connect |
Providing integration with connected wearable devices and enabling the import of health, wellness, behavioral, and physiological information that you authorize us to access. Such information is processed solely to provide and personalize the Service and in accordance with your consent and applicable Google privacy policy. This data is not used for advertising, marketing, or data-mining purposes and is not disclosed to third parties for advertising purposes. |
|
|
WHOOP |
Providing integration with connected wearable devices and enabling the import of health, wellness, behavioral, and physiological information that you authorize us to access. Such information is processed solely to provide and personalize the Service and in accordance with your consent and applicable WHOOP policies. This data is not used for advertising, marketing, or data-mining purposes and is not disclosed to third parties for advertising purposes. |
|
|
Oura |
Providing integration with connected wearable devices and enabling the import of health, wellness, behavioral, and physiological information that you authorize us to access. Such information is processed solely to provide and personalize the Service and in accordance with your consent and applicable Oura policies. This data is not used for advertising, marketing, or data-mining purposes and is not disclosed to third parties for advertising purposes. |
|
|
Microsoft Clarity |
Provides behavioral and engagement analytics to help understand how users interact with the App interface and content. Collects non-identifiable interaction data such as clicks, scrolling behavior, navigation patterns, and session metrics to improve usability, design efficiency, and overall user experience. Data is processed in aggregated or anonymized form and used solely for analytical and performance optimization purposes, in accordance with Microsoft’s privacy safeguards. |
|
|
AppLovin |
Providing mobile advertising and user acquisition services. Delivering targeted ads and optimizing monetization by collecting data such as device information, user interactions, IP address, and advertising identifiers. Helping improve ad relevance and App revenue. |
We and our third-party partners, including analytics providers, advertising networks, and affiliated service providers, use standard tracking technologies to collect certain information automatically when you use the Service. These technologies may include cookies, software development kits (SDKs), application programming interfaces (APIs), web beacons, scripts, and tracking pixels. We do not use health data, wellness data, special category personal data, or information imported from health platforms for targeted advertising, cross-context behavioural advertising, audience profiling, or marketing purposes.
Tracking technologies help us to:
Information collected through these tools may include identifiers (such as your device ID, advertising ID, or IP address), browser type, operating system, referral URLs, interactions with the App, and session duration. This information may be linked to your Account or other personal information we hold about you, consistent with applicable law.
Some portions of our Service employ advertising technologies that use tracking tools to deliver interest-based advertising (“cross-context behavioural advertising”). These technologies, used by our advertising partners such as Meta (Facebook), Google, TikTok, Pinterest, X, Snapchat, and others, help us and them display ads that are more relevant to your interests. When you interact with our App, these partners may collect information such as:
We may also advertise our Service on third-party websites and platforms (for example, showing an ad on Facebook or TikTok). When you click on one of these ads and install or access our App, that third party may inform us that you were referred through their ad, helping us evaluate the performance of our campaigns. To manage your preferences or opt out of personalized advertising, you can:
Please note: opting out does not eliminate advertising altogether, it only means the ads you see will be less relevant to your interests. Your advertising ID may still be used for frequency capping, reporting, or aggregated analytics.
You can also manage your preferences regarding cookies and other tracking technologies via our cookie consent banner or by adjusting your device or browser settings. Guidance on managing cookies and advertising IDs is available from your device manufacturer or browser provider.
