Privacy Policy

Last updated: September 25, 2026 · ORO Fitness Inc.

ORO ("ORO," "we," "us") is an all-in-one fitness platform operated by ORO Fitness Inc., a Florida corporation. This policy explains what we collect, why, how we use it, and the choices you have. It covers the ORO mobile app, the coach dashboard, and our website. We built ORO privacy-first: your fitness data is yours.

1. Information we collect

• Account information: your name, your email address, and the password you set. If you choose Sign in with Apple instead of a password, Apple gives us a private account identifier and the email you pick to share (which can be an Apple relay address); Apple never gives us your Apple password, and we keep the Apple sign-in token only so we can revoke it when you delete your account. ORO does not offer Sign in with Google.
• Guest accounts: you can start using ORO before creating an account. The app then makes an anonymous guest account that holds what you enter (your answers, logs and plan) under a random identifier, with no name, email or password. Saving the account later keeps that data under your new login. A guest account that is never saved and has had no activity for 30 days is deleted with its data, except while it has a trial, a gift or paid subscription, or a coach.
• Profile information: display name, username, bio, goals, height, avatar image, and the invite code you joined with.
• Fitness & health data you log: workouts, sets, nutrition entries, water, weight, measurements, mood, energy, sleep, and goals.
• Photos you choose to submit: meal, product-label and menu photos for the scanner features; optional photos for a body-composition scan; and progress photos you save to your journal. Saving a progress photo does not itself send it to AI. Stored photos use access-restricted storage. Your current coach can view the meal and progress photos relevant to coaching you, as described below.
• Community content and messages: posts, comments, and the messages you exchange with your coach.
• Coach relationship data: the coach whose private world you join, and the program, meal plan, and challenges they assign you.
• Usage & device data: app interactions, device type, OS version, push notification tokens, and diagnostics used to operate and improve the service.
• Payment data: handled by our payment processors; we do not store full card numbers.

2. How we use your information

• To provide the core product: tracking, AI estimates, body scans, progression, and community.
• To deliver your chosen coach's prescriptions and measure adherence across training, nutrition, body, and challenges.
• To send notifications you've opted into (e.g. reminders), which you can control in Settings.
• To process payments, subscriptions, and coach payouts.
• To understand how the app is used and to diagnose crashes and errors.
• To measure which of our ads on Meta and TikTok bring new members (see "Ads and measurement" below).
• To maintain security, prevent abuse, and meet legal obligations.

3. AI processing

ORO does not build or train its own AI models. To power features such as food-photo and body-composition analysis, the ORO Score label scan, the ORO Menu restaurant-menu scan, AI-generated workouts, meal plans and plan drafts, the goal-vision illustration, and AI coaching, the content you provide (food photos, an optional body-composition photo, product-label photos, restaurant-menu photos, the messages you type to the OroAI assistant, the posts and comments you write in a community, and text such as your dietary goals, allergies, food log, and training answers) may be sent to third-party AI providers acting on our behalf under contract:

• OpenRouter: routes our AI requests to the model providers below.
• Google (Gemini models): every AI feature in ORO. That covers the image features (food photos, body-composition photos, product-label scans, restaurant-menu scans, and the goal-vision illustration) and the text features (plan parsing, workout generation, meal-plan generation, nutrition coaching, the OroAI assistant, and community translation). All of them reach Google through OpenRouter.

We do not send your name, email, or account ID to these providers, we do not sell your photos, and this data is not used to build advertising profiles. Before the first time a photo or health detail is sent to an AI provider, the app asks for your explicit consent. You can decline and keep using the rest of ORO.

Community translation. With your AI consent, a post or comment you publish in a community may be sent to Google through OpenRouter and stored in English, Spanish and Portuguese. Each member can read it in their app language with a "See original" option. Without consent, or while a translation is unavailable, your original text remains visible. This applies only to published community content, never to private messages with your coach. Delete the post and its translations go with it.

OroAI assistant. Your OroAI conversation is stored in your ORO account so the assistant can follow the thread, and the recent messages are sent to Google to generate each reply. OroAI has no access to the rest of your account: it cannot read your logs, weight, photos, or subscription. You can delete the whole conversation at any time from the OroAI screen.

AI outputs are estimates, not measurements. See the health disclaimer in section 9.

4. Sharing

Your coach sees the fitness data relevant to coaching you (workout logs and progress, nutrition adherence, weight logs and body measurements, progress photos, body-composition trend, and challenge participation), so they can prescribe and grade your program. You choose which coach's world to join.

