Privacy Policy

Eli, operated by FRMWRK Software (“FRMWRK,” “we,” “us”).
Effective date: June 21, 2026.

This policy explains what data Eli collects, how we use it, and the choices you have. Eli is a personal health instrument: it brings your recovery, body-weight, lab, and supplement data onto one timeline so you can see how they relate. We treat that data as sensitive and handle it accordingly.

1. Information we collect

Information you provide.

• Account information — your email address and authentication credentials.
• Health and body data you enter — body weight, body-composition figures, lab results you import or type in, supplement regimens and adherence, training/session notes.

Data from services you connect (only with your authorization).

• WHOOP — if you connect your WHOOP account through WHOOP’s OAuth flow, we access the data covered by the scopes you grant: recovery (recovery score, heart-rate variability, resting heart rate), cycles (day strain, average heart rate), sleep (duration, timing, and stages), and basic profile information. We access this data solely to provide Eli’s features.
• Google Health Connect (Android) — if you enable it, Eli reads body-weight (and, if you choose, body-composition) records on your device. We only read the record types you grant and use them to populate your weight timeline.

Information collected automatically. Minimal technical and diagnostic data (such as app version and crash logs) needed to keep the app working. Eli contains no advertising trackers.

2. How we use your information

• To operate Eli — display your metrics, compute correlations and one-line interpretations, and show weekly/monthly trends.
• To keep your account and data secure.
• To send you essential service communications (e.g., about your account or sync status).

We do not use your health data for advertising, and we do not sell it.

3. WHOOP data — specific commitments

• We use WHOOP data only to provide functionality inside Eli.
• We never sell, rent, or share WHOOP data for advertising or any third party’s own purposes.
• You can revoke Eli’s access at any time from your WHOOP account settings; once revoked, we stop syncing new WHOOP data.
• Deleting your Eli account removes the WHOOP-derived data we hold for you.

4. How we store and protect your data

• Your data is stored on our infrastructure provider, Supabase (a managed PostgreSQL platform).
• Data is encrypted in transit (TLS) and at rest.
• Row-Level Security isolates each user’s data so one account cannot read another’s.
• Any third-party access tokens (e.g., WHOOP) are stored encrypted on the server and are never stored on your device.

5. How your data is shared

We do not sell your data or share it with third parties for their own purposes. We use a small set of service providers (subprocessors) strictly to run Eli:

• Supabase — database, authentication, and backend hosting.
• Cloudflare — hosting and delivery of this website.

We may disclose information if required by law or to protect the rights, safety, or security of our users or the service.

6. Data retention and deletion

• We retain your data while your account is active.
• You can export all of your data at any time from within the app.
• You can delete your account, which deletes the personal data we hold for you.
• You may also email us to request export or deletion.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your data, to withdraw consent, and to object to or restrict certain processing (GDPR), as well as to know what we collect and to request deletion (CCPA). We do not sell personal information. To exercise any right, contact us using the details below.

8. Children

Eli is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

9. International users

Your data may be processed in countries where we or our service providers operate. Where required, we apply appropriate safeguards for international transfers.

10. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the effective date; we will notify you of material changes within the app.

11. Contact

FRMWRK Software
Privacy questions: privacy@helloeli.app

This policy describes how Eli is designed to handle your data. If a feature is not yet available in your version of the app, the corresponding data is simply not collected.