| Partner | Privacy Policy | Purpose |
|---|---|---|
|
Meta Pixel |
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 |
Tracks conversions from Facebook and Instagram ads, builds audience groups, and optimizes ad delivery. |
|
Google Ads and Tag Manager: |
Measures advertising reach and enables remarketing to users who have interacted with our Service. |
|
|
TikTok Pixel |
Enables ad targeting and performance measurement for TikTok users |
|
|
Pinterest Tag |
Tracks engagement with our promotions on Pinterest and supports audience analytics. |
|
|
X Pixel |
Measures advertising effectiveness and allows retargeting of relevant user groups |
|
|
Snapchat Pixel |
Links user actions in the App with Snapchat ad performance to improve audience matching. |
|
|
Applovin Pixel |
Tracks conversions and measures the performance of AppLovin advertising campaigns to optimise ad delivery and audience targeting. |
We are dedicated to respecting your privacy and safeguarding your personal data. In line with this commitment, we adhere to principles regarding the handling of your information, as detailed below:
No Sale, License, or Rental of Personal Data. We do not sell or rent your personal data for financial gain. Your personal data is only disclosed as outlined in this Privacy Policy.
Limited Sharing with Service Providers. We share your personal data exclusively with service providers who assist in delivering and supporting our Service, as described herein. We ensure that no data is shared with external providers or partners without appropriate data protection agreements or contractual terms in place to safeguard your information.
Protection of Children’s Data. We do not knowingly collect personal data from children who do not meet the minimum age requirement in their jurisdiction. If you are under the applicable minimum age, as defined in our Terms, you are not permitted to use our Service.
We store your personal data only for as long as it is necessary and relevant to achieve the purposes for which it was originally collected. This includes providing our Service, maintaining security, resolving disputes, and complying with legal and regulatory obligations.
Retention Periods. When your personal data is no longer required for its original purpose, we will either securely delete or anonymize it so that it can no longer be linked to you. If you deactivate or delete your account, we will retain your personal data for no longer than two (2) months, unless retention is required for legal, regulatory, or contractual obligations. In cases where legal or regulatory requirements necessitate longer retention, we will store only the minimum personal data necessary and ensure it is appropriately protected. Conversation history may be retained to enable continuity of service and allow users to access prior interactions. Health-related data may be deleted or anonymized earlier where no longer necessary for the purposes for which they were collected. Following this retention period, only conversation history remains available to the user unless deletion is requested. Requests for access or deletion may be submitted via support@agevia.app
Exceptions to Deletion Requests. Even if you request the erasure of your personal data, certain circumstances may require us to retain minimal personal data, including:
Once retention is no longer required for these purposes, we will ensure the final deletion or anonymization of your personal data securely.
We take data security seriously and have implemented both organizational and technical safeguards to protect your personal information against unauthorized access, loss, alteration, or misuse.
Organizational Security Measures. We enforce strict internal policies and procedures to maintain the security and confidentiality of personal data, including:
Technical Security Measures. We deploy reasonable cybersecurity protections to safeguard your personal data, including:
Acknowledgment of Security Limitations. We take commercially reasonable measures to protect your personal data, utilizing security technologies and best practices to guard against unauthorized access, data breaches, and cyber threats. However, no security system is entirely impervious to risks. Ensuring the safety of your information is an ongoing effort that involves continuous monitoring, risk evaluation, and enhancement of security protocols. The presence of a security incident does not automatically imply non-compliance with legal requirements or industry standards.
Data Protection Impact Assessments. We recognize that certain processing activities conducted through the Service may involve the processing of health-related information, special category personal data, behavioural information, and data obtained from connected wearable devices and health platforms. Where required under applicable data protection laws, including Article 35 GDPR, we conduct Data Protection Impact Assessments (DPIAs) to evaluate and mitigate potential risks to the rights and freedoms of individuals. Our DPIA process considers the nature, scope, context, and purposes of processing, including the use of automated technologies, artificial intelligence systems, health-related assessments, wearable-device integrations, and other privacy-sensitive features. We implement appropriate technical and organizational safeguards to reduce identified risks and regularly review our assessments as our Service evolves.
Immediate Assessment and Containment. In the unlikely event of a personal data breach, we will promptly assess the incident, contain its impact, and evaluate the risks to individuals’ rights and freedoms. Our breach response may involve actions such as logging affected users out, resetting passwords, and enhancing security protocols to mitigate potential harm. By maintaining strong personal security practices and promptly reporting any concerns, you can help us protect your information effectively.
