Privacy Policy

Last updated: July 30, 2026

EXO is operated by OutHives Inc. ("OutHives," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use EXO, our website, and related services.

EXO is a personal health companion. Because the information you choose to provide may include health, nutrition, fitness, body, and lifestyle data, we treat it carefully and use it to provide and improve EXO.

1. Information We Collect

Account information. We collect information used to create and manage your account, such as your name, email address, authentication method, session information, and account status. If you use Sign in with Apple, we receive information Apple provides, such as your Apple account identifier and, when available, your name or email address.

Profile and onboarding information. You may provide age, biological sex, height, weight, unit preferences, timezone, goals, allergies, dietary preferences, conditions, activity level, sleep patterns, and similar setup information.

Health, nutrition, and activity logs. EXO stores information you choose to log or sync, including meals, food items, calories, macros, micronutrients, supplements, hydration, fasting, weight, body composition, activity, sleep, vitals, workouts, goals, check-ins, notes, and related timestamps.

Photos, scans, and attachments. You may upload or capture images such as food photos, supplement labels, product labels, progress photos, chat attachments, and similar content. EXO may process these images to identify foods, estimate nutrition, extract label information, or provide insights.

Messages and AI interactions. We collect chat messages, prompts, responses, task requests, generated summaries, and related context needed to provide EXO's assistant, reports, recommendations, and planning features.

Subscriptions and purchases. Purchases and subscriptions are processed through the Apple App Store. We receive subscription status information, such as product identifier, entitlement status, renewal state, purchase or expiration dates, and related account identifiers, so we can provide paid features.

Product analytics and interaction data. We collect limited information about how people move through EXO, such as app lifecycle events, onboarding and product-flow steps reached, actions completed, time spent at a step, feature adoption, paywall and offer state, subscription status, product identifiers, app version and build, platform, and whether an account is authenticated or has paid access. After sign-in, we associate these events with an internal account identifier so we can understand funnels, improve features, and measure whether EXO works as intended.

Advertising measurement and attribution data. We may collect limited device and app interaction information to measure and attribute advertisements for EXO, including IP address, device identifiers, advertising identifiers where permitted, app installation and session information, campaign information, and limited conversion events such as registration, onboarding completion, paywall views, checkout initiation, trial activity, purchases, renewals, cancellations, and expirations.

Diagnostics and reliability data. We may collect crash reports, stack traces, crash-free session information, device model, operating-system version, app version and build, IP address, and related technical metadata to diagnose errors, prevent abuse, and improve reliability.

Analytics safeguards. We configure our analytics and diagnostics tools to limit sensitive collection. We do not intentionally send health logs, meal photos, chat content, typed text, screen recordings, screenshots, or view hierarchies to these tools for analytics or diagnostics.

Advertising safeguards. We do not disclose Apple Health data, health logs, body measurements, meal content, photos, messages, AI conversations, or other sensitive content you enter into EXO to advertising or attribution providers. EXO does not display third-party advertisements inside the app.

2. Apple Health and HealthKit

If you choose to enable Apple Health access, EXO may read health and fitness data from HealthKit, such as activity, steps, active energy, exercise minutes, sleep, vitals, workouts, weight, and related measurements, depending on the permissions you grant.

HealthKit access is optional. You can change or revoke HealthKit permissions at any time in Apple Health or iOS Settings. If you revoke access, EXO will stop collecting new HealthKit data, but information already synced to EXO may remain in your EXO account until you delete it or delete your account.

We use HealthKit-derived data only to provide and improve EXO's health, nutrition, fitness, goal, and insight features. We do not sell HealthKit data, use it for advertising, share it with data brokers, or use it for marketing unrelated to EXO's health features.