Service providers. We use the companies below to run ORO. They process data on our behalf under contract:

• Supabase: database, authentication, file storage, and server functions.
• Cloudflare: hosting and delivery for our website and coach dashboard, and page-view counting on our website through Cloudflare Web Analytics. That counter uses no cookies, does not fingerprint your device, does not follow you to other sites, and does not store your IP address. It tells us how many people opened a page and roughly where in the world they were, and nothing that identifies you.
• Stripe: card payments. Coaches connect their own Stripe account (Stripe Connect); buyers pay the coach's account directly and our fee is split off at the time of sale.
• Apple App Store and Google Play: process in-app subscription purchases made on mobile.
• RevenueCat: manages subscription and receipt status. Receives your ORO account ID so a purchase maps back to your account.
• OpenRouter and Google: AI processing (see section 3).
• Expo: delivers push notifications to your device.
• PostHog: product analytics (which features get used, and where people get stuck). Receives your ORO account ID. We ask it not to look up your location from your IP address, and we do not send it your location.
• Sentry: crash and error reporting. Receives your ORO account ID.
• Meta (Facebook and Instagram): measures which of our ads led to an app install, a sign-up, a started free trial or a subscription. Receives the install event, the device's advertising ID only if you allow tracking, and the trial and subscription events. Never your name, email, photos, meals, workouts or health data.
• TikTok: the same measurement for our TikTok ads. Receives the install event, the device's advertising ID only if you allow tracking, and sign-up and trial events. Never your name, email, photos, meals, workouts or health data.
• Cloudflare: sends ORO's email (your welcome message, password resets, answers from support) and receives the email you send to [email protected]. Receives your name, your email address, your language, and the contents of messages you exchange with us. Cloudflare also serves this website and delivers our exercise videos.
• Google (Gmail): the mailbox our [email protected] address forwards to, which holds a copy of the email you send us.
• Telegram: internal alerting for our own team. When you file a support ticket or report a bug in the app, its reference number, subject and message text are relayed to the founder so someone sees it quickly. Your email address is not included.
• Food database: ORO ships with its own food database, built from the public USDA FoodData Central dataset. Searching for a food is answered on your device, so a food search sends nothing anywhere. Reading a nutrition label or a restaurant menu with the camera is a different thing and does leave your device: those photos go to the AI providers named in section 3.

Apple Health (HealthKit) is a device integration, not a service provider: iOS only, and only if you turn it on in Settings. ORO writes the workouts, active energy and body weight you log into Apple Health, and reads only your steps and active energy to display them in the app. That exchange happens on your device between ORO and the Apple Health app; the values ORO reads from Apple Health are shown in the app and are not copied to ORO's servers. You can disconnect at any time in ORO Settings or in the iPhone Health app.

Health Connect (Android) works the same way on Android, only if you turn it on in Settings. ORO writes the workouts (exercise sessions), active calories and body weight you log into Health Connect, and reads only your steps and active calories to display them in the app. The values ORO reads from Health Connect stay on your device, are not copied to ORO's servers, and are never used for advertising. You can disconnect at any time in ORO Settings or in the Health Connect app.

We do not sell your personal data. We may disclose information if required by law or to protect rights and safety.

Ads and measurement

ORO advertises on Meta and TikTok. To know which ads work, the app tells those companies when an install, sign-up, free trial or subscription came from one of their ads. On iPhone we only use your advertising ID if you tap "Allow" on Apple's "Allow ORO to track" prompt, and you can change that any time in Settings > Privacy & Security > Tracking. On Android you can reset or delete your advertising ID in your phone's Google settings. We do not sell your data, and nothing about your body, meals, workouts or photos is ever sent to an advertising company.

5. Your rights & choices

• Access & export: download your logged data at any time from inside the app.
• Correct: edit your profile and logged entries in the app.
• Delete: delete your account and its associated data from Settings, or ask us by email.
• Notifications: granular opt-in/opt-out in Settings.
• AI features: decline the AI consent prompt and keep using the rest of ORO.
• Depending on your region (e.g. EEA/UK, California), you may have additional rights to access, correct, or restrict processing.

To exercise these rights, contact [email protected].

6. Data retention & security

We retain data for as long as your account is active or as needed to provide the service and meet legal obligations. Deleting your account from inside the app removes your account and the data tied to it, including the photos in your private storage. If you ask us by email instead, we verify that you own the account and complete the deletion within 30 days. Records already sent to the analytics, error-tracking, subscription and ad partners listed above may stay with them under their own retention periods; email us and we will ask them to remove what is tied to your account. Access to personal and photo data is restricted by row-level security and storage policies for you and your authorized current coach, and traffic is encrypted in transit. No system is perfectly secure, but we work to protect your data with industry-standard safeguards.

7. International users

ORO is available in English, Spanish, and Portuguese and serves users internationally. Your data may be processed in countries other than your own, including the United States, where ORO and several of our service providers operate. We apply appropriate safeguards for such transfers.

8. Children

ORO is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

9. Health disclaimer

ORO provides fitness and nutrition information and estimates for general wellness. It is not medical advice and is not a substitute for professional care. AI estimates (calories, macros, body fat) are approximations.

10. Changes

We may update this policy and will revise the "last updated" date. Material changes will be communicated in-app or by email.

11. Contact

Questions or requests: [email protected] · ORO is operated by ORO Fitness Inc.