Regulatory Reporting Obligations. If the breach is likely to result in a high risk, we will notify affected individuals without undue delay, providing details of the breach, mitigation steps, and recommended protective actions. When required, we will report the breach to the relevant supervisory authority - such as the Information Commissioner’s Office (ICO) for the UK or the appropriate EU authority - within 72 hours of becoming aware. All breaches will be documented, and measures will be implemented to prevent recurrence.
To report a personal data breach or seek assistance, please contact us via support@agevia.app or dpo@extramile-cy.com. We will address your concerns accordingly.
As a resident of the European Union (EU), European Economic Area (EEA), or the United Kingdom (UK), you are entitled to certain rights regarding your personal data under the General Data Protection Regulation (GDPR) and the UK GDPR. Below is a summary of your key rights and how you can exercise them:
Right to Access Your Data. You have the right to request access to the personal data we hold about you. Upon request, we will provide a copy of your personal data along with details about how it is processed, shared, and stored.
Right to Rectification. If your personal data is inaccurate, incomplete, or outdated, you have the right to request corrections or updates to ensure it is accurate and complete.
Right to Erasure (‘Right to be Forgotten’). You can request the deletion of your personal data where:
Your right to erasure may not apply where processing is necessary for legal compliance, public interest, or the establishment, exercise, or defense of legal claims.
Right to Restrict Processing. You may request that we restrict the processing of your personal data if:
Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format and, where feasible, request the direct transfer of this personal data to another service provider.
Right to Object to Processing. You have the right to object to the processing of your personal data where:
Right to Withdraw Consent. If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Where we process health-related or other special category personal data based on your explicit consent, you may withdraw that consent at any time by disconnecting the relevant integration, adjusting your privacy settings, contacting us, or deleting your account. This will not affect the lawfulness of processing conducted before consent was withdrawn.
Right to Lodge a Complaint. If you believe your privacy rights have been violated, you have the right to file a complaint with your local data protection authority (DPA).
To exercise your rights, please contact us via support@agevia.app or write to us at the address set forth above.
If you reside outside the European Union (EU), European Economic Area (EEA), or the United Kingdom (UK), you may have specific privacy rights under your country’s applicable data protection laws. Below is a summary of key rights based on various jurisdictions:
United States – State-Specific Privacy Rights
If you are a resident of California, Virginia, Colorado, Connecticut, or other U.S. states with privacy laws, you may have certain rights under laws such as the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and others.
If applicable, you have the right to:
If you are a California resident, you may also use an authorized agent to submit requests on your behalf.
Canada – Personal Information Protection and Electronic Documents Act (PIPEDA)
If you are a resident of Canada, you have the following rights under PIPEDA:
Brazil – Lei Geral de Proteção de Dados (LGPD)
If you are a resident of Brazil, you are entitled to rights under the LGPD, including:
For privacy concerns, you may contact the Brazilian Data Protection Authority (ANPD) at ANPD website.
Australia – Privacy Act 1988 & Australian Privacy Principles (APPs)
If you are a resident of Australia, you have rights under the Privacy Act 1988, including:
Japan – Act on the Protection of Personal Information (APPI)
If you are located in Japan, your rights under the APPI include:
We will respond to requests within a reasonable timeframe, as required by Japanese law.
Mexico – Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)
If you reside in Mexico, you are granted rights under the LFPDPPP, commonly known as ARCO rights:
You also have the right to revoke consent for the use of your personal data, subject to certain exceptions.To exercise your rights, you may contact our privacy team using the details in the “Contact Us” section.
We provide you with the ability to access, update, and delete your personal data in accordance with applicable privacy laws.
Accessing, Correcting, or Updating Your Data. You can review, modify, or update your personal data at any time by contacting us via our support form: support@agevia.app.
Deleting Your Data. If you wish to delete your personal data, you may do so using the following methods:
Option 1: Submit a request via our support form at: support@agevia.app.
