Privacy Policy
Aureon FitApp Inc. ("Aureon," "we," "us," or "our") — a corporation federally incorporated in Canada, with its head office in the Province of Ontario — operates the software and services marketed as Aureon Performance (our "Services"). This Privacy Policy describes how we collect, use, disclose, and safeguard personal information across our websites, mobile applications, and related offerings. It is written to satisfy — in substance and in operating practice — Canada's federal PIPEDA, Ontario's PHIPA, the European Union's GDPR, the United Kingdom's UK GDPR and Data Protection Act 2018, and United States state privacy law led by California's CCPA, as amended by the CPRA (with comparable Virginia, Colorado, Connecticut, and Utah statutes). Platform operators apply their own rules; our practices are summarized here and may be supplemented by store disclosures you approve at install or purchase.
Compliance Accountability & Contact
We are Aureon FitApp Inc. — federally incorporated in Canada and operating as Aureon Performance from our head office in Ontario, Canada. We are the data controller — and, under PIPEDA, the accountable organization — for the personal information described here.
To keep accountability unambiguous, electronic channels are split by function:
- · Data Protection Officer · Privacy Lead · EU & UK Article 27 inquiries: privacy@aureonperformance.com
- · General Counsel · Corporate legal notices · Compliance-infrastructure mapping: legal@aureonperformance.com
Information we collect
Depending on how you interact with us, we may collect categories of information such as:
- Profile variables. Display name, birthdate (for age verification), sex, and the email returned by Apple or Google OAuth — or, for Guest sessions, an anonymous device token rather than an identifying account.
- Usage & performance. In-app activity (e.g., workouts logged, protocol edits, engagement signals), diagnostics, crash data, feature usage, and performance telemetry needed to operate and improve the Services.
- Device & technical. Device type, OS version, app version, locale, IP address, mobile identifiers compatible with platform policies, and similar technical metadata.
- Payment & billing. When you subscribe (pricing tiers are published at /pricing and mirrored at checkout), payment processing is typically handled by platform billing systems (e.g., Apple App Store or Google Play) or other payment processors. We may receive limited billing metadata (such as subscription status, transaction identifiers, and renewal dates) rather than full payment card details.
- Communications. Content you send us (support tickets, feedback, survey responses) and related correspondence metadata.
- Physical biometrics. Height, weight, body-fat percentage, resting heart rate, maximum BPM, and free-text biomechanical constraints or injury-rehabilitation history you choose to record — used to calibrate load, scaling, and contraindications.
- Special category data. Where you choose to provide it — clinical biomarkers extracted from user-uploaded PDFs or images via Google Gemini on Vertex AI, and menstrual-cycle tracking details. This is sensitive health information, processed only under explicit consent — see Biometric & health data.
Device permissions
Aureon requests only the device permissions its features require, matched to the declarations in our Apple App Store and Google Play manifests. Each is optional, prompted in context, and revocable at any time through your operating-system settings:
- · Camera & Photo Library: the Metabolics food-photo pipeline — optical macro- and micro-nutrient analysis of meals you capture or select.
- · Document Picker: parsing the clinical lab files you upload for biomarker extraction.
- · Foreground Location: reverse-geocoded to a city-level field only — stored as location_city, never precise coordinates and never background tracking.
- · Push Notifications: active rest-timer cues and session prompts.
How we use information
We use personal information for purposes including:
- Service delivery. Creating and maintaining accounts, generating and adapting training and nutrition protocols, syncing across devices, and providing customer support.
- Personalization & product improvement. Tailoring recommendations and improving models and workflows, subject to this Policy and applicable law.
- Security, integrity & fraud prevention. Detecting abuse, securing infrastructure, investigating incidents, and enforcing our Terms.
- Legal compliance. Complying with law, regulation, lawful requests, and protecting rights and safety.
- Communications. Transactional messages (billing, security alerts), service announcements, and—where permitted—marketing communications you can opt out of.
