Privacy Policy

• Your information is used to coach you. That is the only reason we collect it.
• Your coach can see your data. Other clients never can. Nothing you enter is public.
• We do not sell your information, and we do not advertise to you.
• There are no analytics or tracking tools in this app. We do not follow you around the internet, and we do not measure your behavior for marketing.
• Progress photos are stored privately and you can delete any of them yourself, at any time, without asking anyone.

Depending on which parts of the app you use, we hold:

Account details

Your name, email address and password. Passwords are handled by our login provider and we never see them.

Your profile

Age, gender, height, weight, your goal, your activity level, the kind of exercise you do, your typical daily steps, your program start date, and whether you prefer the light or dark theme.

Your intake questionnaire

The onboarding questions cover your date of birth, biological sex, shipping address, your work and schedule, the people around you and whether they support your goals, your cooking and eating setup, your movement, sleep, stress, water and alcohol intake, your goals and dieting history, and how ready you feel to change. There is also a health section, described separately below.

What you track day to day

Food entries including brand and barcode where you scanned one, calories and macros, water, sleep hours, alcoholic drinks, steps, workouts and the sets, reps and weights inside them, and any notes you add. Steps and sleep can also come from Apple Health, if you connect it, as described below.

Check-ins and messages

Your check-in, including your weight and your written answers about what went well, what was hard and what is on your radar. Also the messages you and your coach send each other in the app, and your journal entries.

Body measurements

Where you or your coach record them: weight, body fat percentage, skinfold measurements and body circumference measurements.

Progress photos

Covered in its own section below, because it deserves one.

Payment details

We do not store your card. Payment happens on Stripe's own checkout page. We keep only the reference codes Stripe gives us so we know your plan is active.

Technical bits

A login cookie that keeps you signed in, a cookie recording your time zone so your day starts and ends at the right moment, and a cookie noting that you are using the phone app rather than the website. That is the complete list of cookies we set. If you allow notifications in the phone app, we also keep the address Apple gives your phone for delivering them.

As part of your check-in you can take front, side and back photos so you and your coach can see changes the scale does not show. These are photos of your body, so we treat them more carefully than anything else in the app.

• They are private. They are kept in private storage with no public web address. There is no link that would let a stranger open one, even by accident, and they are never shown on any public page.
• Only three parties can see them: you, the coach assigned to you, and the site administrator who runs OLO Coaching. No other coach can open your photos, and no other client can.
• Viewing is temporary. When you or your coach open your photos, the app creates a one-off link that stops working after an hour. Copying that link out of the app does not give anybody lasting access.
• You can delete them yourself. Any photo, at any time, from inside the app, without asking your coach or us. Deleting removes the image itself, not just the entry pointing at it. Retaking a pose for the same check-in replaces the old photo and deletes the previous one.
• You agree before any photo exists. Photos are part of the coaching program, but nobody can make you take one. Before your first upload you are shown a notice explaining what is stored and who can see it, and you have to accept it. We record the date you accepted.
• They go straight from your device. The image is sent from your phone or browser directly into private storage. It does not sit on a separate server on the way.

The app asks for camera permission so you can take these photos in the app, and so you can scan food barcodes. You can also pick an existing photo from your device instead. The camera is never used in the background.

The intake questionnaire asks about your health, and your answers are sensitive. It covers whether you are pregnant, nursing or trying to conceive, diagnosed conditions such as PCOS, perimenopause or menopause, thyroid conditions, insulin resistance or diabetes, high blood pressure and digestive conditions, your medical history in your own words, whether you use a GLP-1 medication and at what dose, your regular medications, your allergies, and anything else you want your coach to know.

Your coach needs this to set your targets safely and to avoid recommending something that would hurt you. It is used for coaching and nothing else. It is never used for marketing and it is never sold.

If you also use the medical side of the service, we keep a separate clinical record: your name, email, phone number, date of birth, shipping address, which program you are on, what medication you have been prescribed and its dosing schedule, the date of your last bloodwork, and a log of appointments, shipments and prescription changes. That clinical record is locked down harder than the rest of the app: it is reachable only by the medical provider and the administrator, and not by ordinary coaches.

