Aspiro WINS App Privacy Policy

Last updated: October 5, 2026

This policy explains what the Aspiro WINS app (the “App”, shown on your home screen as “Aspiro”) collects, why, who it is shared with, and the choices you have. “Aspiro”, “we” and “us” means DesignX Inc., 851 W Front St Ste 1501, Boise, ID 83702, United States.

The short version

• We collect what you put into the App (your profile, workouts, meals, check-ins, messages) so the App can work and sync across your devices.
• Most Apple Health data stays on your iPhone. The few exceptions are listed in section 3.
• Photos, links and notes you save in Second Brain are kept in private storage that only you can see, and we do not read them. Searching them by meaning is off unless you turn it on (sections 1 and 4).
• We never sell your data. We never use Apple Health data for advertising. There are no ads, no advertising identifiers and no cross-app tracking in the App.
• AI features (the coach, meal and menu photo analysis, voice replies) send the information they need to the AI providers named in section 4, and only after you say yes. You can turn AI features off at any time in Settings › Coaching › AI features.
• We use first-party product analytics and crash reports to fix and improve the App (section 2). You can turn analytics off in Settings › Privacy & safety › Share usage analytics.
• You can delete your account and your data in the App: Settings › Account › Delete account.

1. Information you give us

Account. Your email address, or your Apple or Google sign-in identity, and a display name. If you use Sign in with Apple you can hide your email.

Profile and body stats. Sex, date of birth, height, weight and goal weight, activity level, fitness goal, calorie and macro targets, dietary preferences, allergies and foods you dislike, and, only if you tell us, that you are pregnant or postpartum and the related dates. Optional: bio, profile photo, cover photo, goal label.

Training. Workouts, sets, reps, weights, programs, gym equipment profiles, personal records, mobility and meditation sessions, and body measurements (weight, body fat, lean mass).

Nutrition. Meals and foods you log, portion sizes, water, supplements, barcodes you scan, recipes and meal plans.

Photos.

• Meal photos you choose to analyse are sent to our server and on to an AI provider to estimate what is on the plate. We do not store the photo: it is sent with the request and not saved to your account or our storage. (A photo you have separately saved in Second Brain is kept as described under Second Brain below; analysing it as a meal does not save another copy to your account or our storage.)
• Menu and receipt photos you take in Eating Out are handled the same way: the photo is sent to our server and on to an AI provider to read the dishes on it and estimate their nutrition, and is not saved to your account or our storage. The list of dishes read from your last few menus stays on your phone so you can open them again; it is not sent to our servers.
• Progress photos and photos on your “My Why” board are kept in private storage that only you can see (and a human coach, only if you allow it; section 6).
• Profile photos, cover photos and workout photos you post are visible to the people who can see your profile or post. They are checked once by an automated safety check (section 7).

Second Brain (saved photos, links and notes). Second Brain is a private library in the App where you keep photos, links and notes that you add yourself. The App stores:

• Photos you save, as a compressed copy and a small thumbnail (not the original file);
• Links: the address you save, the title if you add one and the name of the site. Saving a link does not open the page or save its contents. If you later choose Import this recipe on a link, your phone reads that page to work out the nutrition (an AI estimate happens only if you then choose it; section 4), and the meal you log can keep the link;
• Notes: the text you write.

Links and notes can also have a title you give them. These are kept in your account, in private storage that only you can see, and they sync to your other devices. We keep them until you delete them or delete your account. Each account can hold up to 200 items and 200 MB; when it is full, new saves are refused and nothing is deleted for you. A save that has not finished uploading stays on your phone, under your account, until it uploads. If you sign out first, it is kept on your phone and uploads the next time you sign in to the same account. Like any database, ours keeps an automatic text index of your notes, links and titles so they can be matched by words; it is private to you, nobody reads it, and it is removed when the item or your account is deleted. We do not read or analyse what you save, and it is never shown to other people, teams or the Community. It is used only if you pick an action on an item, such as asking the coach about it or logging a meal; that opens the usual screen, where what is sent is covered by section 4 and needs your AI permission. The App’s usage analytics (section 2) record only coarse facts, such as that you saved or deleted an item and whether it was a photo, link or note, never its content or your search words. The one exception to “we do not read or analyse” is search by meaning, which is off unless you turn it on (section 4).

