Privacy Policy

Last Updated: May 27, 2026

At Aevora Labs LLC ("we," "us," "our"), privacy is a fundamental human right. This Privacy Policy applies to the Aevora Labs website (aevoralabs.com) and our health intelligence product, Zurelo.

1. Information We Collect

Zurelo primarily uses on-device processing. We collect the following types of information when you use our services:

• Food Images and Nutrition Labels: Images may be processed transiently through our backend and AI providers to generate nutrition estimates. We do not permanently store food images on our servers and do not use them for model training without explicit, granular consent.
• Nutrition and Profile Data: Food logs, water, weight, goals, preferences, and similar health-adjacent information are local-first. If you enable account sync, selected records may be stored in Zurelo cloud systems for your account.
• Observability & Analytics: We use Sentry for crash reporting and PostHog for product analytics. Analytics must not include food photos, raw prompts, medical records, or direct health metrics.
• Account and Subscription Data: Authentication, sync, entitlement, and store purchase metadata may be processed by Aevora Labs and platform providers such as Apple, Google, Supabase, and RevenueCat.

2. How We Use Information

We use the data collected to:

• Provide nutritional insights and tracking.
• Sync your data across your personal devices when you enable account sync.
• Improve reliability, abuse prevention, and product quality using minimized diagnostics.
• Send you product updates and important notifications (if you opt in).

3. Third-Party Services

Zurelo uses service providers for hosting, AI analysis, analytics, crash reporting, authentication, subscriptions, data requests, and food databases. Current providers include Cloudflare, Supabase, OpenAI, Google Gemini, USDA FoodData Central, Open Food Facts, Sentry, PostHog, Resend, RevenueCat, Apple, and Google. We maintain a sub-processor register and review it before launch and material vendor changes.

4. Data Retention

Local-only data remains on your device until you delete it or uninstall the app. Cloud sync, account, analytics, and DSR records are retained only as long as needed for product, security, legal, and compliance purposes. If you request deletion, we target completion within 30 days unless a legal exception applies.

5. Your Privacy Rights

You may request access, export, deletion, correction, restriction, objection, or withdrawal of consent by using in-app controls where available or emailing privacy@aevoralabs.com. We will verify your request before disclosing or deleting account data.

6. Cross-Product Data

Aevora Labs LLC operates multiple products (Zurelo, PayScope). We do not share user data between products. Your Zurelo health data is never accessible to PayScope, and vice versa. Each product operates with its own independent data store and authentication system.

7. Contact Us

If you have any questions about this Privacy Policy, contact us at:

• Privacy & data requests: privacy@aevoralabs.com
• General inquiries: hello@aevoralabs.com