Your coach can upload a bloodwork report for you, as a PDF or a photo, and you can upload one yourself if your coach turns bloodwork on for you. It is kept in private storage, in the same way as your progress photos.

None of this is a substitute for medical care, and the app is not a medical record system.

How we handle health information is also set out in our Consumer Health Data Privacy Policy.

If you connect Apple Health in the iPhone app, the app reads your steps and your sleep from it. Nothing is read until you choose to connect. Typing your steps and sleep in by hand keeps working exactly as before if you never do.

What you agree to

Before anything is read, the app shows its own screen with two separate choices: whether to sync your steps and sleep, and whether your coach can see them. After that, Apple shows its own permission screen. We record the choices you make, the date you made them, and which version of the wording you were shown.

What is read

• Your steps.
• Your sleep: when you got in bed, when you got out of bed, and the hours you slept.

That is all. Apple Health can hold data from an Apple Watch or from other devices and apps that write to it, such as Oura, Garmin, Fitbit or WHOOP, so those can be where your steps and sleep come from. The app looks at the last 7 days whenever you use it, and keeps only a total for each day, not every individual reading. Nothing is ever written back to Apple Health.

How it is used

The numbers fill in your daily steps and sleep, and they count toward your daily score and your OLO Score exactly as if you had typed them. Your coach sees them, marked as coming from Apple Health. If you type a number in by hand for a day, your number is the one that counts for that day.

What we never do with it

• Apple Health data is never sold.
• It is never used for advertising or marketing.
• It is never sent to an AI service.
• It is never stored in iCloud.

It is stored with the same companies as the rest of your data, listed below, and deleting your account deletes it along with everything else.

Turning it off

You can turn syncing off in the You tab. When you do, you choose whether to keep the steps and sleep already synced or delete them. To remove the permission from Apple Health itself, open your iPhone's Settings, then Health, then Data Access & Devices.

• You. Your own data is visible to you in the app.
• Your assigned coach. They see your intake answers, your daily tracking, your check-ins, your measurements and your photos, because that is the job. Your coach also keeps their own notes and scoring on you, which are for their use rather than yours.
• The administrator. The person who runs OLO Coaching can see client data in order to run the service, assign coaches and fix problems.
• The medical provider, if you use the clinical side, for the clinical record only.
• Other clients: never. Clients cannot see each other at all.

One point worth being straight about: coaches reach your data through the app's own server, and the rule that a coach only sees their own clients is enforced by the app rather than by the storage system underneath it. We are telling you that because it is true, not because we expect it to affect you.

We use a small number of outside services to make the app work. This is the complete list.

• Supabase stores the database, runs logins, and holds your progress photos.
• Vercel hosts and runs the app.
• Stripe handles payment. When you subscribe we send Stripe your email address and internal reference codes for your account and plan. We do not send Stripe your name, address, or anything about your health or your tracking. Your card details go to Stripe directly and never reach us.
• Apple delivers notifications to the iPhone app, so it handles whatever is inside them: a reminder about your check-in, the start of a message from your coach, or a note that your coach has replied to your check-in. Apple Health, if you connect it, is on your phone. Nothing is sent from us to Apple Health.
• Resend delivers our emails, so it handles whatever is inside them: your name and email, reminders, your weekly score, and messages from your coach. Emails about the clinical side may include your name, email and the medication on file.
• Open Food Facts and USDA FoodData Central supply nutrition information when you search for a food or scan a barcode. Only the words you typed, or the barcode number, are sent. The request goes out from our server rather than from your device, so these services do not learn who you are or where you are.
• Anthropic provides the AI behind the nutrition label reader, the meal photo reader and the meal chat. Exactly what is sent to it, and what is not, has its own section below, because it deserves one.
• Calendly is used for booking calls. We only link out to it. We do not pass it any of your information; anything Calendly knows about you is what you typed into Calendly yourself.

The app uses AI in three places, and all of them send something to Anthropic. Nowhere else in the app uses AI at all. Both requests go out from our server rather than from your device.

Reading a nutrition label you photograph

When you point the camera at a nutrition label and take the picture, that picture is sent so the numbers can be read off it. It goes on its own: no name, no email, no account reference, and nothing about your health or your tracking travels with it. The photo is not stored by us once the numbers have been read off it. Take no photo and nothing is ever sent.

