Privacy Policy
Last updated: September 2, 2026 · ORO Fitness Inc.
ORO ("ORO," "we," "us") is an all-in-one fitness platform operated by ORO Fitness Inc., a Florida corporation. This policy explains what we collect, why, how we use it, and the choices you have. It covers the ORO mobile app, the coach dashboard, and our website. We built ORO privacy-first: your fitness data is yours.
1. Information we collect
- Account information: your name, your email address, and the password you set. ORO does not offer Sign in with Google or Sign in with Apple, so no third-party sign-in provider receives anything about you.
- Profile information: display name, username, bio, goals, height, avatar image, and the invite code you joined with.
- Fitness & health data you log: workouts, sets, nutrition entries, water, weight, measurements, mood, energy, sleep, and goals.
- Photos you choose to submit: meal photos for AI nutrition estimation, product-label photos for the ORO Score, and body-progress photos for AI body-composition scans. These are processed to provide the feature and stored in access-restricted, owner-only storage.
- Community content and messages: posts, comments, and the messages you exchange with your coach.
- Coach relationship data: the coach whose private world you join, and the program, meal plan, and challenges they assign you.
- Usage & device data: app interactions, device type, OS version, push notification tokens, and diagnostics used to operate and improve the service.
- Payment data: handled by our payment processors; we do not store full card numbers.
2. How we use your information
- To provide the core product: tracking, AI estimates, body scans, progression, and community.
- To deliver your chosen coach's prescriptions and measure adherence across training, nutrition, body, and challenges.
- To send notifications you've opted into (e.g. reminders), which you can control in Settings.
- To process payments, subscriptions, and coach payouts.
- To understand how the app is used and to diagnose crashes and errors.
- To maintain security, prevent abuse, and meet legal obligations.
3. AI processing
ORO does not build or train its own AI models. To power features such as food-photo and body-composition analysis, the ORO Score label scan, the ORO Menu restaurant-menu scan, AI-generated workouts, meal plans and plan drafts, the goal-vision illustration, and AI coaching, the content you provide (food photos, an optional body-composition photo, product-label photos, restaurant-menu photos, the messages you type to the OroAI assistant, the posts and comments you write in a community, and text such as your dietary goals, allergies, food log, and training answers) may be sent to third-party AI providers acting on our behalf under contract:
- OpenRouter: routes our AI requests to the model providers below.
- Google (Gemini models): every AI feature in ORO. That covers the image features (food photos, body-composition photos, product-label scans, restaurant-menu scans, and the goal-vision illustration) and the text features (plan parsing, workout generation, meal-plan generation, nutrition coaching, the OroAI assistant, and community translation). All of them reach Google through OpenRouter.
We do not send your name, email, or account ID to these providers, we do not sell your photos, and this data is not used to build advertising profiles. Before the first time a photo or health detail is sent to an AI provider, the app asks for your explicit consent. You can decline and keep using the rest of ORO.
Community translation. So that members who read different languages can talk to each other, a post or comment you publish in a community is sent to Google (through OpenRouter) and stored in English, Spanish and Portuguese, and each member reads it in their own app language with a "See original" option. This applies only to what you publish in a community, never to your private messages with your coach, and never to anything else in your account. It happens automatically when you post, because a translation that arrived later would be no use to the person reading. Delete the post and its translations go with it.
OroAI assistant. Your OroAI conversation is stored in your ORO account so the assistant can follow the thread, and the recent messages are sent to Google to generate each reply. OroAI has no access to the rest of your account: it cannot read your logs, weight, photos, or subscription. You can delete the whole conversation at any time from the OroAI screen.
AI outputs are estimates, not measurements. See the health disclaimer in section 9.
4. Sharing
Your coach sees the fitness data relevant to coaching you (workout logs and progress, nutrition adherence, weight logs and body measurements, progress photos, body-composition trend, and challenge participation), so they can prescribe and grade your program. You choose which coach's world to join.