Wellness and journaling. Daily check-ins (energy, soreness, stress on a 1–5 scale), daily intentions, commitments and journal entries.

AI coach. Your chats with the coach (typed or spoken), the actions you confirm (such as logging a meal), a short list of facts the coach remembers about you so it doesn’t have to ask again, short notes of each day’s chat (the first part of each thing you said and of the coach’s reply), and, unless you turn it off, a short summary of each day you chat with the coach: what you said, what the coach suggested, how you said you felt, and lasting details such as an injury, your schedule or your equipment. Summaries are written only from your own chats with the coach, never from your direct messages or comments. In Settings › Coaching › Coach memory you can view, add or delete facts, view or delete any summary, turn Remember our conversations off (no new summaries; the ones you have stay until you delete them), or delete all coach memory.

Voice. When you talk to the coach, Apple’s speech recognition turns your speech into text, on your iPhone whenever the device supports it (otherwise on Apple’s servers, under Apple’s privacy terms). We receive the text, never the recording. If you use spoken replies, the text of the coach’s reply is sent to our voice provider to create the audio (section 4).

Social features. Teams you create or join, challenges, friend requests, reactions and cheers, comments and replies (including @mentions), direct messages, and the reports and blocks you make. Your workouts are shared with your teams unless you turn that off in Settings › Sharing. They are shared with the wider Community only if you turn on Settings › Sharing › Share workouts to Community (off by default), and only workouts finished after you turn it on.

Choices you make. When you accepted the Terms and the Community rules, and your answer to the AI data-sharing question.

Support and feedback you send us through Settings › Privacy & safety › Contact us / Report a problem (aspirohealth.com/contact) or by email.

2. Information collected automatically

• Push notification token for your device, if you allow notifications, so we can send the reminders and alerts you choose. It is stored with your account and the device platform.
• App updates. The App checks Expo’s update service for new versions of its code. The request includes technical details such as the app version, platform and a random installation id.
• Product analytics (PostHog). To learn which features people use and where the App is confusing, the App sends usage events to PostHog: for example “opened the coach”, “finished a workout”, “scanned a barcode”, along with the screen name, app version, and device model and operating system. Events are linked to your Aspiro account id. They describe actions only: never health values, body stats, meal or food contents, photos, or the text of anything you write. We have turned off PostHog’s location lookup and session recording. PostHog also lets us switch features on for some users and compare two versions of a screen (feature flags and A/B tests). Analytics is on unless you switch it off in Settings › Privacy & safety › Share usage analytics; when it is off, the App sends no analytics events.
• Crash reports (Sentry). When the App crashes or hits an error, it sends a crash report to Sentry: the error, where in the code it happened, the app version, and the device model and operating system. Crash reports are not linked to your account, are scrubbed on your phone before they are sent, and never include health values, meal contents, photos, screen contents or the text of your messages. They are sent whether or not analytics is on, because we need them to keep the App working.
• Service logs. Our servers record technical events (for example, a failed request or how long an AI reply took) and how many AI requests your account uses, so we can run the service, prevent abuse and control cost.
• We do not use advertising identifiers (IDFA), advertising or attribution SDKs, or location services, and we do not track you across other companies’ apps or websites. The App does not ask for your location.

3. Apple Health

If you connect Apple Health (Settings › Health › Apple Health), the App asks for access to the types below. You choose which to allow, and you can change it at any time in iOS Settings › Health › Data Access & Devices.

• Read: active energy, steps, workouts, weight, body fat, lean body mass, height, sleep, resting heart rate, heart rate variability, heart rate, VO2 max, exercise time, walking + running distance, flights climbed and mindful minutes. Menstrual cycle and State of Mind are read only if you switch them on.
• Write: workouts, mindful sessions, dietary energy, protein, carbohydrates and fat, water, weight and body fat. Food values that came from an AI estimate you confirmed are marked as estimates in their Health metadata.

What stays on your iPhone. Health data the App reads is kept in the App’s storage on your device and is cleared when you sign out. Cycle and State of Mind data are held in memory only and are never stored or sent anywhere.

