Privacy Policy

Last updated: June 18, 2026

At Nexa, your privacy is a priority. This policy explains what data the Nexa app ("the App") collects, how it is used, and the rights you have under Quebec's Law 25 (Act respecting the protection of personal information in the private sector). For sensitive information, in particular your health data, we obtain your explicit, separate consent in the App before processing it.

1. Data we collect

We only collect the data needed for the App to work:

  • Account: email address and password (encrypted) to create and secure your account.
  • Profile & health: sex, age, height, weight, body measurements, goals, workouts, sets, nutrition, hydration and progress photos.
  • Photos: the meal and progress photos you choose to add. Meal photos may be sent to our AI provider for analysis.
  • Health data (optional): if you allow it, Nexa reads/writes certain data from Apple Health or Health Connect.
  • Usage data: basic technical information (device type, error logs) to keep the service stable.

2. How we use your data

We never sell your personal data and do not use your health data for advertising.

  • Provide and personalize the tracking features.
  • Compute your goals, statistics, analytics and recommendations.
  • Power the AI features (coach, meal recognition, program and meal-plan generation).
  • Sync your data across your devices.
  • Communicate with you for support and notifications.

3. Consent

We process your data on the basis of your consent. For sensitive information such as your health data, this consent is obtained explicitly and separately in the App, and you can withdraw it at any time by deleting the relevant data or your account. Withdrawing consent may limit some features.

4. Sharing with third parties

Your data is only shared with the providers strictly required for the App to work:

  • Hosting & database: our cloud infrastructure providers store your data securely.
  • AI provider: meal photos and coach conversation content are processed by a third-party AI service only to generate a response.
  • Friends: information you choose to share (public profile, routines, messages, leaderboards) is visible to the relevant users.

5. Health data

Data from Apple Health and Health Connect is used exclusively inside the App. It is never used for marketing or shared with third parties for advertising, in line with Apple's and Google's requirements.

6. Transfer of data outside Quebec

Some of our providers (hosting, database and AI provider) process and store information outside Quebec, in particular in the United States. This data may therefore be subject to the laws of those jurisdictions. We select providers that offer adequate safeguards and share with them only the information necessary to deliver the service.

7. Retention & deletion

Your data is kept as long as your account is active. You can export your data from the App at any time, or request deletion of your account and all your data by contacting us or from the App settings.

8. Security

We implement technical measures (encryption in transit, authentication, row-level access rules) to protect your data. In the event of a confidentiality incident involving a risk of serious harm, we will notify affected individuals and the Commission d'accès à l'information (CAI), as required by Law 25. As no system is infallible, we cannot guarantee absolute security.

9. Your rights

Under Quebec's Law 25 and applicable laws, you have rights of access, rectification, deletion, portability and withdrawal of consent regarding your personal information. You may also file a complaint with the Commission d'accès à l'information (CAI). To exercise these rights, write to the person responsible listed below.

10. Person in charge of the protection of personal information

As required by Law 25, the person responsible for the protection of personal information at Nexa is:

Shawn — nexa.co.app@gmail.com

You can contact this person for any question, access, rectification or deletion request, or any complaint regarding the processing of your data.

11. Children

Nexa is not intended for people under 16. We do not knowingly collect data about minors.

12. Changes

We may update this policy. Any significant change will be signaled in the App or on this site, with a revised update date.

13. Contact

For any question about this policy, contact the person in charge of the protection of personal information listed in section 10, or the support address shown on this site.