Privacy Policy

Effective Date: May 23, 2026 · Updated: October 3, 2026

This Privacy Policy and Liability Waiver ("Policy") governs your use of the L3X mobile application (the "App"), operated by Korcan Trading ("Korcan Trading," "we," "us," or "our"). By downloading, accessing, or using the App, you agree to be bound by the terms set forth herein. If you do not agree to these terms, do not use the App.

01 Medical Disclaimer & Limitation of Liability

02 Data Collection, Storage, and Custodianship

Your Account: You sign in with Apple or Google. We keep the email address that sign-in gives us (if you choose Hide My Email, the relay address Apple creates for you) and your name, as Apple or Google shares it or as you type it in the App. We use them to sign you in on your devices and to show your name in the App. Your name and email address are never sent to Google Gemini (section 04).

Secure Cloud Storage: We operate on a strict "Privacy by Design" architecture. So that your training syncs seamlessly across your devices, your account details, your profile (sex, date of birth, height, weight, goals, schedule and equipment), your training plan and exercise library, the workouts and sets you log, the heart rate and daily scores described in section 05, the meals you log (their descriptions and estimates, never their photos), and your settings are securely stored in a managed Postgres database hosted by Supabase.

Strict Access Controls: We utilize end-to-end security rules ensuring that your data is strictly siloed. Only you, when authenticated via your personal account, have the ability to read or write your personal data. We do not harvest, monetize, or sell your personal data, biometric data, or usage metrics, and we do not look at your training history or the health values stored with it except to answer a request you send us.

Data Deletion: You retain full custodianship of your data. You may initiate a complete deletion of your account and all associated data stored on our servers at any time directly through the App settings.

03 Crash Reports, and What We Do Not Collect

The App contains no advertising, no behavioural tracking, and no product analytics. We do not measure which screens you open or how long you spend in them, we do not build a profile of your behaviour, and we never sell your data or share it for advertising. Beyond the storage described in section 02, the one outside service that receives what you log is described in section 04, and only if you turn it on. When you speak a meal instead of typing it, your voice is turned into text by Apple's speech recognition, under the microphone and speech permissions iOS asks you for; that happens before anything is logged.

We do collect crash and error reports, using a service called Sentry, so that a failure on your device reaches us instead of going unnoticed. A report contains the technical trace of what went wrong, your device model, your operating system version, and the App version — and nothing else. Personal identifiers are disabled at the source: reports are not linked to your name, your account, or any health or training data.

Two further things happen outside the App:

• If you have chosen to share analytics with developers in your device settings, Apple may give us aggregate, anonymised reports. That data is collected by Apple, not by us, and cannot be linked to your account.
• Your subscription is billed by Apple and managed through RevenueCat, which receives your account's ID (a random code that contains no name or email address), your subscription purchases and your subscription status, so the App knows whether your membership is active. It receives no health or training data.

04 AI Meal Logging and Coaching

Meal logging and the coaching notes on Insights use Gemini, an AI service from Google. Nothing is sent unless you turn it on. The App asks first, during setup or the first time you log a meal, and you can turn it off at any time in Settings.

What is sent when it is on:

• The meals you log: the text you type, the transcript of what you say, and the photos you take or choose.
• The focus readings on Insights: sleep, heart-rate variability (HRV), resting heart rate, VO2 max, steps and exercise minutes, some of which come from Apple Health, and summaries of your training such as consistency and volume trend.

What is never sent: your name, your email address, or the sets you log.

Requests pass through our server, which forwards them to Google over an encrypted connection. Google uses them only to return the calories and macros for a meal, or a coaching note. We use Google's paid Gemini API, under whose terms Google does not use your requests or its answers to improve its products; it keeps them for a limited period solely to detect and prevent abuse.

If you leave it off, the App cannot read a meal, so meal logging is unavailable, and Insights shows its built-in coaching notes instead.

05 Apple HealthKit Integration

With your explicit, opt-in consent, the App integrates with Apple HealthKit to read specific health and fitness data.

Requested Data Types: We may request read access to metrics including, but not limited to: Heart Rate, Heart Rate Variability (HRV), VO2 Max, Sleep Analysis, Resting Heart Rate, Workouts, and Active Energy Burned.

Strict Usage Limitations: In strict compliance with Apple's Developer Guidelines:

• Most Health data never leaves your device. Readings such as heart-rate variability, sleep and resting heart rate are read from Apple Health on your device at the moment a screen needs them, used to calculate what you see, and are not stored by us. They leave your device only if you turn on AI coaching, and then only as the focus readings described in section 04, sent to Google Gemini to write your coaching note.
• The exception is the heart rate recorded during a workout you complete in the App: its average and maximum, and, when an Apple Watch records the session, its heart-rate trace (one reading every ten seconds). These are saved alongside that session and sync with the rest of your training history, so your log and its history are complete across your devices.
• The App also keeps one score a day for each of its three gates — Strength, Move and Recover, each from 0 to 100 — so Insights can show how they have changed since last week. Move and Recover are calculated from the readings above; the scores sync with your training history, and the readings themselves are not kept.
• With your permission, the App also writes workouts you complete back to Apple Health, so your rings and history stay accurate.
• We do not use or disclose Health API data to third parties for advertising, marketing, data mining, or other use-based data monetization.
• You may revoke the App's access to Health APIs at any time through your device's system settings.

06 Children's Privacy (COPPA Compliance)

The App is intended for adults engaged in strength training and longevity optimization. We do not knowingly solicit data from or market to children under the age of 18. By using the App, you represent that you are at least 18 years of age.

07 Governing Law

This Policy shall be governed by and construed in accordance with the laws of the jurisdiction in which Korcan Trading operates, without regard to its conflict of law provisions.

08 Policy Modifications

We reserve the right to modify this Policy at our sole discretion. When we do, we post the revised Policy on this page and update the date at the top. Continued use of the App following any modifications constitutes your acceptance of the revised Policy. Please check this page periodically for updates.

09 Contact

For any question about this Policy, to request a copy of your data, or to ask us to delete it, write to hello@l3x.info. You can also delete your account and all of its data yourself, at any time, from the App's settings.