Consumer Health Data Privacy Policy

• Your Story health answers: whether you are pregnant, nursing or trying to conceive, diagnosed conditions, your medical history, whether you use a GLP-1 medication and at what dose, your regular medications, your allergies, and anything else you tell your coach there. Also the intake questions about your movement, sleep, stress, water, alcohol and dieting history.
• Your body: age, biological sex, height, weight, body fat percentage, skinfold measurements and body circumference measurements.
• What you track: the food you log with its calories and macros, water, alcoholic drinks, steps, and sleep (when you got in bed, when you got out of bed, and the hours you slept).
• Your check-ins: your weight, your written answers, and how many days you did each self-care habit that week.
• Progress photos of your body.
• Your body scan, if you take one: two photographs of you, front and back, and the body fat percentage, muscle mass and other figures that come back from them.
• Bloodwork reports that you or your coach upload.
• Messages with your coach, and the notes your coach keeps about you, where they are about your health.
• The clinical record, if you use the medical side: the medication you have been prescribed and its dosing schedule, the date of your last bloodwork, and a log of appointments, shipments and prescription changes.

• So your coach can coach you and set your targets safely.
• To work out your daily score and your OLO Score.
• To run the app: storing your data, sending you emails and phone notifications about your coaching, and reading food from a photo or answering the meal chat when you ask it to.
• To run the medical side, if you use it.

It is never sold, and never used for advertising or marketing.

• You, through what you type, log, photograph and upload in the app.
• Your coach, who records measurements, uploads bloodwork and keeps notes about you.
• Apple Health, if you connect it in the iPhone app: your steps, sleep and workouts only. Apple Health can include data from an Apple Watch or other devices that write to it, such as Oura, Garmin, Fitbit or WHOOP. Nothing is read until you agree, and nothing is ever written back to Apple Health.
• A body scan, if you take one in the iPhone app: you take two photos, an outside service reads them, and your body composition comes back. Nothing is sent until you agree, on a screen shown before your first scan.
• The medical provider, for the clinical record, if you use the medical side.

• Your coach sees your health data, because that is the job. Your Apple Health steps, sleep and workouts are shown to your coach only if you agree to that when you connect.
• The administrator who runs OLO Coaching, to run the service.
• The independent medical provider, the clinical record only, if you use the medical side.

And these companies, which provide services to us and only handle it to do that:

• Supabase stores all of it, including Apple Health data, photos and bloodwork reports.
• Vercel hosts and runs the app.
• Resend delivers our emails, which can include your Adherence Score, messages from your coach and, on the medical side, the medication on file.
• Apple delivers phone notifications, which can include the start of a message from your coach.
• Anthropic provides the AI. It gets a photo of a meal or a nutrition label when you take one, and, when you use the meal chat, what you have logged today, patterns from your food log, your targets and your goal. The full list is in our Privacy Policy. It never gets your intake health answers, your weight or measurements, your progress photos, your bloodwork, or your Apple Health steps, sleep or workout details. It is told whether you trained today, which can come from Apple Health and can decide which targets the meal chat works to.
• Kino reads your body scan, if you take one. It gets two photographs of you, front and back, with your height, weight, biological sex and age, and nothing else: no name, no email, and no way of its own to work out whose they are. It deletes the photographs after about 30 days and keeps the numbers indefinitely. The whole of it is in our Privacy Policy.

• Access. Ask whether we hold your health data, get a copy of it, and get a list of everyone we have shared it with and how to contact them.
• Delete. Choose Delete account in the You tab of the app, or ask us to delete it. You can also delete your body scans on their own, by turning body scans off in the You tab and choosing to delete them. One thing we cannot delete for you: the numbers from a body scan stay at Kino, who give us no way to remove them. Deleting your scans, or your account, destroys the code that ties those numbers to you, which is the only deletion there is.
• Withdraw consent. Turn Apple Health syncing off, or body scans off, in the You tab, or ask us to stop using any health data you agreed to share.
• Review and change. Change what you logged in the app yourself, or ask us to change anything else.

To ask, email aaron@vivolowellness.com from the address on your account. We answer within 45 days.

If we turn down your request, reply to our answer and ask for an appeal. We answer the appeal within 45 days and explain our decision in writing. If we still say no, you can contact the Attorney General of the state you live in.