Privacy Policy

ORO ("ORO," "we," "us") is an all-in-one fitness platform operated by ORO Fitness, Inc. This policy explains what we collect, why, how we use it, and the choices you have. It covers the ORO mobile app, the coach dashboard, and our website. We built ORO privacy-first: your fitness data is yours.

1. Information we collect

Account information — name, email, and authentication details (including via Google or Apple Sign-In).
Profile information — display name, username, bio, goals, height, avatar image, and the invite code you joined with.
Fitness & health data you log — workouts, sets, nutrition entries, water, weight, measurements, mood, energy, sleep, and goals.
Photos you choose to submit — meal photos for AI nutrition estimation, product-label photos for the ORO Score, and body-progress photos for AI body-composition scans. These are processed to provide the feature and stored in access-restricted, owner-only storage.
Community content and messages — posts, comments, and the messages you exchange with your coach.
Coach relationship data — the coach whose private world you join, and the program, meal plan, and challenges they assign you.
Usage & device data — app interactions, device type, OS version, push notification tokens, and diagnostics used to operate and improve the service.
Payment data — handled by our payment processors; we do not store full card numbers.

2. How we use your information

To provide the core product: tracking, AI estimates, body scans, progression, and community.
To deliver your chosen coach's prescriptions and measure adherence across training, nutrition, body, and challenges.
To send notifications you've opted into (e.g. reminders), which you can control in Settings.
To process payments, subscriptions, and coach payouts.
To understand how the app is used and to diagnose crashes and errors.
To maintain security, prevent abuse, and meet legal obligations.

3. AI processing

ORO does not build or train its own AI models. To power features such as food-photo and body-composition analysis, the ORO Score label scan, AI-generated workouts and plan drafts, the goal-vision illustration, and AI coaching, the content you provide — food photos, an optional body-composition photo, product-label photos, the messages you type to the OroAI assistant, and text such as your dietary goals, allergies, food log, and training answers — may be sent to third-party AI providers acting on our behalf under contract:

OpenRouter — routes our AI requests to the model providers below.
Anthropic (Claude models) — text features such as plan parsing, workout generation, nutrition coaching, and the OroAI assistant. These requests reach Anthropic through OpenRouter, or directly, depending on how the feature is configured.
Google (Gemini models) — image features such as food photos, body-composition photos, product-label scans, and the goal-vision illustration.

We do not send your name, email, or account ID to these providers, we do not sell your photos, and this data is not used to build advertising profiles. Before the first time a photo or health detail is sent to an AI provider, the app asks for your explicit consent — you can decline and keep using the rest of ORO.

OroAI assistant. Your OroAI conversation is stored in your ORO account so the assistant can follow the thread, and the recent messages are sent to Anthropic to generate each reply. OroAI has no access to the rest of your account — it cannot read your logs, weight, photos, or subscription. You can delete the whole conversation at any time from the OroAI screen.

AI outputs are estimates, not measurements. See the health disclaimer in section 9.

4. Sharing

Your coach sees the fitness data relevant to coaching you — workout logs and progress, nutrition adherence, weight logs and body measurements, progress photos, body-composition trend, and challenge participation — so they can prescribe and grade your program. You choose which coach's world to join.

Service providers. We use the companies below to run ORO. They process data on our behalf under contract:

Supabase — database, authentication, file storage, and server functions.
Cloudflare — hosting and delivery for our website and coach dashboard.
Stripe — card payments. Coaches connect their own Stripe account (Stripe Connect); buyers pay the coach's account directly and our fee is split off at the time of sale.
Apple App Store and Google Play — process in-app subscription purchases made on mobile.
RevenueCat — manages subscription and receipt status. Receives your ORO account ID so a purchase maps back to your account.
OpenRouter, Anthropic, and Google — AI processing (see section 3).
Expo — delivers push notifications to your device.
PostHog — product analytics (which features get used, and where people get stuck). Receives your ORO account ID.
Sentry — crash and error reporting. Receives your ORO account ID.
USDA FoodData Central, Open Food Facts, and FatSecret — food and barcode lookups. We send the search term or barcode, not information about you.

Apple Health (HealthKit) is a device integration, not a service provider — iOS only, and only if you turn it on in Settings. ORO writes the workouts and body weight you log into Apple Health, and reads your steps, active energy, and weight to display them in the app. That exchange happens on your device between ORO and the Apple Health app; the values ORO reads from Apple Health are shown in the app and are not copied to ORO's servers. You can disconnect at any time in ORO Settings or in the iPhone Health app.

We do not sell your personal data.

We may disclose information if required by law or to protect rights and safety.

5. Your rights & choices

Access & export — download your logged data at any time from inside the app.
Correct — edit your profile and logged entries in the app.
Delete — delete your account and its associated data from Settings, or ask us by email.
Notifications — granular opt-in/opt-out in Settings.
AI features — decline the AI consent prompt and keep using the rest of ORO.
Depending on your region (e.g. EEA/UK, California), you may have additional rights to access, correct, or restrict processing.

To exercise these rights, contact support@orofitness.app.

6. Data retention & security

We retain data for as long as your account is active or as needed to provide the service and meet legal obligations. Deleting your account from inside the app removes your account and the data tied to it, including the photos in your private storage. If you ask us by email instead, we verify that you own the account and complete the deletion within 30 days. Access to personal and photo data is restricted by row-level security and owner-only storage policies, and traffic is encrypted in transit. No system is perfectly secure, but we work to protect your data with industry-standard safeguards.

7. International users

ORO is available in English, Spanish, and Portuguese and serves users internationally. Your data may be processed in countries other than your own — including the United States, where ORO and several of our service providers operate. We apply appropriate safeguards for such transfers.

8. Children

ORO is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

9. Health disclaimer

ORO provides fitness and nutrition information and estimates for general wellness. It is not medical advice and is not a substitute for professional care. AI estimates (calories, macros, body fat) are approximations.

10. Changes

We may update this policy and will revise the "last updated" date. Material changes will be communicated in-app or by email.

11. Contact

Questions or requests: support@orofitness.app · ORO is operated by ORO Fitness, Inc.