What leaves your iPhone:

1. Weight, body fat and lean mass readings imported from Health are saved to your body measurements so they sync across your devices.
2. Workouts recorded by other apps are saved as a simple marker (type, start and end time, duration; no heart rate or calories) so they count toward your weekly activity.
3. Coach sharing (off by default). If you turn on Settings › Health › Apple Health › Share sleep and recovery with my coach, one line summarising last night’s sleep and your recovery (sleep duration, HRV and resting heart rate compared with your baseline, and a readiness level) is sent with your coach requests, and so reaches the AI provider in section 4.
4. Because the coach can see your body stats, a weight or body-fat reading that came from Health (item 1) can also reach the AI provider when you use the coach with AI features on.

Apple Health data is never used for advertising or marketing, never sold, and never shared with data brokers or advertisers. It is used only to provide the App’s health and fitness features, and it is never included in analytics events or crash reports.

4. AI processing

The App uses AI to power the coach (including voice mode and check-in replies), to estimate nutrition from meal photos and descriptions, to read the dishes on a restaurant menu or receipt you photograph, to create workout cover images, to write the coach’s memory summaries, to create spoken coach replies, to run the automated photo safety check, and, only if you turn it on, to search Second Brain by meaning. These requests run on our servers, which send the AI provider only what that request needs.

For the coach that can include your profile and body stats, goals, recent workouts, nutrition and meditation summaries, check-in scores, pregnancy status if you gave it, what the coach remembers about you (its saved facts and summaries of your recent conversations with it), your message and any photo you attach, and, only if you turned coach sharing on, the sleep and recovery line in section 3. Journal text is never sent to the coach; it sees only counts and dates. Conversation summaries are written by the AI provider from that day’s coach chat, and are sent to it again only as context for later coach replies. For cover images: the workout title, gym name, equipment, goal, the lead exercise and your sex (to pick a matching model). For menu and receipt photos: the photo. For the photo safety check: the photo.

Second Brain search by meaning (off by default). Searching Second Brain by exact words happens on your phone, with nothing sent anywhere. If you also turn on Search by meaning (in Settings › Data, or from the search screen in Second Brain; it has its own explanation and needs AI features on), then, to build and use a private search index, the App sends (through our server) to our AI service provider (Google, through the Gemini API): the text of your notes (title and body), the address, title and site name of your links, and the words you type into the search box. Photos are never sent for search, and searching never opens the page behind a link. The index is one list of numbers for each note or link, stored with your account and private to you. It holds numbers derived from your text and a one-way fingerprint of it, not the text itself. It is deleted when you turn search by meaning off (as soon as your phone is online), delete the item, turn AI features off or delete your account. Turning search off deletes our copy of the index; it cannot take back text already sent to the provider, which handles it as described in this section. Search by meaning has a monthly usage limit; when you reach it, exact-word search keeps working.

If you work with a human coach (section 6), the coach’s AI tools in their web portal can summarise the categories you let them see, using the same AI providers, and only if you have AI features on.

AI providers we use:

We use these providers’ paid API services. Under their API terms, Google, OpenAI and Anthropic do not use the data we send to train their models. The providers may keep request data for a limited time (typically up to 30–55 days) to detect abuse, under their own terms.

Your consent, and how to withdraw it. Before any AI feature sends anything, the App asks whether you agree to share the information above with our trusted AI service providers. Nothing is sent unless you choose Allow. You can change your answer at any time in Settings › Coaching › AI features: turn off Allow AI features and the App immediately stops sending data to AI providers, and our servers refuse AI requests for your account. The coach, voice mode, meal photo analysis, menu and receipt reading, the photo safety check and Second Brain search by meaning stop (turning AI features off also deletes your search index); everything else (workout tracking, food search and barcode scanning, logging, Second Brain saving and exact-word search) keeps working. You can turn AI features back on in the same place.

AI output can be wrong. It is not medical advice (see the Terms).

5. How we use information

• To provide the App: sync your data, show your progress, run programs, challenges, teams and messaging.
• To personalise training, nutrition targets and coaching.
• To send the notifications you turn on.
• To send you email. Account emails (sign-up confirmation, sign-in links, password resets, email changes and security codes) are part of the service and can’t be turned off. Product emails (welcome, reminders, weekly recap) can be turned off in Settings › Notifications › Email or with the unsubscribe link in every such email.
• To keep the App safe: moderation, preventing abuse, spam and fraud, and enforcing our Terms.
• To run, fix and improve the App (including analytics and crash reports), and to control AI costs.
• To meet legal obligations.

