Global Privacy & Terms

Compliance Accountability & Contact

We are Aureon FitApp Inc., federally incorporated in Canada and operating as Aureon Performance from our head office in Ontario, Canada. We are the data controller and, under PIPEDA, the accountable organization for the personal information described here.

Registered address: Aureon FitApp Inc., 350 Bay St, Suite 1300B, Toronto, Ontario

To keep accountability unambiguous, electronic channels are split by function:

• · Privacy Lead · EU & UK data-subject inquiries (EU/UK Article 27 representative: Prighter, app.prighter.com/portal/aureonperformance): privacy@aureonperformance.com
• · General Counsel · Corporate legal notices · Compliance-infrastructure mapping: legal@aureonperformance.com

Information we collect

Depending on how you interact with us, we may collect categories of information such as:

• Profile variables. Display name, birthdate (for age verification), sex, and the email returned by Apple or Google OAuth, or, for Guest sessions, an anonymous device token rather than an identifying account.
• Usage & performance. In-app activity (e.g., workouts logged, protocol edits, engagement signals), feature usage, and purchase-funnel events, collected via PostHog product analytics and never linked to health data.
• Diagnostics. Crash reports and performance traces, collected via Sentry, scrubbed of biometric, hormone, and authentication-token values before transmission, and not linked to your account identity.
• Device & technical. Device type, OS version, app version, locale, IP address, mobile identifiers compatible with platform policies, and similar technical metadata.
• Location. A city-level location string only, derived on-device and reverse-geocoded. We never transmit or store precise GPS coordinates. See Device permissions.
• Payment & billing. Mobile subscriptions are billed through the Apple App Store or Google Play, which show the price at the time of purchase, and managed via RevenueCat. We receive subscription status, product identifiers, and renewal dates, never full payment card details. Web prices are shown on /pricing, but web checkout via Stripe is currently paused: our website is not processing live subscription purchases at this time.
• Communications. Content you send us (support tickets, feedback, survey responses) and related correspondence metadata.
• AI coach conversations. The messages you send to the in-app AI coach and the replies it gives you. Anthropic processes them to write each reply. When a reply is played aloud, its text is sent to ElevenLabs to produce the audio. Each message is deleted automatically 30 days after it is sent.
• Physical biometrics. Height, body weight, body-fat percentage, resting heart rate, peak heart rate, and the free-text biomechanical constraints or injury-rehabilitation history you choose to record, used to calibrate load, scaling, and movement contraindications. Where you allow it, some of these values are also read from Apple Health or Health Connect. The full list of what we read is under Health data sync.
• Declared clinical context and allergies. Clinical context you choose to declare from a fixed list (celiac, type 1 diabetes, type 2 diabetes, high blood pressure), and the food allergies you list, picked from a fixed list or typed in yourself. Clinical context is used only to constrain how meals are composed and to add one training technique cue. Allergies are treated as hard exclusions when meals are composed. Both are included in the AI requests that compose your meals, and clinical context also in the workout requests it adds a cue to. Clinical context is special-category health data, and the section that collects it appears only after you give health-data consent. Neither is ever used for advertising or audience building.
• Special-category data. Where you choose to provide it: clinical biomarkers and hormone-panel values synthesized from the lab documents you upload, the physique reference images you submit for body-composition analysis, and menstrual-cycle tracking details, each processed via Anthropic Claude, provided by Anthropic PBC through its commercial API. These are special-category / sensitive personal data under GDPR Article 9 and equivalent US "sensitive personal information" standards, and are processed only on your explicit, opt-in consent, which you may withdraw at any time. See Biometric & Health Data.

On our website, we also use a small set of cookies and similar technologies (such as browser local storage and session storage). See our Cookie Policy for exactly what is set, by whom, for what purpose, and how to control it.

How we use information

We use personal information for purposes including:

• Service delivery. Creating and maintaining accounts, generating and adapting training and nutrition protocols, computing Aureon scores (including BioAge), syncing across devices, and providing customer support.
• Personalization & product improvement. Tailoring recommendations and improving models and workflows, subject to this Policy and applicable law.
• Security, integrity & fraud prevention. Detecting abuse, securing infrastructure, investigating incidents, and enforcing our Terms.
• Legal compliance. Complying with law, regulation, lawful requests, and protecting rights and safety.
• Communications. Transactional messages (billing, security alerts), service announcements, and, where permitted, marketing communications you can opt out of.