Legal Bases for Processing (GDPR · UK GDPR · PIPEDA)
Where cross-border frameworks require an explicit lawful basis, we rely on the following — and only for the purposes stated in this Policy:
- Performance of a contract. Operating your account, computing performance metrics, and delivering the protocols you request.
- Explicit consent. Required under GDPR Article 9 — and aligned with PIPEDA's consent principle — before we read or parse sensitive health-framework signals such as HealthKit metrics or HRV trends. You may withdraw consent at any time through operating-system permissions or in-app controls.
- Legitimate interests. Securing infrastructure, preventing fraud and abuse, maintaining service reliability, and improving product architecture — balanced against your fundamental rights and freedoms.
- Legal obligations. Meeting Canadian federal and provincial record-retention, tax, audit, and statutory disclosure duties.
Canada · PIPEDA & Ontario PHIPA
As a federally incorporated Canadian organization, we handle personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair-information principles — accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, accuracy, safeguards, openness, individual access, and challenging compliance.
- · Accountability: our Privacy Lead answers for compliance and for every third party that processes data on our behalf.
- · Meaningful consent: consent is scaled to sensitivity — express opt-in for health and biometric signals — and may be withdrawn at any time.
- · Limiting collection: we gather only what a stated performance purpose requires, and we do not silently repurpose it.
- · Access & challenge: you may request what we hold and challenge our handling with the Office of the Privacy Commissioner of Canada.
Ontario PHIPA scope. Aureon Performance is a consumer performance-optimization application — not a health information custodian under Ontario's Personal Health Information Protection Act (PHIPA). We do not deliver health care, and we neither contribute to nor draw from provincial electronic health records. Biometric telemetry you connect stays isolated within your user-managed environment and is processed only for training-load and recovery calibration — never as a custodial health record.
European Union & United Kingdom · GDPR / UK GDPR
For residents of the European Economic Area, Switzerland, and the United Kingdom, we process personal data as a data controller under the EU GDPR and the UK GDPR read with the Data Protection Act 2018. Because we operate without a permanent physical establishment in the European Economic Area or the United Kingdom, international data subjects — including under Article 27 criteria — may execute their regulatory rights electronically by contacting our centralized privacy operations channel at privacy@aureonperformance.com.
You may exercise the rights of access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent without affecting prior lawful processing. You also retain the right to lodge a complaint with your local supervisory authority — an EU member-state Data Protection Authority or the UK Information Commissioner's Office (ICO). Transfers out of the EEA or UK rely on Standard Contractual Clauses (with the UK Addendum where applicable) or another recognized adequacy mechanism — detailed under International transfers.
United States · Multi-State Privacy (CCPA / CPRA)
For United States residents, we honor the consumer rights established by California's Consumer Privacy Act (CCPA), as amended by the Privacy Rights Act (CPRA), and we extend equivalent treatment to residents of states with comparable statutes — Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA). You may exercise:
- · Know & access: the categories and specific pieces of personal information we have collected.
- · Delete & correct: removal or correction of your personal information, subject to lawful exceptions.
- · Opt out of sale or sharing: we do not sell personal information for monetary value, and we do not share it for cross-context behavioral advertising — and we honor Global Privacy Control signals regardless.
- · Limit sensitive personal information: health and biometric inputs operate only the features you enable — never advertising inference.
- · No retaliation: we will not deny service, alter pricing, or degrade quality because you exercised a privacy right.
To submit a request, contact privacy@aureonperformance.com with the subject line "US Privacy Request". We verify identity before disclosing or deleting data, and an authorized agent may act on your behalf with proof of permission.
Sharing & disclosure
We may share personal information with:
- Service providers & subprocessors. Vendors that host infrastructure, provide analytics (where permitted), deliver customer-support tooling, security services, payments facilitation (as applicable), email delivery, and AI/ML inference providers—subject to contractual confidentiality and security expectations.
- Legal & safety. Disclosures required by law, regulation, legal process, or governmental requests, or to protect the rights, safety, and security of Aureon, our users, or the public.
- Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate safeguards and notices where required.