We do not sell or rent personal information, and we do not use it for advertising of any kind.

6. Who we share information with

• Other people in the App, as you choose. Teammates see your team activity; friends and people you message see your messages and profile basics; Community members see workouts you share to Community, and can also open your profile page, which shows your photo, cover image, name, bio, level and badges; people who can see a post see its comments. Blocking someone hides your profile from them (Settings › Privacy & safety › Blocked people). Turning off Settings › Sharing › Share workouts to Community stops new workouts from being shared.
• A human coach, if you connect with one. Your coach sees only the categories you allow in Settings › Coaching › Data sharing. When you connect, workouts, body measurements and your chats with the coach’s AI twin start on; nutrition (daily totals only), intentions and commitments (counts only, never journal text), progress photos and coach memory start off. You can change any of them at any time, and ending coaching removes the coach’s access. Summaries of your conversations with the AI coach are never shared with a human coach.
• Service providers (processors) who handle data for us under contracts that limit their use of it to providing their service to us:

• The Aspiro store. Tapping a product opens aspirohealth.com in your browser; purchases there are covered by that site’s own policies. The App only reads the public product list.
• Legal and safety. When required by law, or to protect the safety of any person, including reporting child sexual exploitation to NCMEC.
• Business transfers. If Aspiro is involved in a merger, acquisition or sale of assets, with notice to you.

7. Community, user content and moderation

Comments, messages, challenge titles and other content you post are visible to the people you share them with. To keep the Community safe:

• Before you first comment, message, share a photo or create a challenge, you agree to the Community rules.
• Comments, messages, challenge text and profile names, bios and goal labels are checked against a list of blocked words before they are saved. A blocked attempt is logged with a one-way fingerprint of the text, never the text itself.
• New profile photos, cover photos and workout photos are checked once by an automated safety check (using Google’s Gemini API, only if you have AI features on). A photo that clearly shows sexual content, graphic violence, a hate symbol or self-harm is hidden right away and sent to our team for review.
• You can report a person, a comment, a post or a challenge, and block anyone (unblock in Settings › Privacy & safety › Blocked people). Reports alert our moderators at once, and we review every report within 24 hours. Comments reported by several people are hidden automatically until reviewed. Direct messages are private: moderators act on the report, and do not browse your conversations.
• We keep reports and moderation records to enforce our Terms, until the related account is deleted (section 8).

AI-powered community members. The Community may include a small number of AI-powered training buddies operated by Aspiro, not real people. The Community guidelines in the App say so. They may post simulated workouts, react to and comment on workouts you share to Community, accept friend requests and reply to your direct messages. When you message or reply to one and you have AI features on, that conversation is sent to Google’s Gemini API to write its reply; with AI features off, it does not reply. If you sincerely ask one whether it is an AI, it will always say yes. They never ask for contact details, money or photos, never suggest meeting, and point medical or crisis questions to real help (in the US, call or text 988). A conversation that looks like a crisis may be flagged to our team. They are not counted as members, earn no rewards and cannot win challenges.

8. Retention

• We keep your account data while your account is open, and delete it when you delete your account (section 9).
• Deleting a coach conversation in the App removes it from your app; the server keeps it, marked deleted, until you delete your account.
• Comments you delete are removed right away, with their replies. Direct messages are kept until your account, or the other person’s, is deleted.
• Read notifications are archived after 90 days and deleted 30 days later.
• Coach confirmation cards (for example, “log this meal?”) expire after about 10 minutes if you don’t confirm them.
• The coach’s memory keeps a short list of facts. A fact you delete is kept only as a one-way fingerprint, so the coach doesn’t learn it again.
• Summaries of your coach conversations are kept for 12 months and then deleted automatically. The short daily notes they are written from are kept for 30 days and then deleted automatically. Deleting a summary in Settings › Coaching › Coach memory deletes it and that day’s notes from our servers right away.
• Food product details fetched from Open Food Facts or USDA are cached on our server so the next scan is faster. These are product records, not your food log; the link to your account is removed when you delete it.
• Crash reports are kept by Sentry for up to 90 days. Analytics events are kept by PostHog for our plan’s retention period; after you delete your account they point to an account id that no longer exists. Service logs are kept by our hosting provider for a short time (days).
• Second Brain items are kept until you delete them or delete your account. When you delete an item, our server erases its text straight away and your phone removes its photo files straight after. If your phone is offline or closes first, this finishes the next time it connects to your account (a leftover photo file is cleaned up on a later sync, or when you delete your account). A small record with no content in it, only ids, the kind of item (photo, link or note) and dates, is kept for about 90 days so your other devices know to remove their copies, and is then deleted.
• Your search index (if you turned on search by meaning) is kept until you turn the feature off, delete the item, turn AI features off or delete your account, and is deleted then. A daily clean-up also removes any index entry whose item is gone.
• Data on your iPhone (including Health data held by the App) is cleared when you sign out, delete your account or delete the App. The one exception is a plain sign-out: Second Brain saves that had not finished uploading stay on your phone, under your account, and are sent the next time you sign in to that account. Deleting your account or the App removes them.