3. How We Use Information

• Provide, personalize, and maintain EXO's tracking, assistant, analysis, dashboard, notification, and reporting features.
• Analyze food photos, labels, messages, logs, and health signals to generate nutrition estimates, summaries, insights, plans, and recommendations.
• Create and manage your account, subscription access, preferences, goals, and saved content.
• Send service-related messages, reminders, push notifications, support responses, and account notices.
• Understand how people move through onboarding, purchase, and other product flows; evaluate feature adoption; and improve usability.
• Attribute app installations, trials, and subscriptions; measure advertising performance; prevent attribution fraud; and improve our marketing campaigns.
• Debug errors, prevent abuse, secure the service, measure performance, and improve reliability.
• Comply with legal obligations, enforce our terms, and protect the rights, safety, and security of users, OutHives, and others.

4. AI Processing

EXO uses artificial intelligence and machine learning systems to power features such as food recognition, label extraction, chat, insights, reports, meal planning, and personalized recommendations.

To provide these features, we may send relevant content, such as photos, labels, messages, logs, profile context, or health signals, to AI infrastructure and model providers acting on our behalf. We use these providers to process requests and return results for EXO features. We do not permit these providers to use your personal information for advertising on our behalf.

AI outputs may be incomplete or inaccurate. EXO is not a medical provider and does not provide medical advice, diagnosis, or treatment.

5. How We Share Information

We do not sell your personal information or personal health data.

We may share information with service providers that help us operate EXO, including cloud hosting, database, storage, authentication, subscription management, payment support, AI processing, notifications, product analytics, crash reporting, diagnostics, security, and customer support providers. These providers are allowed to use information only to provide services to us or as otherwise permitted by law.

We may share limited device, attribution, campaign, app interaction, and subscription conversion information with advertising measurement providers and advertising platforms that help us measure, prevent fraud, and optimize campaigns for EXO. We do not share the sensitive content described in the Advertising safeguards section with these providers.

We may share information if required by law, legal process, or a valid government request; to protect rights, safety, and security; to investigate abuse or fraud; or in connection with a merger, acquisition, financing, reorganization, or sale of assets.

We may share information with your consent or at your direction, such as when you export, share, or send content from EXO.

6. Notifications

If you allow push notifications, EXO stores a device token and notification preferences so we can send reminders, task updates, insights, and account-related messages. You can turn off notifications in iOS Settings or in EXO where controls are available.

7. Retention and Deletion

We keep personal information for as long as needed to provide EXO, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and protect the service.

You can delete your account in the app. Account deletion removes your account and user-owned data from EXO's active systems, including stored logs, profile data, messages, goals, subscription mirror data, notification tokens, and user-uploaded files where technically possible. Some information, including analytics and diagnostic records, may remain for a limited period in provider systems, backups, logs, or records we must keep for legal, security, fraud-prevention, or accounting reasons. We may retain de-identified or aggregated information where permitted by law.

8. Your Choices and Rights

• You can update account, profile, goal, notification, and app preferences in EXO where available.
• You can revoke HealthKit permissions in Apple Health or iOS Settings.
• Apple may ask whether you permit tracking through its App Tracking Transparency framework. Declining does not affect EXO's core functionality and prevents EXO from accessing your device's advertising identifier through that permission. Limited or aggregated advertising measurement may still occur where permitted by Apple using information and methods that do not require tracking permission. You can change this permission in iOS Settings.
• You can request access, correction, deletion, or export of personal information by contacting us.
• You can delete your account from within the app.

Depending on where you live, you may have additional privacy rights, including rights to access, correct, delete, port, restrict, or object to certain processing of your personal information. We will respond to privacy requests as required by applicable law.

9. Security

We use technical, administrative, and organizational safeguards designed to protect personal information, including access controls and encryption in transit. No system is completely secure, and we cannot guarantee absolute security.

10. International Users

EXO may be available globally. Your information may be processed in countries other than where you live, including countries that may have different data protection laws. Where required, we use appropriate safeguards for international transfers.

11. Children

EXO is not intended for children under 13, or the minimum age required in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided personal information to EXO, contact us and we will take appropriate steps.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and provide additional notice where required by law.

13. Contact

If you have questions or privacy requests, contact us at [email protected].