Service providers. We use the companies below to run ORO. They process data on our behalf under contract:
- Supabase: database, authentication, file storage, and server functions.
- Cloudflare: hosting and delivery for our website and coach dashboard, and page-view counting on our website through Cloudflare Web Analytics. That counter uses no cookies, does not fingerprint your device, does not follow you to other sites, and does not store your IP address. It tells us how many people opened a page and roughly where in the world they were, and nothing that identifies you.
- Stripe: card payments. Coaches connect their own Stripe account (Stripe Connect); buyers pay the coach's account directly and our fee is split off at the time of sale.
- Apple App Store and Google Play: process in-app subscription purchases made on mobile.
- RevenueCat: manages subscription and receipt status. Receives your ORO account ID so a purchase maps back to your account.
- OpenRouter and Google: AI processing (see section 3).
- Expo: delivers push notifications to your device.
- PostHog: product analytics (which features get used, and where people get stuck). Receives your ORO account ID.
- Sentry: crash and error reporting. Receives your ORO account ID.
- Cloudflare: sends ORO's email (your welcome message, password resets, answers from support) and receives the email you send to [email protected]. Receives your name, your email address, your language, and the contents of messages you exchange with us. Cloudflare also serves this website and delivers our exercise videos.
- Google Workspace: the mailbox behind [email protected], which holds a copy of the email you send us.
- Telegram: internal alerting for our own team. When you file a support ticket or report a bug in the app, its reference number, subject and message text are relayed to the founder so someone sees it quickly. Your email address is not included.
- Food database: ORO ships with its own food database, built from the public USDA FoodData Central dataset. Searching for a food is answered on your device, so a food search sends nothing anywhere. Reading a nutrition label or a restaurant menu with the camera is a different thing and does leave your device: those photos go to the AI providers named in section 3.
Apple Health (HealthKit) is a device integration, not a service provider: iOS only, and only if you turn it on in Settings. ORO writes the workouts and body weight you log into Apple Health, and reads your steps, active energy, and weight to display them in the app. That exchange happens on your device between ORO and the Apple Health app; the values ORO reads from Apple Health are shown in the app and are not copied to ORO's servers. You can disconnect at any time in ORO Settings or in the iPhone Health app.
We do not sell your personal data. We may disclose information if required by law or to protect rights and safety.
5. Your rights & choices
- Access & export: download your logged data at any time from inside the app.
- Correct: edit your profile and logged entries in the app.
- Delete: delete your account and its associated data from Settings, or ask us by email.
- Notifications: granular opt-in/opt-out in Settings.
- AI features: decline the AI consent prompt and keep using the rest of ORO.
- Depending on your region (e.g. EEA/UK, California), you may have additional rights to access, correct, or restrict processing.
To exercise these rights, contact [email protected].
6. Data retention & security
We retain data for as long as your account is active or as needed to provide the service and meet legal obligations. Deleting your account from inside the app removes your account and the data tied to it, including the photos in your private storage. If you ask us by email instead, we verify that you own the account and complete the deletion within 30 days. Access to personal and photo data is restricted by row-level security and owner-only storage policies, and traffic is encrypted in transit. No system is perfectly secure, but we work to protect your data with industry-standard safeguards.
7. International users
ORO is available in English, Spanish, and Portuguese and serves users internationally. Your data may be processed in countries other than your own, including the United States, where ORO and several of our service providers operate. We apply appropriate safeguards for such transfers.
8. Children
ORO is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.
9. Health disclaimer
ORO provides fitness and nutrition information and estimates for general wellness. It is not medical advice and is not a substitute for professional care. AI estimates (calories, macros, body fat) are approximations.
10. Changes
We may update this policy and will revise the "last updated" date. Material changes will be communicated in-app or by email.
11. Contact
Questions or requests: [email protected] · ORO is operated by ORO Fitness Inc.