Please include a brief description of your request.
Option 2: Delete Your Account via the App
Android Users:
Open Profile → Settings.
Select Manage Account Details.
Press Delete Account and confirm on the popup.
Contact our support team via support@agevia.app for final confirmation.
iOS Users:
Open Profile → Select Profile Details.
Press Delete Account and confirm on the popup.
If you purchased a subscription via the App Store or Google Play, your account will be deleted automatically with no further action required.
If you purchased a subscription on our website, you must send a request to our support team via our contact form at: support@agevia.app.
Important Considerations for Account Deletion. If you delete your Account, you will lose access to all associated subscriptions, progress, and Content (including User-Generated Content) in the App. Once your Account is deleted, we may not be able to restore any lost data. If you purchased a subscription via our website, deleting your Account means you will no longer have access to your subscription.
For any further assistance, please contact our support team via support@agevia.app.
If you submit a request to exercise your data protection rights, we will process it as follows:
Response Timeframe. We aim to respond to valid requests within 30 days from the date of receipt. If your request is complex, or we receive a high volume of requests, we may require additional time. In such cases, we will inform you of the extension and provide a revised timeline for our response.
Right to Decline Requests. We reserve the right to decline requests that are manifestly unfounded, excessive, or repetitive under applicable privacy laws. If your request falls into this category, we will notify you of our decision and provide reasons where required by law.
Identity Verification. To protect your privacy and prevent unauthorized access, we may request additional information to verify your identity before processing your request. This step is necessary to ensure:
If we are unable to reasonably verify your identity, we may be unable to fulfil your request. We will inform you of this and provide guidance on any alternative steps you may take.
General Details. Residents of certain U.S. states, such as California, may have additional rights regarding their personal information under applicable state laws. These include the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), among other state privacy laws. Where specific legal provisions in this notice do not apply, the Privacy Policy shall govern the processing and handling of personal information.
Exercising Your Rights. Only you or an authorized representative legally permitted to act on your behalf may submit a request related to your personal information. Please refer to the previous section for details on the rights available to you and how to exercise them. In addition to those rights, this section provides further information about the processing, collection, and disclosure of personal information under U.S. State Privacy Laws.
Definition of Personal Information. Personal Information refers to any information that identifies, relates to, describes, or can reasonably be linked to you as an individual.
Pursuant to the CCPA, the term “personal information” excludes:
Sensitive Personal Information. Certain information processed through the Service may constitute "Sensitive Personal Information" under the CCPA, as amended by CPRA, including information relating to your health, wellness, physiological characteristics, account credentials, precise geolocation (if enabled), and other categories recognized by applicable law. We collect and process Sensitive Personal Information solely for the purposes described in this Privacy Policy, including providing and personalizing the Service, maintaining account security, delivering requested features, complying with legal obligations, and improving Service functionality. We do not use or disclose Sensitive Personal Information for purposes that would require an additional right to limit use under applicable California law, except as otherwise permitted by law. We do not sell Sensitive Personal Information and do not use Sensitive Personal Information to infer characteristics for targeted advertising purposes.
Data Controller Responsibilities. Extramile Limited is responsible for determining how your personal information is collected, used, disclosed, and shared in accordance with applicable US privacy laws, including the CCPA and other state-level privacy regulations.
No Sale of Personal Information. We do not sell your personal information in exchange for money, nor are we in the business of trading or monetizing user information. However, like many online businesses, we collaborate with advertising and analytics partners to deliver relevant ads across different platforms.
How This May Be Considered “Selling” or “Sharing” Under the CCPA? Under the CCPA, the sharing of personal information for targeted advertising or cross-context behavioral advertising may be classified as "selling" or "sharing", even if no money is exchanged. This means that certain activities, such as allowing advertising networks to collect identifiers or browsing behavior to show you personalized ads, could be considered data sharing under California law.
