How we handle your data.

Here's the short version. The rest of the policy goes deeper, but this is what we want you to know:

• We don't sell your data. Not now, not ever. Not to advertisers, data brokers, or insurance companies.
• Your food log and feelings stay private.They're visible only to you and the Aloe coach that uses them to help you.
• Apple Health and Health Connect are read-only. We read sleep, activity, and other metrics you give us permission for. We never write anything back to Apple Health or Health Connect.
• AI features use OpenAI under a no-training agreement. Your data goes to OpenAI to generate Aloe's responses. OpenAI is contractually prohibited from using that data to train their models.
• You can delete everything. Use the in-app delete account flow or our account deletion pageand we'll remove your account and your data.

Aloe AI is a product of Studio Eastgate, LLC ("Aloe," "we," "us"), a Delaware limited liability company. When we use "you" in this policy, we mean the person using the Aloe app or website.

This policy covers the Aloe iOS and Android apps, the aloeai.app website, and any related services we operate. It applies whether you're signed in or just browsing.

We collect the minimum we need to run Aloe and improve it. Concretely:

Account information.When you sign in with Apple or Google, we receive your name and email address from that provider. We don't receive your password.

Profile information. Height, weight, biological sex, timezone, goals, and any health conditions, allergies, or dietary restrictions you choose to share during onboarding. The free-text conditions field is optional and you can skip or update it anytime.

Food logs. Text descriptions of what you ate, any photos you choose to attach, and the AI-inferred nutritional breakdown (calories, macros) for each entry. Photos are stored inside our database, not in any third-party photo service.

Feeling check-ins. Your responses to post-meal questions about energy, digestion, fullness, and overall feel.

Chat history. The full conversation between you and Aloe in the app, so the coach can refer back to prior context.

Platform health data (with your permission). If you grant access, we read Apple Health data on iOS and Health Connect data on Android. This can include sleep, steps, workouts or exercise sessions, heart rate, height, weight, and, on iOS, active/resting energy. See the dedicated health data section for what we do and don't do with it.

Device and technical data. Your push notification token (so we can send post-meal check-ins), your timezone, and basic technical information needed to deliver the app - app version, operating-system version, crash diagnostics, product analytics events, and device identifiers such as the Android Advertising ID where available for attribution.

Subscription status.Whether you're in a free trial, on the monthly plan, on the annual plan, or unsubscribed. Apple, Google, and RevenueCat help us process and verify subscription status. Apple and Google handle your actual payment information - we never see your card.

Website analytics. If you visit aloeai.app, we use Google Analytics, Microsoft Clarity, and pixels from Meta, TikTok, and Reddit to understand traffic and ad performance. These tools may collect IP addresses, browser info, and pages viewed.

We use the data above to:

• Run Aloe's coaching - finding patterns between what you eat, how you feel, your sleep and activity, and any conditions you've shared.
• Generate Aloe's responses, recommendations, and weekly summaries.
• Send post-meal check-in notifications.
• Manage your account and your subscription.
• Improve Aloe - de-identified, aggregated insights help us understand what coaching approaches work and where the product needs to get better.
• Respond when you contact support, and handle billing or fraud issues.
• Meet legal obligations - keeping records, responding to lawful requests.

We do not use your food logs, feelings, platform health data, or chat content to train any third-party AI models. We do not sell your data. We do not allow service providers to use your food logs, health data, feelings, or chat content for their own marketing.

Apple Health access on iOS and Health Connect access on Android are optional. You decide what to grant. We ask for read access to:

• Sleep analysis (duration and quality)
• Step count and workouts or exercise sessions
• Heart rate
• Active and resting energy on iOS
• Height and weight, and biological sex on iOS where available

Health access is read-only. Aloe does not write any data back to your HealthKit store or Health Connect.

We use this data alongside your meals so Aloe can spot connections like "low sleep plus a heavy dinner often makes you bloat the next morning" - context a food-only tracker can't see.

You can revoke Apple Health access anytime in the iOS Settings > Privacy & Security > Health > Aloe screen. You can revoke Health Connect access anytime in Android's Health Connect app permissions. We will stop reading new data immediately. Past data we already used to find patterns is retained according to our normal retention rules unless you delete your account.

Aloe's chat coach and nutrition inference are powered by OpenAIas our model provider. When you send a message, log a meal, or check in on how you feel, Aloe assembles relevant context - recent meals, recent feelings, relevant patterns, your conditions - and sends it to OpenAI's API to generate a response.