9. Deleting your account

You can delete your account in the App at Settings › Account › Delete account. You type DELETE to confirm, and the deletion happens right away on our servers. It deletes:

• your sign-in, profile and settings, body measurements and push tokens;
• your workouts, programs, meals, check-ins, intentions and journal;
• your coach conversations, coach memory (facts and conversation summaries) and AI usage records;
• your photos (profile, cover, progress, My Why and workout photos);
• your Second Brain items (saved photos, links and notes) and your search index;
• your posts, comments and reactions, and the replies under your comments;
• your direct-message conversations (for both people in them);
• your friendships, blocks, invites, challenge entries, and reports you made or that were made about you.

Teams you started pass to their longest-standing member (or are deleted if nobody else is in them). A few records are kept without any link to you: Shine points other members earned from your cheers, cost records of AI features, and moderation history. Apple Health data on your iPhone is not touched. If you used Sign in with Apple, you can also remove Aspiro from your Apple Account at any time in iOS Settings (your Apple Account › Sign in with Apple).

If you cannot use the App, email contact@aspirohealth.com from the address on your account and we will delete it for you. Human-coach accounts are closed by email, because they hold their clients’ coaching records.

10. Children

The App is not for children. You must be 16 or older to use it. (This replaces the age of 13 in our earlier website policy.) We do not knowingly collect data from anyone under 16; if we learn we have, we delete it. Contact us if you believe someone under 16 has an account.

11. Security

Data is encrypted in transit and at rest by our hosting provider. Database security rules limit each account to its own data and what others have chosen to share with it; private photos are in private storage; the keys for AI and other services stay on our servers, never in the App. No system is perfectly secure; we will notify you and regulators of a breach where the law requires.

12. Where Aspiro is offered, and where data is stored

Aspiro is a US service, offered to people in the United States. DesignX Inc. is based in the US, and we and our service providers store and process data in the US. Our service providers act under contracts that limit their use of the data to providing their service to us. If you use the App from outside the US (for example, as an invited beta tester), your information is transferred to and handled in the US under this policy.

13. Your rights

Everyone. You can see and edit most of your data in the App, delete content, delete your account, turn off AI features, analytics, notifications, Community sharing and coach sharing, disconnect Apple Health, and control your human coach’s access. To get a copy of your data, email us (section 15) and we will send it in a common machine-readable format.

You can also ask us to confirm what personal information we hold about you, to correct it, to delete it, or to send you a copy, and you can withdraw any consent you gave at any time (this does not affect what was done before).

California and other US states with privacy laws. You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for using these rights. We do not sell or “share” personal information for cross-context behavioural advertising, and we use sensitive personal information only to provide the App. Health information you give us is consumer health data under laws such as Washington’s My Health My Data Act: we collect it only to provide the features you ask for, share it only as described in sections 4 and 6, never sell it, and you can access or delete it as described here.

To use your rights, contact us (section 15). We will verify your request (usually by email from the address on your account) and respond within the time the law requires. You can use an authorised agent where the law allows.

14. Changes

We will post changes here and update the date at the top. If a change is material, we will tell you in the App before it takes effect.

15. Contact

DesignX Inc.
851 W Front St Ste 1501, Boise, ID 83702, United States
contact@aspirohealth.com · aspirohealth.com/contact