Alzo Privacy Policy

Last updated: 11 September 2026

This policy describes the Android beta version of Alzo and the services below. Publishing this page does not mean that the app is already publicly available on Google Play.

This policy covers Alzo for Android, under the developer name neO-Mobile. Alzo is a workout and food journal for adults.

1. Who operates Alzo

The controller is Paolo Varano, an individual and the developer of Alzo under the name neO-Mobile. Contact for privacy and support: paolo.varano@yahoo.it.

2. Information on your device

Alzo stores your entered name, preferences, goals, experience, equipment, routines, custom exercises, workouts, loads, repetitions, RIR and notes locally. Optional features also store food and portions, nutrition targets, water, weight and inputs for energy estimates, including age, sex used by the formula, height and activity level.

These records support the journal, local statistics and suggestions. Some may reveal information about health. There is no Alzo account or central database of these records, and they are not sent to the advertising module. Calculations run on your device and do not make decisions with legal or similarly significant effects. Optional inputs can be omitted, although dependent features will be unavailable. Alzo does not integrate Health Connect or Apple Health.

3. Food product lookup

When you request a barcode lookup, Alzo sends the barcode and language to Open Food Facts over HTTPS. The service also receives your IP address and normal request information, including the app identification. Alzo does not send your profile, food journal, weight or camera images. Results are cached locally.

Online lookup is optional: you can use the included generic foods or manual entries. See the Open Food Facts privacy policy.

4. Camera and notifications

Camera images are processed locally to read barcodes and are not uploaded by Alzo. You can deny camera access and type the barcode instead. Rest reminders are scheduled locally, without a remote push notification service. Notification and exact alarm permissions can be managed in Android settings. Alzo does not request contacts, microphone or GPS access.

5. Advertising and choices

Advertising-enabled versions use Google AdMob, with banners starting from the second full launch. The internal testing build uses demonstration ad units; test ads do not mean that no information is transmitted to Google.

Alzo requests non-personalized ads. The SDK can still collect and share IP addresses, approximate location inferred from IP, device or advertising identifiers, interactions and diagnostic information for ad delivery, measurement, service analytics and fraud prevention. Requests do not include your fitness profile or journal records.

Where required, Google User Messaging Platform presents consent choices before ad requests. Use “Advertising preferences” in your profile when the form is available to manage your choices. Refusing consent may limit or prevent advertising under the applicable options, but does not prevent use of the journal and workouts. Withdrawal does not affect the lawfulness of earlier processing.

See Google’s privacy policy and Google services in partner apps. Versions with advertising requests disabled do not request banners through the Alzo module.

6. Support and legal bases

If you email support, we receive your email address and message contents through our email service. Do not include health information or full backups unless necessary for your request.

For processing within the controller’s responsibility, legal bases are providing the requested service and support (GDPR Article 6(1)(b)), consent for advertising operations requiring it (Article 6(1)(a)), and applicable legal obligations (Article 6(1)(c)). Providers explain the bases for their own processing in their policies.

Journal information, including potentially health-related records, is processed exclusively on your device for the features you choose. We do not ask you to send it to the controller. Entering this information does not constitute consent to sharing it or using it for advertising.

7. Recipients and international processing

Local records are not automatically sent to the developer. The transmissions described above involve Open Food Facts, Google for ads and consent, and the email service if you contact support. When you export a file, you select its destination or sharing app, whose own policies may apply.

Providers may process information outside the European Economic Area. Google describes applicable transfer safeguards in its policy, including adequacy decisions and standard contractual clauses where relevant. The support address uses Yahoo Mail. Correspondence is also handled by the email provider under its own privacy policy. Any advertising providers involved and their purposes are identified in the applicable consent form. The fitness journal is not shared with these providers. We do not sell the contents of your fitness profile or journal.

8. Retention, deletion and backups

Journal records remain locally until deleted. Alzo keeps a local copy of the previous state to recover from storage errors. “Delete all my data” removes the profile, routines, history, journal, cache and active session, including that previous-state copy. It does not delete exported files or information already processed by external providers. Separate technical and consent preferences may remain.

You can also clear app storage through Android settings. Android automatic backup is disabled in Alzo’s configuration. Uninstalling can cause loss of local records. JSON backups and CSV exports are not encrypted by Alzo: store and share them carefully and delete them separately. Local storage relies on operating system protections; Alzo does not add its own journal encryption.

We retain support emails while handling your request and for twelve months after it is closed, then delete them. If specific legal obligations or disputes require longer retention, we keep only the necessary correspondence for the relevant period. Providers’ retention periods and criteria are described in their own policies.

9. Your rights

Where applicable, you can request access, correction, deletion, restriction or portability, object to processing and withdraw consent. Use the contact above. We do not hold a central copy of your journal: its viewing, export and deletion tools are available directly in the app.

You may complain to the Italian data protection authority or the competent authority where you live or work. Rights under other applicable laws remain unaffected.

10. Children and changes

Alzo is intended for adults. We do not ask children to provide personal information. Contact us if you believe a child’s information has been sent to support.

We will update this policy if features or processing change and request new consent where necessary. The published policy will show its update date.

11. This website

This page is hosted on Google Firebase Hosting. When you visit, the service receives technical connection information, including your IP address, to deliver and secure the service. Google states that IP data is retained for a few months. The legal basis for serving and securing this page is the legitimate interest in making the policy accessible and protecting it (GDPR Article 6(1)(f)). This page contains no forms, ads, additional analytics tools or cookies set by our code. See Firebase privacy information.