OpenAI is contractually prohibited from using API data to train their general models. They process the data only to fulfill our request and, per their standard terms, may retain it for up to 30 days for abuse monitoring before deletion.

AI-generated responses can be wrong. Aloe is a coaching tool, not a medical device. Do not rely on it for diagnosis, treatment, or emergency decisions. See our Terms of Service for the full disclaimer.

We share data only with service providers that help us operate Aloe, under contracts that require them to protect your data and use it only for the purposes we authorize. The providers are:

• OpenAI - powers the AI coach and nutrition inference (see above).
• Apple - processes App Store subscriptions, delivers push notifications, and verifies Apple Sign In tokens.
• Google - verifies Google Sign In tokens for users who choose that login method, processes Google Play subscriptions, and helps deliver Android push notifications.
• RevenueCat - manages subscription entitlement status and purchase/restore flows across App Store and Google Play.
• Mixpanel, AppsFlyer, and Meta - help us understand app usage, onboarding, subscription events, and attribution. We do not send them food logs, health data, chat content, or attached meal photos.
• Sentry - aggregates crash reports and errors so we can fix bugs. Sensitive request bodies are redacted before sending.
• Cloud hosting providers - our database and application servers run on managed cloud infrastructure under standard data-processing agreements.
• Website analytics and ad pixels - on aloeai.app: Google Analytics, Microsoft Clarity, Meta Pixel, TikTok Pixel, and Reddit Pixel. These help us measure traffic and ad performance.

We may also disclose data if required by valid legal process, to protect against fraud or abuse, or in connection with a corporate transaction (e.g., acquisition). If the company is acquired, your data remains protected under terms at least as strong as this policy.

We do not sell your personal informationfor any purpose under any state or international definition of "sale," including under the California Consumer Privacy Act.

We keep your data while your account is active so Aloe can keep learning your patterns. Specifically:

• Account, profile, food logs, feelings, chat, health data: retained for as long as your account exists.
• After account deletion: we begin deletion within 7 days. All personal data is purged from our active systems within 30 days. Encrypted backups are overwritten on our normal backup cycle, usually within 90 days.
• Subscription and billing records: retained for up to 7 years to meet financial recordkeeping obligations, in de-identified form where possible.
• Support and legal records: retained as long as necessary to resolve the matter and meet legal requirements.

You have meaningful control over your data. Depending on where you live, you have some or all of these rights:

• Access - request a copy of the personal data we hold about you.
• Correction - update inaccurate or incomplete data (you can also do this in the app).
• Deletion - delete your account and the data associated with it, or ask us to delete specific Aloe data without deleting your account.
• Portability - receive your data in a structured, machine-readable format.
• Objection and restriction - object to certain processing or ask us to limit it.
• Withdraw consent - revoke Apple Health, Health Connect, push notifications, or any other consent at any time.
• Complaint- lodge a complaint with your local data protection authority if you believe we've handled your data improperly.

California residents have additional rights under the CCPA, including the right to know what categories of personal information we collect and to whom we disclose it (described in this policy), the right to delete, and the right to non-discrimination for exercising privacy rights.

To exercise any of these rights, use the in-app delete account flow or email aloeai@studioeastgate.com from the email address on your account. See our account deletion pagefor deletion steps, data-specific deletion requests, and timing. We'll respond within 30 days.

Aloe is not directed to minors under 18. We do not knowingly collect personal information from anyone under 18. If you're a parent or guardian and you believe your child has provided data to Aloe, contact us at aloeai@studioeastgate.com and we will delete it promptly.

We use industry-standard safeguards to protect your data, including encryption in transit (TLS), encryption at rest for our database and backups, access controls, audit logs, and regular review of our systems. Authentication uses tokens issued by Apple and Google - Aloe never sees or stores your sign-in password.

No system is perfectly secure. If we ever have a breach that affects your data, we will notify you in the timeframe required by applicable law.

Aloe is operated from the United States. If you use Aloe from outside the U.S., your data will be transferred to and processed in the U.S. and other countries where our service providers operate. Where required, we rely on standard contractual clauses or equivalent safeguards to protect data transferred out of the EEA, UK, or Switzerland.

We may update this policy as Aloe evolves or as laws change. If we make a material change, we'll notify you in the app or by email before the change takes effect. The "Effective date" at the top of this page always reflects the latest version. Continuing to use Aloe after a change means you accept the updated policy.

For privacy questions, requests, or complaints:

Email: aloeai@studioeastgate.com
Mailing address: Studio Eastgate, LLC, Delaware, USA

If you write us about a privacy matter, please mention "Privacy" in the subject line so we can route it to the right person.