Your Right to Opt-Out of Targeted Advertising and Data Sharing. Even though we do not sell your personal information for direct monetary gain, you still have the right to opt out of any sharing of your personal information with our advertising and analytics partners. This includes targeted advertising, personalized marketing, behavioral tracking and analytics-based audience insights.
You can exercise this right by:
Please note that under California’s "Shine the Light" law (California Civil Code § 1798.83), residents of California may request information about the disclosure of their personal information to third parties for direct marketing purposes. If applicable, you may submit such a request by contacting us.
Do Not Track. The "Do Not Track" (DNT) feature is a privacy preference that some web browsers offer, allowing users to indicate their preference not to be tracked by websites or online services. However, at this time, there is no universally accepted standard for implementing DNT signals, and not all browsers support this feature. Consequently, we do not currently respond to DNT signals.
Request for Access: you have the right to ask for access to (i) the personal and sensitive information we have about you and how we use it; and (ii) the categories, sources, and third parties that have received your personal information or to whom it has been "sold" or disclosed in the past 12 months. You can make this request once a year at no cost. Please ensure the subject line reads "California Privacy Rights Request," and include relevant details such as your name, street address, city, state, and zip code. Once we validate your request, we will provide the requested disclosure within 30 days of receipt, unless an extension is necessary. If we require additional time due to the complexity of the request or the high volume of requests, we may extend the response period by an additional 30 days. In such cases, we will notify you within the initial 30-day period, explaining the reason for the extension and the expected response timeline.
Under the CCPA, privacy rights extend beyond users to all individuals, including job applicants, employees, independent contractors, and business partners who are California residents. These individuals may request information about our information collection practices regarding their personal information and may also exercise rights to access, delete, correct, or opt out of certain information sharing as permitted under California law. To make a request, please follow the instructions outlined in this Privacy Policy.
Categories of Personal Information Collected & Disclosed. We collect the following categories of personal information in connection with the Service. The table below outlines:
| CATEGORY | EXAMPLE | BUSINESS PURPOSE | WHO WE SHARE IT WITH |
|---|---|---|---|
|
Identifiers |
Name, email address, phone number, account username, IP address etc. |
Facilitating business operations and service delivery. Engaging in lawful advertising, marketing, and promotional efforts. Managing account registration, authentication, and support functions. Maintaining, enhancing, and safeguarding the functionality, reliability, and security of the Service. |
Advertising platforms, technology and service providers, analytics and research firms, cloud storage providers, social media companies, business partners, affiliated companies, and payment processors. |
|
Physical characteristics as indicated by you |
Self-reported physical attributes such as height, weight, age, gender, fitness goals, and other details you choose to provide while using the Service. |
Facilitating business operations and service delivery. Maintaining, enhancing, and safeguarding the functionality, reliability, and security of the Service. Responding to user requests and providing customer support. |
Trusted cloud providers, hosting providers, analytics providers, customer-support providers, and service providers acting on our behalf under appropriate contractual safeguards. |
|
Gender and age, as identified by you |
Gender and age details as voluntarily provided by you. |
Facilitating business operations and service delivery. Engaging in lawful advertising, marketing, and promotional efforts. Maintaining, enhancing, and safeguarding the functionality, reliability, and security of the Service. |
Trusted technology and service providers (such as hosting, analytics, and cloud storage) that support the App’s performance, under contractual obligations to process data only on our behalf. Identifiable physical attribute data is never shared with third parties for their own marketing use. |
|
Wellness data to the extent it contains identifying information |
Any measure data, routines, activity metrics, movement data, calorie expenditure, and other health-related or activity-related data, that may be associated with your identity. |