Legal Bases for Processing (GDPR · UK GDPR · PIPEDA)

Where cross-border frameworks require an explicit lawful basis, we rely on the following, and only for the purposes stated in this Policy:

• Performance of a contract. Operating your account, computing performance metrics, and delivering the protocols you request.
• Explicit consent. Required under GDPR Article 9, and aligned with PIPEDA's consent principle, before we read or synthesize any special-category signal: Apple Health and Health Connect data, the clinical biomarkers and hormone-panel values drawn from documents you upload, the physique images you submit for body-composition analysis, menstrual-cycle details, and any clinical context you declare. You may withdraw consent at any time through operating-system permissions or in-app controls.
• Legitimate interests. Securing infrastructure, preventing fraud and abuse, maintaining service reliability, and improving product architecture, balanced against your fundamental rights and freedoms.
• Legal obligations. Meeting Canadian federal and provincial record-retention, tax, audit, and statutory disclosure duties.

Sharing & disclosure

We may share personal information with:

• Service providers & subprocessors. Vendors that host infrastructure, provide analytics (where permitted), deliver customer-support tooling, security services, payments facilitation (as applicable), email delivery, AI inference, and text-to-speech, subject to contractual confidentiality and security expectations.
• Legal & safety. Disclosures required by law, regulation, legal process, or governmental requests, or to protect the rights, safety, and security of Aureon, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate safeguards and notices where required.

We do not sell your personal information for monetary consideration in the conventional sense of selling customer lists to unrelated buyers. We also do not share personal information with data brokers for their independent marketing purposes. Where regional laws define "sale" or "sharing" broadly (such as the California CPRA context), we honor those broader definitions and treat the Global Privacy Control (GPC) browser signal, where enabled, as a valid opt-out-of-sale-and-sharing request for that browsing session.

Artificial intelligence processing

To generate the training sessions the app prescribes, compose nutrition protocols, list the ingredients in kitchen photos, interpret lab uploads, summarize progress photos, write protocol and biomarker narratives, reply to you in the AI coach chat, and screen uploaded images for safety, your inputs are processed by Anthropic Claude, provided by Anthropic PBC through its commercial API. Anthropic processes the prompt and the model response in order to return a result, and under its commercial API terms customer inputs and outputs are not used to train Anthropic's models by default.

Anthropic is the only provider that generates AI output from your data. When a coach chat reply or a website support assistant reply is played aloud, ElevenLabs turns the text of that reply into speech. It generates no content of its own. No Google AI service is involved in any part of the pipeline. Meal photos and kitchen photos are processed in memory for a single analysis and are not persisted.

Where technically feasible, prompts sent for inference are limited to the physiological and behavioral fields the task needs. Free-text fields you write yourself (for example, injury notes) could still be identifying in edge cases, so avoid including unnecessary personal detail in them.

Human review may occur for safety, quality assurance, abuse prevention, or compliance monitoring. You should avoid submitting unnecessary sensitive PII in chat, notes, or unstructured fields. Retention of model inputs/outputs is managed under operational and security policies (typically retained only as long as needed for service delivery, troubleshooting, safety, and legal compliance, unless a longer period is required by law).

AI-generated outputs (protocols, meal plans, biomarker narratives) are advisory only. No output triggers a legally or similarly significant decision about you within the meaning of GDPR Article 22. You always remain free to disregard or seek human review of any AI-generated recommendation through our support channels. Full disclaimers appear in our AI Consent Wall and Medical Disclaimer.

Security

We implement administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit (TLS) for all endpoints, row-level access controls in our database limiting each account to its own rows, and encryption at rest provided by our infrastructure providers. No method of transmission or storage is completely secure; we encourage strong, unique passwords and keeping your device's operating system current.

Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements:

• · Account, workout, nutrition, biometric, and photo records: retained for the life of your account, because the service is built to show your history and long-term trends. When you delete your account, live data is removed immediately, and full erasure (including residual encrypted backups, which persist only until standard overwrite cycles complete) is finalized within 30 days.
• · Special-category data (clinical biomarkers, hormone panels, menstrual/reproductive fields, declared clinical context): retained for the life of your account, or removed sooner if you withdraw the specific consent that authorized it. Special-category data should not outlive the consent behind it.
• · AI coach conversations: each message is deleted automatically 30 days after it is sent.
• · Website support assistant conversations: deleted automatically 30 minutes after your last message.
• · Transactional / billing records: retained as required by Canadian tax and commerce law. Payment processors and platform stores (Apple, Google, RevenueCat, Stripe) may separately retain transaction records under their own policies.
• · Security logs and crash/performance diagnostics: retained for a bounded operational window configured with our infrastructure providers.
• · Account-security events: we keep a separate record of security-relevant account changes (subscription tier changes, email address changes, and account deletion) so we can investigate unauthorized access. These records hold the event, its time, and the account it belongs to. Email addresses captured in them are removed after 90 days, and the records themselves are deleted after 24 months. This is the one category that outlives the 30-day erasure window above: a deletion record that vanished along with the account it documents would be no use for detecting an account takeover. We keep it on the basis of legitimate interest rather than consent.
• · Support communications: retained for the period needed to resolve your issue and maintain quality assurance.

