Privacy policy

1. Who we are

This website, elyo.fit, is operated by Dualis APP, s.r.o. (Námestie osloboditeľov 3/B, Košice, Košický kraj 040 01, Slovakia), the company behind the ELYO fitness application ("ELYO", "we", "us"). We are the data controller for the personal data described in this policy.

For anything related to your personal data, contact us at info@elyo.fit or +421 952 655 460.

2. Scope of this policy

This policy currently covers the public ELYO website, support messages, waitlist messages, privacy requests and account deletion requests. The ELYO mobile application is still in development. Before the app is publicly released, this policy must be updated to reflect the app's actual account flows, permissions, data types, third-party SDKs and retention rules.

3. Data we process on this website

This website is informational. We keep website data collection to a minimum:

• Server logs. Our hosting provider automatically records standard technical data (IP address, browser type, requested pages, timestamps) to keep the service secure and reliable. Logs are kept for a limited period and are not used to identify visitors.
• Email you send us. If you write to us — for support or to join the waitlist — we process your email address and the content of your message so we can reply. Waitlist emails are used only to notify you about the ELYO launch.
• Privacy and deletion requests. If you ask us to access, correct or delete data through the account deletion form or by email, we process the information needed to verify and handle that request.

The website source code does not set cookies, run advertising tags or embed analytics scripts. We do not sell personal data.

4. Data in the ELYO app

The ELYO app is expected to process data needed to provide the fitness service, such as account details, training goals, equipment, schedule, workout logs, progress data and subscription status. The final list must be based on the real app implementation. Health, fitness or training data will not be sold to data brokers or used for advertising data mining.

If the app uses Apple Health, HealthKit, Google Health Connect, motion sensors, camera, photos, notifications, analytics, crash reporting, payments, AI providers or other third-party SDKs, those integrations must be disclosed here and in the store privacy forms before submission.

5. Legal bases

We process data under the EU General Data Protection Regulation (GDPR): server logs on the basis of our legitimate interest in running a secure website, and correspondence on the basis of your request (steps prior to entering a contract or consent). Privacy and deletion requests are processed to comply with legal obligations and to respond to your request.

6. Service providers and disclosures

We may use service providers that help us operate the website, email inboxes, support communication and hosting. They may process data only for those service purposes. We may also disclose data when required by law, regulators, courts, tax obligations, security incidents, fraud prevention or dispute resolution.

Payments for future mobile subscriptions are expected to be handled by the App Store or Google Play. Apple and Google process store payments under their own terms and privacy policies.

7. Security

We use reasonable technical and organizational measures to protect personal data, including HTTPS for the public website, limited access to company inboxes and deletion or restriction of data when it is no longer needed. No online service can guarantee absolute security.

8. Retention and deletion

We keep personal data only as long as needed for the purposes described in this policy. Support and waitlist messages are retained while needed to reply, manage the request or maintain the business relationship. Server logs are retained for a limited period by the hosting provider for security and reliability.

You can request account and data deletion through the form at elyo.fit/account-deletion/. If the form is not available, you can send the same request to info@elyo.fit. We respond to privacy and deletion requests within 30 days. We may retain limited records when required for legal, tax, security, fraud-prevention or dispute-resolution reasons.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you,
• ask for correction or deletion,
• restrict or object to processing,
• receive your data in a portable format,
• withdraw consent at any time, where processing is based on consent,
• lodge a complaint with your national data protection authority.

To exercise any of these rights, email info@elyo.fit with the subject "Privacy". We respond within 30 days.

10. App store privacy forms

The Apple App Privacy details and the Google Play Data safety form must match the final app build and this policy. They must be reviewed again whenever the app adds or removes data collection, permissions, third-party SDKs or sharing.

11. Changes to this policy

We may update this policy as the ELYO app approaches launch. The effective date at the top of this page always reflects the latest version.