We do not sell your personal information for monetary consideration in the conventional sense of selling customer lists to unrelated buyers. We also do not share personal information with data brokers for their independent marketing purposes. Where regional laws define "sale" or "sharing" broadly (such as the California CPRA context), we honor applicable multi-state opt-out parameters via explicit privacy control interfaces.
Sub-processors
We engage a deliberately small roster of vetted sub-processors — each bound by contractual confidentiality and security obligations, and each limited to the function named below:
- · Supabase: primary data host and authentication enclave.
- · Google Gemini · Vertex AI: inference loops for protocol generation and clinical-document extraction.
- · RevenueCat: subscription state and entitlement management.
- · Instacart: deep-link grocery search initiated from your meal plans.
Biometric & Health Data
If you grant permission, Aureon performs read-only sync with Apple HealthKit and Android Health Connect, processing those signals solely to dynamically calculate physical training loads and related performance adaptation within the Services (including recovery-aware adjustments where applicable). Synced fields are limited to heart rate, resting heart rate, HRV, sleep architecture aggregates, active calorie-burn expenditure, and user-logged hydration when exposed by the platform — each contributing to load adaptation or recovery scoring as outlined in the HealthKit · Health Connect justification. We do not use Apple HealthKit, Android Health Connect, or analogous health API data for advertising. We do not sell that data to data brokers and do not share it with unrelated third parties for their own marketing purposes.
Custodial status. These inputs are processed solely for load adaptation and recovery scoring within your user-managed environment — they are not custodial health records, and they are not contributed to any provincial health repository. See Canada · PIPEDA & Ontario PHIPA for our full position under Ontario's health-privacy regime.
Artificial intelligence processing
To generate training and nutrition protocols, user parameters and signals may be processed using large language models and related machine-learning systems operated by us or subprocessors. Where technically feasible, data sent for inference may be de-identified or stripped of direct personally identifiable information (PII); however, free-text fields or highly specific combinations of inputs could still be identifying in edge cases.
Human review may occur for safety, quality assurance, abuse prevention, or compliance monitoring. You should avoid submitting unnecessary sensitive PII in chat, notes, or unstructured fields. Retention of model inputs/outputs is managed under operational and security policies (typically retained only as long as needed for service delivery, troubleshooting, safety, and legal compliance, unless a longer period is required by law).
Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure; we encourage strong passwords, device security updates, and cautious sharing of account credentials.
International transfers & Cross-Border Adequacy
We may process and store information in countries other than where you live, including where our cloud subprocessors and infrastructure partners operate. Where required by regional statutes (such as GDPR Chapter V), cross-border transfers are governed by formal Standard Contractual Clauses (SCCs) or recognized adequacy mechanisms to enforce equivalent structural safety bounds worldwide.
Retention
We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Illustrative categories: account records for the life of the account plus a limited post-closure period; transactional/billing records as required by tax and commerce laws; security logs for a bounded operational window; support communications for the period needed to resolve issues and maintain quality assurance unless longer retention is justified.
Your Global Rights (GDPR · UK DPA · PIPEDA · US Multi-State)
Aureon extends comprehensive data rights to every account holder — independent of region — and will not penalize you for exercising them:
- · Access & portability: obtain disclosure of — or a machine-readable export of — your compiled performance records.
- · Erasure / deletion: purge profile inputs through in-app deletion or the /data-deletion fallback.
- · Correction / rectification: amend inaccurate parameters inside your settings.
- · Object / restrict: halt non-essential telemetry or third-party inference.
- · Limit sensitive data (US): California and other state residents may restrict the use of physical-health attributes beyond core operation.
To exercise a right, contact privacy@aureonperformance.com. We verify identity before resolving requests, and you retain the right to lodge a complaint with your home jurisdiction's supervisory privacy authority.
Children
Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us so we can take appropriate steps.
Changes
We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date. Where changes are material and required notices apply, we will provide additional notice as appropriate (for example, in-app messaging or email).
Privacy contacts
Privacy: privacy@aureonperformance.com
Legal: legal@aureonperformance.com