Your Global Rights (GDPR · UK DPA · PIPEDA · US Multi-State)

Aureon extends comprehensive data rights to every account holder, independent of region, and will not penalize you for exercising them:

• · Access & portability: get a machine-readable copy of your records. In the app, go to Settings, then Legal & Privacy, then Export my data. It builds a JSON and CSV export and opens your phone's share sheet. If you cannot use the app, email privacy@aureonperformance.com with the subject line "Data Export".
• · Erasure / deletion: purge profile inputs through in-app deletion (Settings → Danger zone → Terminate account) or via the /data-deletion fallback.
• · Correction / rectification: amend inaccurate parameters inside your settings.
• · Object / restrict: halt non-essential telemetry or third-party inference. To turn off product analytics in the app, go to Settings, then Privacy controls, then Usage analytics.
• · Limit sensitive data (US): California and other state residents may restrict the use of physical-health attributes beyond core operation.
• · Opt out via Global Privacy Control: where you visit aureonperformance.com with GPC enabled in a supported browser, we treat that signal as a valid opt-out-of-sale-and-sharing request for that session.
• · Washington & Nevada residents: Consumer Health Data-specific rights (including appeal of a denied request) are addressed in the standalone Consumer Health Data Privacy Policy.

To exercise any other right, contact privacy@aureonperformance.com. We verify identity before resolving requests, and you retain the right to lodge a complaint with your home jurisdiction's supervisory privacy authority.

Children

Our Services are not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe we have collected information from someone under 18, contact us so we can take appropriate steps.

Data breach notification

If a breach affecting your personal information occurs, we will notify you and the relevant regulator(s) on the timeline required in your jurisdiction, including, non-exhaustively: 72 hours to the lead EU/UK Data Protection Authority; 60 days to affected individuals and the FTC under the Health Breach Notification Rule (nationwide media at 500+ affected); promptly under PIPEDA and Quebec's Law 25; and as soon as practicable under other applicable regimes.

Changes

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date. Where changes are material and required notices apply, we will provide additional notice as appropriate (for example, in-app messaging or email).

What cookies and similar technologies are

Legal bases

What we actually set, by category

<project-id> is the fixed identifier of our Supabase project. The exact cookie name you will see in your browser starts with sb- and ends with -auth-token. During sign-in, the identity provider you choose (Apple or Google) applies its own cookies on its own domain under its own policies. Those are governed by Apple's and Google's notices, not ours, and we neither read nor control them.

How to control cookies and local storage

EU & UK representative

We have appointed Prighter Group with its local partners as our privacy representative and your point of contact for the European Union (EU) and the United Kingdom (UK). Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data), including rights concerning the data described in this Cookie Policy. To contact us via our representative, please visit https://app.prighter.com/portal/aureonperformance. See also the Representative section of the Privacy Policy.

Medical disclaimer (not medical advice)

THE SERVICES PROVIDE SOFTWARE AND INFORMATIONAL TOOLS ONLY. THEY ARE NOT A MEDICAL DEVICE AND DO NOT CONSTITUTE MEDICAL, DIETARY, NUTRITIONAL, OR MENTAL HEALTH ADVICE, DIAGNOSIS, OR TREATMENT. YOU SHOULD CONSULT A QUALIFIED HEALTH PROFESSIONAL BEFORE BEGINNING OR MODIFYING ANY EXERCISE, NUTRITION, OR WELLNESS PROGRAM, PARTICULARLY IF YOU HAVE A MEDICAL CONDITION, ARE PREGNANT, OR TAKE MEDICATIONS.

PHYSICAL ACTIVITY INVOLVES INHERENT RISK OF INJURY OR ADVERSE HEALTH EVENTS. YOU ASSUME ALL RISK ASSOCIATED WITH YOUR USE OF THE SERVICES AND ANY RESULTING PHYSICAL EXERTION OR BEHAVIOR CHANGES. YOU ARE SOLELY RESPONSIBLE FOR HOW YOU APPLY ANY PROTOCOLS OR RECOMMENDATIONS.

Eligibility & accounts

The Services are designed for adults. You must be at least eighteen (18) years of age to create an account or use the Services, and you must be able to form a binding contract in your jurisdiction. Age is verified during onboarding, and profiles reporting an age below 18 cannot be completed. You are responsible for maintaining the confidentiality of your credentials and for activity under your account. Notify us promptly of unauthorized use.

Subscription, billing & cancellation

Certain features require a paid subscription. The price of each tier is shown in the Apple App Store or Google Play at the time of purchase, and web prices are shown on /pricing. Store and web prices can differ; the price shown where you buy is the price that applies. Subscriptions renew automatically until canceled through Apple App Store or Google Play subscription settings today or, once web checkout via Stripe becomes available, through the authorized web billing portal tied to your purchase path. When you purchase through a platform, billing and renewal terms may also be governed by that platform's policies. Unless the platform mandates otherwise, we do not provide prorated refunds for partial billing cycles. Chargebacks and refunds follow store rules.

Web checkout via Stripe. This channel is currently paused: our public web surface is not processing live subscription purchases at this time. When web checkout becomes available, purchases initiated directly on our public web surface will be securely executed and hosted by Stripe, through Stripe Checkout sessions opened from hosted Stripe Payment Links, and will be processed under the merchant parameters of Aureon FitApp Inc. Web-initiated subscriptions will auto-renew at the interval and price shown on /pricing at the time of purchase until explicitly paused or terminated. Once available, web-initiated billing will be managed or canceled through the authorized web customer billing self-service portal powered by Stripe, or by written request to support@aureonperformance.com.

The two billing channels are separate. Web-initiated subscriptions cannot be managed inside Apple App Store or Google Play settings; in-app mobile subscriptions managed through RevenueCat cannot be modified or refunded through our web Stripe portal. Account termination does not cancel billing on either channel. You must act through the specific gateway that processes the subscription.

Refunds. Refund eligibility is determined by the rules of the purchasing platform or payment processor that processed your transaction. We do not guarantee refunds beyond what those channels permit.

License & acceptable use

Subject to these Terms, Aureon grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Services for personal, non-commercial purposes in accordance with applicable platform rules.

You agree not to misuse the Services, including by attempting to probe, scan, or test vulnerabilities; circumvent security or access controls; interfere with other users; scrape or harvest data without permission; reverse engineer except where prohibited by law; upload malware; infringe intellectual property; harass others; or use the Services in violation of law. We may suspend or terminate access for violations.

Intellectual property

The Services, including software, branding, text, graphics, and related assets, are owned by Aureon or our licensors and protected by intellectual property laws. Except for the limited license above, no rights are granted. Feedback you provide may be used by Aureon without obligation to you.

Third-party services & integrations

The Services may integrate with third-party platforms (including health APIs and AI inference providers). Those third parties have their own terms and privacy practices. Your use of integrations may require separate permissions on your device.

Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS.

Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL AUREON OR ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, GOODWILL, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICES. TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR AGGREGATE LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATING TO THE SERVICES WILL NOT EXCEED THE GREATER OF (A) THE TOTAL FEES YOU PAID TO AUREON FOR THE SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM OR (B) ONE HUNDRED U.S. DOLLARS (USD $100), IF YOU HAVE NOT PAID FEES. SOME JURISDICTIONS DO NOT ALLOW CERTAIN LIMITATIONS; IN THOSE CASES, OUR LIABILITY IS LIMITED TO THE MAXIMUM EXTENT PERMITTED BY LAW.

Indemnity

To the extent permitted by law, you agree to indemnify and hold harmless Aureon and its affiliates from claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising out of your misuse of the Services, your violation of these Terms, or your violation of third-party rights.

Governing law & venue

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-law principles that would require application of another jurisdiction's laws. Subject to applicable mandatory consumer protections in your locale, you agree that the courts located in Ontario shall have exclusive jurisdiction over disputes arising out of or relating to these Terms or the Services, except where applicable law requires otherwise.

Aureon FitApp Inc. is federally incorporated in Canada with its head office in the Province of Ontario. Nothing in this clause waives the mandatory consumer protections of your country or state of residence where those protections apply by law.

Changes & termination

We may modify these Terms by posting an updated version and updating the "Last updated" date where displayed. Continued use after changes become effective may constitute acceptance. We may suspend or terminate access if you materially breach these Terms or if necessary for legal, security, or operational reasons.

Severability

If any provision of these Terms is held invalid, illegal, or unenforceable by a court or tribunal of competent jurisdiction, that provision will be enforced to the maximum extent permissible and, where necessary, deemed modified to the minimum extent required to make it enforceable, and all remaining provisions remain in full force and effect. A provision held unenforceable in one jurisdiction remains effective in every other jurisdiction.