Reading a photo of a meal

When you photograph a meal so the app can work out what is in it, that picture is sent together with the description you typed of the meal, and nothing else: no name, no email, no account reference, and nothing about your health or your tracking. The photo is not stored by us. Take no photo and nothing is ever sent.

The meal chat

When you ask the app what to eat, every message you send goes to Anthropic, together with enough about your day for the answer to be about you rather than about nobody in particular. That is:

• Your first name.
• What you type, and the rest of that conversation.
• Your calorie and macro targets for the day, and how much of them is left for the meal you are asking about.
• What you have logged today, and which meals you have already logged.
• Your goal, for example losing weight slowly, and any way of eating you follow, for example gluten free or vegan.
• Patterns from your own food log: which foods you eat, how often, at which meal, which foods you tend to eat together, and how many of the last ninety days you logged anything at all.
• Which fuel plan you are on, and whether today is a training day for you if your plan tells the app that.

What is not sent matters just as much, so here it is:

• Not your email address, and no account or database reference to you.
• Not your intake answers, and nothing from the health section: not your allergies, not your diagnosed conditions, not your medications.
• Not your weight, your measurements or your body composition.
• Not your progress photos, or any other photo of you.
• Not the messages between you and your coach.

Anything not on the first list is not sent. Your first name is the only thing that goes with your message that could identify you, and it goes because a coach who does not use your name does not sound like a coach.

One chat message is two requests, not one. The first reads what you typed so the app knows what you are after, and gets your message and the conversation but nothing about your day. The second writes the sentence above the answer, and that is the one that gets everything listed above.

Two more things we would rather say plainly. Anthropic does not use any of this to train their models. And every calorie and macro figure you see, on a card or a tile or anywhere else, is worked out by the app itself from your own targets and from the nutrition data behind the food. None of them come from the AI. The AI reads your question and writes the sentence above the answer, and it is instructed never to state a number of its own.

• We do not sell or rent your information to anyone.
• We do not show you ads and we do not share your data with advertisers.
• We run no analytics, no tracking pixels, and no behavioral measurement of any kind.
• We do not send anything to an AI service beyond the three uses set out above, and we never send one your intake answers, your health information, your Apple Health data, your progress photos, or the messages between you and your coach.
• We do not send marketing notifications. If you allow notifications in the phone app, it only tells you about your check-in, a message from your coach, or your coach's reply to your check-in.
• We do not collect your location, your contacts, or your device advertising identifier.
• We do not read anything from Apple Health unless you connect it, and then only your steps and sleep. We never write anything to it.

You can delete individual progress photos yourself, at any time, from the app. That is immediate and permanent.

To delete your whole account, open your profile and choose Delete account. That closes your account straight away and stops any plan you are paying for from renewing.

You have 14 days to change your mind. Log back in during that time and everything is exactly as you left it. Nothing is destroyed until the 14 days are up. We built it that way on purpose: people delete things at their lowest moment, and a fortnight is enough to think again.

After that, your logs, check-ins, messages, photos and profile are deleted for good. They are gone from our live systems immediately and out of our backups within 30 days, because backups roll over on their own schedule and nobody can honestly promise instant.

You can also ask us for a copy of everything we hold about you, or ask us to delete it for you, by emailing aaron@vivolowellness.com from the address on your account. We answer those requests within 30 days.

Two things outlive a deletion, and we would rather say so than let you find out. We keep payment records for 7 years, because tax law requires it. And if you have had lab work or anything else on the clinical side, those are medical records with their own retention rules, so they stay on file with your account link removed.

Your data sits behind your login. Progress photos are in private storage that refuses requests without a valid, short-lived, individually issued link. Clinical records are walled off from ordinary coach accounts. We are a small team, and access to client data is limited to the coach working with you and the administrator.

No service can promise perfect security, and we are not going to pretend otherwise. If something goes wrong that affects your information, we will tell you.

The app is built for adults and is not intended for anyone under 18. We do not knowingly collect information from children.

If we change what we collect or who can see it, we will update this page and change the date at the top. If the change is significant, we will email you.

Questions about your privacy, requests for a copy of your data, or a deletion request all go to aaron@vivolowellness.com. A real person reads it.