Facilitating business operations and service delivery. Maintaining, enhancing, and safeguarding the functionality, reliability, and security of the Service. Responding to user requests and providing customer support. |
Cloud infrastructure providers, analytics providers, wearable integration providers, customer-support providers, and other processors acting solely on our behalf and subject to contractual confidentiality and data protection obligations. This data is not shared with advertising partners and is not used for targeted advertising purposes. |
|
Visual or similar information to the extent it contains identifying information |
Photos, User-Generated Content or other materials created within our Service. |
Facilitating business operations and service delivery. Maintaining, enhancing, and safeguarding the functionality, reliability, and security of the Service. |
Technology and service providers, analytics and research firms, cloud storage providers. |
|
Payment information |
Purchase history, transaction details, subscription data etc. |
Facilitating business operations and service delivery. Processing transactions, fraud detection, maintaining financial records |
Payment processors |
|
Internet or network activity |
Browsing history, usage logs, App interactions, cookies etc. |
Facilitating business operations and service delivery. Maintaining, enhancing, and safeguarding the functionality, reliability, and security of the Service. |
Advertising platforms, technology and service providers, analytics and research firms, cloud storage providers. |
|
Geolocation data |
Approximate location based on IP address etc. |
Facilitating business operations and service delivery. Maintaining, enhancing, and safeguarding the functionality, reliability, and security of the Service. |
Advertising platforms, technology and service providers, analytics and research firms, cloud storage providers. |
|
Inferences drawn from personal information |
User preferences, behavioral trends, if applicable, etc. |
Facilitating business operations and service delivery. Engaging in lawful advertising, marketing, and promotional efforts. Maintaining, enhancing, and safeguarding the functionality, reliability, and security of the Service. |
Advertising platforms, technology and service providers, analytics and research firms, cloud storage providers, social media companies, business partners, and affiliated companies. |
We include this section for residents of other US states with privacy laws that may impact them. These privacy laws include the Virginia Consumer Data Privacy Act (“VCDPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), the Colorado Privacy Act (“CPA”), and the Nevada Privacy Law (“NPL”), the Montana Consumer Data Privacy Act (“MCDPA”), the Oregon Consumer Privacy Act (“OCPA”), and the Texas Data Privacy and Security Act (“TDPSA”). This section is intended to comply with these laws by supplementing the information provided elsewhere in the Privacy Policy.
Collection of Personal Information. We may collect personal information as described and categorized elsewhere in this Privacy Policy. The specific definitions of sensitive information vary by state law.
Use of Personal Information. We may collect, use, and disclose personal information for the purposes outlined in this Privacy Policy. This includes providing services, improving our products, and complying with legal obligations.
Disclosure of Personal Information. We may disclose personal information to third parties and service providers as described in this Privacy Policy. We ensure such disclosures comply with applicable laws to protect your privacy and rights.
General Privacy Rights
Residents of Colorado, Connecticut, Virginia, Utah, Montana, Oregon, and Texas are entitled to the following rights concerning their personal information:
State-Specific Rights. Each state has unique provisions under its privacy laws. Below are additional details for residents of Montana, Oregon, Texas, and Nevada.
Montana
*We do not engage in profiling or sell personal information for monetary consideration.
Oregon
Texas
Nevada
*We do not engage in selling personal information for monetary consideration.
Indiana (Indiana Consumer Data Protection Act – “ICDPA”)
Kentucky (Kentucky Consumer Data Protection Act – “KCDPA”)
Rhode Island (Rhode Island Data Transparency and Privacy Protection Act – “RIDTPPA”)
data.
Delaware (Delaware Personal Data Privacy Act – “DPDPA”)
Iowa (Iowa Consumer Data Protection Act – “ICDPA”)
Maryland (Maryland Online Data Privacy Act – “MODPA”)
Minnesota (Minnesota Consumer Data Privacy Act – “MCDPA”)
New Hampshire (New Hampshire Privacy Act – “NHPA”)
New Jersey (New Jersey Data Privacy Act – “NJDPA”)
Nebraska (Nebraska Data Privacy Act – “NDPA”)
Tennessee (Tennessee Information Protection Act – “TIPA”)
How to Exercise Your Rights. To exercise any of the rights outlined above: