Aspiro WINS App Privacy Policy

Last updated: October 14, 2026

This policy explains what the Aspiro WINS app (the “App”, shown on your home screen as “Aspiro”) collects, why, who it is shared with, and the choices you have. “Aspiro”, “we” and “us” means DesignX Inc., 851 W Front St Ste 1501, Boise, ID 83702, United States.

The short version

• We collect what you put into the App (your profile, workouts, meals, check-ins, messages) so the App can work and sync across your devices.
• Most Apple Health data stays on your iPhone. The few exceptions are listed in section 3.
• Photos, links and notes you save in Second Brain are kept in private storage that only you can see, and we do not read them. Searching them by meaning is off unless you turn it on (sections 1 and 4).
• We never sell your data. We never use Apple Health data for advertising. There are no ads, no advertising identifiers and no cross-app tracking in the App.
• AI features (the coach, meal and menu photo analysis, gym photo scans, smart meditations, voice replies) send the information they need to the AI providers named in section 4, and only after you say yes. You can turn AI features off at any time in Settings › Coaching › AI features.
• The App asks for your location only if you tap Use my location in Restaurants › Nearby, and only while the App is open. It is rounded to about 1 km before it leaves your iPhone, used for that one search, and not stored (section 2).
• If you buy an Aspiro plan, Apple takes the payment and our purchase provider, RevenueCat, tells us which plan you have. We never see your card (section 1).
• Some Community members are AI-powered training buddies run by Aspiro, not real people (section 7).
• We use first-party product analytics and crash reports to fix and improve the App (section 2). You can turn analytics off in Settings › Privacy & safety › Share usage analytics.
• If you pay for human coaching, Aspiro bills you and the payment is taken by Stripe on the web, not inside the App. Aspiro never sees or stores your full card number (section 1).
• You can delete your account and your data in the App: Settings › Account › Delete account.

1. Information you give us

Account. Your email address, or your Apple or Google sign-in identity, and a display name. If you use Sign in with Apple you can hide your email.

Profile and body stats. Sex, date of birth, height, weight and goal weight, activity level, fitness goal, calorie and macro targets, dietary preferences, allergies and foods you dislike, injuries and movement limits you tell us about (so the App can leave out exercises they rule out), and, only if you tell us, that you are pregnant or postpartum and the related dates. Optional: bio, profile photo, cover photo, goal label.

Training. Workouts, sets, reps, weights, programs, gym equipment profiles (including the names of any equipment you add yourself), personal records, mobility and meditation sessions, and body measurements (weight, body fat, lean mass).

Nutrition. Meals and foods you log, portion sizes, water, supplements, barcodes you scan, recipes and meal plans, and a dated history of your nutrition goal and daily targets, so Nutrition › Analytics and the coach judge each day against the goal you had that day.

Photos.

• Meal photos you choose to analyse are sent to our server and on to an AI provider to estimate what is on the plate. We do not store the photo: it is sent with the request and not saved to your account or our storage. (A photo you have separately saved in Second Brain is kept as described under Second Brain below; analysing it as a meal does not save another copy to your account or our storage.)
• Menu and receipt photos you take in Eating Out are handled the same way: the photo is sent to our server and on to an AI provider to read the dishes on it and estimate their nutrition, and is not saved to your account or our storage. The list of dishes read from your last few menus stays on your phone so you can open them again; it is not sent to our servers. If you tap Snap menu on a place in Restaurants › Nearby, that place’s name is sent with the photo to help read the menu.
• Gym photos you choose to scan in the gym builder (up to six at a time, taken with the camera or picked from your library) are sent to our server and on to an AI provider to find the equipment in them, which you then confirm. They can show people in the background; the scan is told to ignore them. We do not store the photos: they are used for that one scan and are not saved to your account or our storage. Only the equipment you confirm is kept, as part of your gym profile.
• Progress photos and photos on your “My Why” board are kept in private storage that only you can see (and a human coach, only if you allow it; section 6).
• Cover photos you pick for your own workouts or programs are kept in private storage that only you can see, with a copy on your phone so they show offline. They are checked once by the same automated safety check (section 7).
• Profile photos, cover photos and workout photos you post are visible to the people who can see your profile or post. They are checked once by an automated safety check (section 7).

Second Brain (saved photos, links and notes). Second Brain is a private library in the App where you keep photos, links and notes that you add yourself. The App stores:

• Photos you save, as a compressed copy and a small thumbnail (not the original file);
• Links: the address you save, the title if you add one and the name of the site. Saving a link does not open the page or save its contents. If you later choose Import this recipe on a link, your phone reads that page to work out the nutrition (an AI estimate happens only if you then choose it; section 4), and the meal you log can keep the link;
• Notes: the text you write.

Links and notes can also have a title you give them. These are kept in your account, in private storage that only you can see, and they sync to your other devices. We keep them until you delete them or delete your account. Each account can hold up to 200 items and 200 MB; when it is full, new saves are refused and nothing is deleted for you. A save that has not finished uploading stays on your phone, under your account, until it uploads. If you sign out first, it is kept on your phone and uploads the next time you sign in to the same account. Like any database, ours keeps an automatic text index of your notes, links and titles so they can be matched by words; it is private to you, nobody reads it, and it is removed when the item or your account is deleted. We do not read or analyse what you save, and it is never shown to other people, teams or the Community. It is used only if you pick an action on an item, such as asking the coach about it or logging a meal; that opens the usual screen, where what is sent is covered by section 4 and needs your AI permission. The App’s usage analytics (section 2) record only coarse facts, such as that you saved or deleted an item and whether it was a photo, link or note, never its content or your search words. The one exception to “we do not read or analyse” is search by meaning, which is off unless you turn it on (section 4).

Things you share into Aspiro. If you use Share in another app and pick Aspiro, the shared photo, link or text is held on your phone until you pick an action, close it, or 24 hours pass, and it is removed when you sign out. Nothing is sent anywhere, and nothing is read by AI, until you tap an action such as Log this meal or Ask the coach; that opens the usual screen, and what it sends is covered by section 4. Save to Second Brain keeps it as described above.

Wellness and journaling. Daily check-ins (energy, soreness, stress on a 1–5 scale), daily intentions, commitments and journal entries.

Smart meditations. If you make a smart meditation, we keep your choices (the feeling, length, voice and music), which parts of your Aspiro data you switched on for it (your why, what your coach remembers, your goals and this week’s plan, tasks and journal themes), anything you type or say in the What’s on your mind? box, the script that was written and the finished voice recording. What you typed or said, and the working copies used to check the script, are deleted from our servers 48 hours after the meditation is finished; the script text is deleted after 30 days. The recording stays in private storage that only you can open until you delete the meditation, which erases it right away. What is sent to AI providers is in section 4.

Subscriptions. Paid plans are bought in the App through Apple. When you subscribe, Apple takes the payment and tells our purchase provider, RevenueCat, which tells us which plan you have, whether it is in a free trial, when it renews or ends, and whether it is a test (sandbox) purchase. We link this to your Aspiro account id only, never your name or email, and we never see your card or Apple payment details.

AI coach. Your chats with the coach (typed or spoken), the actions you confirm (such as logging a meal), a short list of facts the coach remembers about you so it doesn’t have to ask again, short notes of each day’s chat (the first part of each thing you said and of the coach’s reply), and, unless you turn it off, a short summary of each day you chat with the coach: what you said, what the coach suggested, how you said you felt, and lasting details such as an injury, your schedule or your equipment. Summaries are written only from your own chats with the coach, never from your direct messages or comments. In Settings › Coaching › Coach memory you can view, add or delete facts, view or delete any summary, turn Remember our conversations off (no new summaries; the ones you have stay until you delete them), or delete all coach memory.

Voice. When you talk to the coach, Apple’s speech recognition turns your speech into text, on your iPhone whenever the device supports it (otherwise on Apple’s servers, under Apple’s privacy terms). We receive the text, never the recording. If you use spoken replies, the text of the coach’s reply is sent to our voice provider to create the audio (section 4), and the audio we get back is kept in a private store on our servers so the same words do not have to be voiced twice. That store is not linked to your account and has no expiry today.

Social features. Teams you create or join, challenges, friend requests, reactions and cheers, comments and replies (including @mentions), direct messages, and the reports and blocks you make. Your workouts are shared with your teams unless you turn that off in Settings › Sharing. They are shared with the wider Community only if you turn on Settings › Sharing › Share workouts to Community (off by default), and only workouts finished after you turn it on.

Coaching and payments. If you connect with a human coach: who your coach is, whether your coaching payment is current (paying, past due, cancelled), the date your current period ends, and the coaching subscription number. Aspiro bills you for coaching; when you pay, you type your card and billing details on a page run by Stripe, our payment processor; Stripe passes us the result (paid or not, the amount, the date and a payment reference) and we do not receive or store your full card number. Refund and dispute requests you send us, and what happens to them, are also kept. (Plans bought through Apple are covered under Subscriptions above.)

If a coach invites you by email. A coach can ask us to email people they already work with, inviting them to join Aspiro with the coach’s code. The coach gives us the addresses; we send the email from Aspiro and do not give the address back to the coach. We do not keep the address itself: we keep a one-way fingerprint of it, the coach it was sent for, and what happened to the email (sent, bounced, unsubscribed, joined). Every invitation has an unsubscribe link. If you unsubscribe, bounce or mark an email as spam, the fingerprint goes on our do-not-email list so we do not email you again (this list is also used for our product emails, section 5).

Choices you make. When you accepted the Terms and the Community rules, and your answer to the AI data-sharing question.

Support and feedback you send us through Settings › Privacy & safety › Contact us / Report a problem (aspirohealth.com/contact) or by email.

2. Information collected automatically

• Push notification token for your device, if you allow notifications, so we can send the reminders and alerts you choose. It is stored with your account and the device platform.
• App updates. The App checks Expo’s update service for new versions of its code. The request includes technical details such as the app version, platform and a random installation id.
• Product analytics (PostHog). To learn which features people use and where the App is confusing, the App sends usage events to PostHog: for example “opened the coach”, “finished a workout”, “scanned a barcode”, along with the screen name, app version, and device model and operating system. Events are linked to your Aspiro account id. They describe actions only: never health values, body stats, meal or food contents, photos, or the text of anything you write. We have turned off PostHog’s location lookup and session recording. When we try two versions of a screen on different accounts (an A/B test), the version your account sees is added to these events so we can compare them. Analytics is on unless you switch it off in Settings › Privacy & safety › Share usage analytics; when it is off, the App sends no analytics events.
• Crash reports (Sentry). When the App crashes or hits an error, it sends a crash report to Sentry: the error, where in the code it happened, the app version, and the device model and operating system. Crash reports are not linked to your account, are scrubbed on your phone before they are sent, and never include health values, meal contents, photos, screen contents or the text of your messages. They are sent whether or not analytics is on, because we need them to keep the App working.
• Service logs. Our servers record technical events (for example, a failed request or how long an AI reply took) and how many AI requests your account uses, so we can run the service, prevent abuse and control cost.
• Location, only when you ask (Restaurants › Nearby). If you tap Use my location in Nutrition › Restaurants › Nearby, iOS asks whether Aspiro may use your location While Using the App. The App never asks for it in the background or at any other time. When you allow it, your iPhone takes one reading for that search and rounds it to about 1 km (two decimal places) before it is sent. Our server rounds it again and sends that point, as a search area of about 2.5 km around it, to Apple Maps to find restaurants near you; it is not sent with your name or account id. We do not store the point or write it to our logs. The distances you see are worked out on your phone. To limit use, we keep a record that you made a nearby search (your account id, the kind of request and the time, never the place). You can turn location off at any time in iOS Settings › Aspiro › Location; Browse all chains keeps working without it.
• Home Screen widgets and the workout Live Activity (on your iPhone only). If you add Aspiro widgets, the App saves a small summary for them in a space on your iPhone that only Aspiro’s own app and widgets can read, such as ring progress, streaks, your next workout’s name, meditation minutes, weekly training counts, meal checks (logged or not, never what you ate) and, only if you turn on Settings › Home Screen › Show sleep in Insights (off by default), last night’s sleep. Widgets never show calories, macros, your weight, food names or journal text. During a workout the Lock Screen and Dynamic Island show the exercise, the set you are on, its target load (the weight on the bar, never your body weight) and your rest and workout timers; you can turn this off in Settings › Workout › Live Activity during workouts. Its Log set, +15s and Skip rest buttons do the same as those buttons in the workout, and a set logged there is saved like any other. Anyone who can see your Lock Screen or Home Screen can see what these show. None of it is sent to us, and it is cleared when you sign out.
• We do not use advertising identifiers (IDFA), advertising or attribution SDKs, or background location, and we do not track you across other companies’ apps or websites.

3. Apple Health

If you connect Apple Health (Settings › Health › Apple Health), the App asks for access to the types below. You choose which to allow, and you can change it at any time in iOS Settings › Health › Data Access & Devices.

• Read: active energy, steps, workouts, weight, body fat, lean body mass, height, sleep, resting heart rate, heart rate variability, heart rate, VO2 max, exercise time, walking + running distance, flights climbed and mindful minutes. Menstrual cycle and State of Mind are read only if you switch them on.
• Write: workouts, mindful sessions, dietary energy, protein, carbohydrates and fat, water, weight and body fat. Food values that came from an AI estimate you confirmed are marked as estimates in their Health metadata.

What stays on your iPhone. Health data the App reads is kept in the App’s storage on your device and is cleared when you sign out. Cycle and State of Mind data are held in memory only and are never stored or sent anywhere. If you turn on the sleep widget (section 2), last night’s sleep is also saved for the widget on your iPhone; it is not sent to us.

What leaves your iPhone:

1. Weight, body fat and lean mass readings imported from Health are saved to your body measurements so they sync across your devices.
2. Workouts recorded by other apps are saved as a simple marker (type, start and end time, duration; no heart rate or calories) so they count toward your weekly activity.
3. Coach sharing (off by default). If you turn on Settings › Health › Apple Health › Share sleep and recovery with my coach, one line summarising last night’s sleep and your recovery (sleep duration, HRV and resting heart rate compared with your baseline, and a readiness level) is sent with your coach requests, and so reaches the AI provider in section 4.
4. Because the coach can see your body stats, a weight or body-fat reading that came from Health (item 1) can also reach the AI provider when you use the coach with AI features on.
5. Sleep in your weekly report email (off by default). If you turn on Settings › Notifications › Weekly report includes › Include sleep in my weekly recap, a weekly sleep summary is saved on our servers: your average night and your total sleep for each night of the week, with the count of nights over seven hours. It is used only to build your weekly report email. It is never used for advertising or marketing and never shared, other than with the provider that delivers the email (Resend, section 6). We delete the saved summary right away when you turn the setting off (or turn the Weekly report off), and when you delete your account. The email shows your week as a small bar chart picture, stored on our servers at an unguessable web address that only that email contains, with no name or account id in it; these pictures are not deleted automatically today. The raw Health readings behind it (sleep samples, sleep stages, heart rate and heart rate variability) never leave your iPhone.

Apple Health data is never used for advertising or marketing, never sold, and never shared with data brokers or advertisers. It is used only to provide the App’s health and fitness features, and it is never included in analytics events or crash reports.

4. AI processing

The App uses AI to power the coach (including voice mode and check-in replies), to estimate nutrition from meal photos and descriptions, to read the dishes on a restaurant menu or receipt you photograph, to find the equipment in gym photos you scan, to write a smart meditation for you and record it in a voice, to create workout cover images, to write the coach’s memory summaries, to create spoken coach replies, to run the automated photo safety check, and, only if you turn it on, to search Second Brain by meaning. These requests run on our servers, which send the AI provider only what that request needs.

For the coach that can include your profile and body stats, goals, recent workouts, nutrition and meditation summaries, check-in scores, pregnancy status if you gave it, what you have set in the App (such as your goal and daily targets, program, gym equipment, diet and the injuries you told us about), what the coach remembers about you (its saved facts and summaries of your recent conversations with it), your message and any photo you attach, and, only if you turned coach sharing on, the sleep and recovery line in section 3. Journal text is never sent to the coach; it sees only counts and dates. (A smart meditation is the one feature that reads journal entries, and only to pick out themes: see below.) Conversation summaries are written by the AI provider from that day’s coach chat, and are sent to it again only as context for later coach replies. For cover images: the lead exercise, the equipment it uses, a mood taken from your goal, and one of Aspiro’s own model photos chosen to match your sex and age group; never your photos, your name, the workout’s title or your gym’s name. For menu and receipt photos: the photo, and the place’s name if you started from Nearby. For gym photo scans: the photos you choose. For the photo safety check: the photo.

Smart meditations. When you make one, our server sends Google (Gemini API) the choices you made and only the parts of your data you switched on for it (your why, what your coach remembers, your goals and this week’s plan with a one-line sense of how your week’s check-ins went, and your tasks), plus anything you typed or said in What’s on your mind? (speech is turned into text by Apple’s speech recognition first, as for the coach). If journal themes is on, your recent journal entries are sent to Google in a separate step whose only job is to pick out a few themes; the script that is then written sees those themes, never your words. The script is checked for safety and then sent to Fish Audio, which records it in a voice (it receives the script text, never your own voice). Smart meditations need AI features on and are limited in number.

Second Brain search by meaning (off by default). Searching Second Brain by exact words happens on your phone, with nothing sent anywhere. If you also turn on Search by meaning (in Settings › Data, or from the search screen in Second Brain; it has its own explanation and needs AI features on), then, to build and use a private search index, the App sends (through our server) to our AI service provider (Google, through the Gemini API): the text of your notes (title and body), the address, title and site name of your links, and the words you type into the search box. Photos are never sent for search, and searching never opens the page behind a link. The index is one list of numbers for each note or link, stored with your account and private to you. It holds numbers derived from your text and a one-way fingerprint of it, not the text itself. It is deleted when you turn search by meaning off (as soon as your phone is online), delete the item, turn AI features off or delete your account. Turning search off deletes our copy of the index; it cannot take back text already sent to the provider, which handles it as described in this section. Search by meaning has a monthly usage limit; when you reach it, exact-word search keeps working.

If you work with a human coach (section 6), the coach’s AI tools in their web portal can summarise the categories you let them see, using the same AI providers, and only if you have AI features on.

AI providers we use:

We use these providers’ paid API services. Under their API terms, Google, OpenAI and Anthropic do not use the data we send to train their models. The providers may keep request data for a limited time (typically up to 30–55 days) to detect abuse, under their own terms.

Your consent, and how to withdraw it. Before any AI feature sends anything, the App asks whether you agree to share the information above with our trusted AI service providers. Nothing is sent unless you choose Allow. You can change your answer at any time in Settings › Coaching › AI features: turn off Allow AI features and the App immediately stops sending data to AI providers, and our servers refuse AI requests for your account. The coach, voice mode, meal photo analysis, menu and receipt reading, gym photo scans, smart meditations, generated cover images, the photo safety check and Second Brain search by meaning stop (turning AI features off also deletes your search index); everything else (workout tracking, food search and barcode scanning, logging, Second Brain saving and exact-word search) keeps working. You can turn AI features back on in the same place.

AI output can be wrong. It is not medical advice (see the Terms).

5. How we use information

• To provide the App: sync your data, show your progress, run programs, challenges, teams and messaging.
• To personalise training, nutrition targets and coaching.
• To send the notifications you turn on.
• To provide a plan you bought and check that it is active.
• To send you email. Account emails (sign-up confirmation, sign-in links, password resets, email changes and security codes) are part of the service and can’t be turned off. Product emails (welcome, reminders, weekly recap) can be turned off in Settings › Notifications › Email or with the unsubscribe link in every such email. If you unsubscribe from all of our email, or an email to you bounces or is marked as spam, we also add a one-way fingerprint of your address to a do-not-email list and stop sending you product emails, even if a switch in Settings is still on. Turning an email type back on in Settings removes your own unsubscribe from that list.
• To take and manage payment for coaching: bill you, send receipts, handle refunds and card disputes, pay the coach, and keep the financial records the law requires.
• To keep the App safe: moderation, preventing abuse, spam and fraud, and enforcing our Terms.
• To run, fix and improve the App (including analytics and crash reports), and to control AI costs.
• To meet legal obligations.

We do not sell or rent personal information, and we do not use it for advertising of any kind.

6. Who we share information with

• Other people in the App, as you choose. Teammates see your team activity; friends and people you message see your messages and profile basics; Community members see workouts you share to Community, and can also open your profile page, which shows your photo, cover image, name, bio, level and badges; people who can see a post see its comments. Blocking someone hides your profile from them (Settings › Privacy & safety › Blocked people). Turning off Settings › Sharing › Share workouts to Community stops new workouts from being shared.
• A human coach, if you connect with one. Your coach sees only the categories you allow in Settings › Coaching › Your coach › What <your coach> can see (also at Settings › Coaching › Data sharing). When you connect, workouts, body measurements and your chats with the coach’s AI twin start on; nutrition (daily totals only), intentions and commitments (counts only, never journal text), progress photos, challenges and teams (the ones you are in, with your rank and progress), and injuries and limits (the areas you track and how serious each is, never your own notes on them) start off. You can change any of them at any time, and ending coaching removes the coach’s access. Your coach memory and the summaries of your conversations with the AI coach are never shared with a human coach. Your answers to your coach’s intake form and check-ins go to your coach, and your coach can keep their own notes about your coaching. Your coach can also see whether your coaching payment is current and the price you pay, but never your card details. While you share nutrition, your coach also sees your goal, your daily calorie and protein targets and your program, and can suggest a new goal or new targets with a note; you accept or decline, and they see your answer and any reason you give. If one of your safety limits changes their suggestion, they see the adjusted numbers and only the general kind of limit (such as “life stage” or “calorie minimum”), never the specific reason (such as pregnancy or breastfeeding). If you turn on Settings › Coaching › Your coach › Let <your coach> change my goal directly (off by default), their goal and target changes apply right away and you can undo each one for 7 days. Programs your coach sends you start in the App.
• Service providers (processors) who handle data for us under contracts that limit their use of it to providing their service to us:

• The Aspiro store. Tapping a product opens aspirohealth.com in your browser; purchases there are covered by that site’s own policies. The App only reads the public product list.
• Legal and safety. When required by law, or to protect the safety of any person, including reporting child sexual exploitation to NCMEC.
• Business transfers. If Aspiro is involved in a merger, acquisition or sale of assets, with notice to you.

7. Community, user content and moderation

Comments, messages, challenge titles and other content you post are visible to the people you share them with. To keep the Community safe:

• Before you first comment, message, share a photo or create a challenge, you agree to the Community rules.
• Comments, messages, challenge text and profile names, bios and goal labels are checked against a list of blocked words before they are saved. A blocked attempt is logged with a one-way fingerprint of the text, never the text itself.
• New profile photos, cover photos, workout photos and your own workout and program covers are checked once by an automated safety check (using Google’s Gemini API, or its backup route in section 4, only if you have AI features on). A photo that clearly shows sexual content, graphic violence, a hate symbol or self-harm is hidden right away and sent to our team for review.
• You can report a person, a comment, a post or a challenge, and block anyone (unblock in Settings › Privacy & safety › Blocked people). Reports alert our moderators at once, and we review every report within 24 hours. Comments reported by several people are hidden automatically until reviewed. Direct messages are private: moderators act on the report, and do not browse your conversations.
• We keep reports and moderation records to enforce our Terms, until the related account is deleted (section 8).

AI-powered community members. The Community may include a small number of AI-powered training buddies operated by Aspiro, not real people. The Community guidelines in the App say so. They may post simulated workouts, react to and comment on workouts you share to Community, accept friend requests and reply to your direct messages. When you message or reply to one and you have AI features on, that conversation is sent to Google’s Gemini API (or its backup route through OpenRouter, section 4) to write its reply; with AI features off, it does not reply. If you sincerely ask one whether it is an AI, it will always say yes. They never ask for contact details, money or photos, never suggest meeting, and point medical or crisis questions to real help (in the US, call or text 988). A conversation that looks like a crisis may be flagged to our team. They are not counted as members, earn no rewards and cannot win challenges.

8. Retention

• We keep your account data while your account is open, and delete it when you delete your account (section 9).
• Deleting a coach conversation in the App removes it from your app; the server keeps it, marked deleted, until you delete your account.
• Comments you delete are removed right away, with their replies. Direct messages are kept until your account, or the other person’s, is deleted.
• Read notifications are archived after 90 days and deleted 30 days later.
• Payment records. Stripe keeps the details of a coaching payment under its own legal obligations. We keep a record of each payment, refund and dispute (amount, date, Stripe reference, which coach) for tax and accounting, and the coach keeps a record of what they earned. These records are not deleted when you delete your account; they are kept without your name, and the account they belonged to no longer exists.
• Email invitations and the do-not-email list. An invitation record (the fingerprint, the coach, the status) is kept while the coach’s account is open. The do-not-email list is kept for as long as we send email, because deleting it would let us email someone who asked us to stop. It holds only fingerprints.
• Coach confirmation cards (for example, “log this meal?”) expire after about 10 minutes if you don’t confirm them.
• The coach’s memory keeps a short list of facts. A fact you delete is kept only as a one-way fingerprint, so the coach doesn’t learn it again.
• Summaries of your coach conversations are kept for 12 months and then deleted automatically. The short daily notes they are written from are kept for 30 days and then deleted automatically. Deleting a summary in Settings › Coaching › Coach memory deletes it and that day’s notes from our servers right away.
• Smart meditations. What you typed or said for one, and the working copies used to check its script, are deleted 48 hours after it is finished; the script text after 30 days. The voice recording is kept until you delete the meditation (it is erased right away) or your account.
• Location. The rounded point is used for one search and not stored. The record that you made a nearby search (account id, kind of request and time, never the place) is cleared once it is two days old, the next time you search, and with your account.
• Spoken coach replies. The audio made from the text of a coach reply is kept in a private store on our servers that is not linked to your account, with no expiry today.
• Weekly email pictures. Charts made for a weekly report email are kept on our servers at an unguessable web address, carry no name or account id, and are not deleted automatically today.
• Things you share into Aspiro are deleted from your phone after 24 hours, as soon as you close them, and when you sign out. An item you used stays for up to 2 hours so the screen it opened can finish.
• Subscriptions. Apple keeps its own purchase records under its terms. RevenueCat keeps your purchase records, linked only to your account id, to run the service; deleting your Aspiro account does not erase them today.
• Food product details fetched from Open Food Facts or USDA are cached on our server so the next scan is faster. These are product records, not your food log; the link to your account is removed when you delete it.
• Crash reports are kept by Sentry for up to 90 days. Analytics events are kept by PostHog for our plan’s retention period; after you delete your account they point to an account id that no longer exists. Service logs are kept by our hosting provider for a short time (days).
• Second Brain items are kept until you delete them or delete your account. When you delete an item, our server erases its text straight away and your phone removes its photo files straight after. If your phone is offline or closes first, this finishes the next time it connects to your account (a leftover photo file is cleaned up on a later sync, or when you delete your account). A small record with no content in it, only ids, the kind of item (photo, link or note) and dates, is kept for about 90 days so your other devices know to remove their copies, and is then deleted.
• Your search index (if you turned on search by meaning) is kept until you turn the feature off, delete the item, turn AI features off or delete your account, and is deleted then. A daily clean-up also removes any index entry whose item is gone.
• Data on your iPhone (including Health data held by the App) is cleared when you sign out, delete your account or delete the App. The one exception is a plain sign-out: Second Brain saves that had not finished uploading stay on your phone, under your account, and are sent the next time you sign in to that account. Deleting your account or the App removes them.

9. Deleting your account

You can delete your account in the App at Settings › Account › Delete account. You type DELETE to confirm, and the deletion happens right away on our servers. It deletes:

• your sign-in, profile and settings, body measurements and push tokens;
• your workouts, programs, meals, check-ins, intentions and journal;
• your coach conversations, coach memory (facts and conversation summaries) and AI usage records;
• your photos (profile, cover, progress, My Why and workout photos, and the covers you picked for your own workouts and programs);
• your Second Brain items (saved photos, links and notes) and your search index;
• your smart meditations (scripts and voice recordings) and your saved weekly sleep summaries;
• your posts, comments and reactions, and the replies under your comments;
• your direct-message conversations (for both people in them);
• your friendships, blocks, invites, challenge entries, and reports you made or that were made about you;
• your coaching connection. If you pay for coaching, your coaching subscription is cancelled first, right away and without a refund, so you are not charged again; if it cannot be cancelled, nothing is deleted and the App tells you.

Deleting your account does not cancel a subscription you bought through Apple. Cancel it first in iOS Settings › your name › Subscriptions, or Apple keeps billing you. Records of past purchase events are kept without any link to you.

Teams you started pass to their longest-standing member (or are deleted if nobody else is in them). A few records are kept without any link to you: Shine points other members earned from your cheers, cost records of AI features, moderation history, and the payment records described in section 8. Apple Health data on your iPhone is not touched. If you used Sign in with Apple, you can also remove Aspiro from your Apple Account at any time in iOS Settings (your Apple Account › Sign in with Apple).

If you cannot use the App, email contact@aspirohealth.com from the address on your account and we will delete it for you. A human coach can delete their account in the App once they have no active or paused clients and no earnings waiting to be settled; their coaching notes are deleted and records of past payments are kept.

10. Children

The App is not for children. You must be 16 or older to use it. (This replaces the age of 13 in our earlier website policy.) We do not knowingly collect data from anyone under 16; if we learn we have, we delete it. Contact us if you believe someone under 16 has an account.

11. Security

Data is encrypted in transit and at rest by our hosting provider. Database security rules limit each account to its own data and what others have chosen to share with it; private photos are in private storage; the keys for AI and other services stay on our servers, never in the App. No system is perfectly secure; we will notify you and regulators of a breach where the law requires.

12. Where Aspiro is offered, and where data is stored

Aspiro is a US service, offered to people in the United States. DesignX Inc. is based in the US, and we and our service providers store and process data in the US. Our service providers act under contracts that limit their use of the data to providing their service to us. If you use the App from outside the US (for example, as an invited beta tester), your information is transferred to and handled in the US under this policy.

13. Your rights

Everyone. You can see and edit most of your data in the App, delete content, delete your account, turn off AI features, analytics, notifications, Community sharing and coach sharing, disconnect Apple Health, and control your human coach’s access. To get a copy of your data, email us (section 15) and we will send it in a common machine-readable format.

You can also ask us to confirm what personal information we hold about you, to correct it, to delete it, or to send you a copy, and you can withdraw any consent you gave at any time (this does not affect what was done before).

California and other US states with privacy laws. You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for using these rights. We do not sell or “share” personal information for cross-context behavioural advertising, and we use sensitive personal information only to provide the App. Health information you give us is consumer health data under laws such as Washington’s My Health My Data Act: we collect it only to provide the features you ask for, share it only as described in sections 4 and 6, never sell it, and you can access or delete it as described here.

To use your rights, contact us (section 15). We will verify your request (usually by email from the address on your account) and respond within the time the law requires. You can use an authorised agent where the law allows.

14. Changes

We will post changes here and update the date at the top. If a change is material, we will tell you in the App before it takes effect.

15. Contact

DesignX Inc.
851 W Front St Ste 1501, Boise, ID 83702, United States
contact@aspirohealth.com · aspirohealth.com/contact