How we handle your data.

Here's the short version. The rest of the policy goes deeper, but this is what we want you to know:

• We don't sell your data. Not now, not ever. Not to advertisers, data brokers, or insurance companies.
• Your food log and feelings stay private.They're visible only to you and the Aloe coach that uses them to help you.
• Apple Health is read-only. We read sleep, activity, and other metrics you give us permission for. We never write anything back to Apple Health.
• AI features use OpenAI under a no-training agreement. Your data goes to OpenAI to generate Aloe's responses. OpenAI is contractually prohibited from using that data to train their models.
• You can delete everything.Ask us in the app or by email and we'll remove your account and your data.

Aloe AI is a product of Studio Eastgate, LLC ("Aloe," "we," "us"), a Delaware limited liability company. When we use "you" in this policy, we mean the person using the Aloe app or website.

This policy covers the Aloe iOS app, the aloeai.app website, and any related services we operate. It applies whether you're signed in or just browsing.

We collect the minimum we need to run Aloe and improve it. Concretely:

Account information.When you sign in with Apple or Google, we receive your name and email address from that provider. We don't receive your password.

Profile information. Height, weight, biological sex, timezone, goals, and any health conditions, allergies, or dietary restrictions you choose to share during onboarding. The free-text conditions field is optional and you can skip or update it anytime.

Food logs. Text descriptions of what you ate, any photos you choose to attach, and the AI-inferred nutritional breakdown (calories, macros) for each entry. Photos are stored inside our database, not in any third-party photo service.

Feeling check-ins. Your responses to post-meal questions about energy, digestion, fullness, and overall feel.

Chat history. The full conversation between you and Aloe in the app, so the coach can refer back to prior context.

Apple Health data (with your permission). If you grant Apple Health access, we read sleep, steps, workouts, heart rate, and active/resting energy. See the dedicated Apple Healthsection for what we do and don't do with it.

Device and technical data. Your push notification token (so we can send post-meal check-ins), your timezone, and basic technical information needed to deliver the app - app version, iOS version, crash diagnostics.

Subscription status.Whether you're in a free trial, on the weekly plan, on the annual plan, or unsubscribed. Apple handles your actual payment information - we never see your card.

Website analytics. If you visit aloeai.app, we use Google Analytics, Microsoft Clarity, and pixels from Meta, TikTok, and Reddit to understand traffic and ad performance. These tools may collect IP addresses, browser info, and pages viewed. They are not used inside the iOS app itself.

We use the data above to:

• Run Aloe's coaching - finding patterns between what you eat, how you feel, your sleep and activity, and any conditions you've shared.
• Generate Aloe's responses, recommendations, and weekly summaries.
• Send post-meal check-in notifications.
• Manage your account and your subscription.
• Improve Aloe - de-identified, aggregated insights help us understand what coaching approaches work and where the product needs to get better.
• Respond when you contact support, and handle billing or fraud issues.
• Meet legal obligations - keeping records, responding to lawful requests.

We do not use your food logs, feelings, Apple Health data, or chat content to train any third-party AI models. We do not sell your data. We do not allow third parties to use your data for their own marketing.

Apple Health access is optional. You decide what to grant. We ask for read access to:

• Sleep analysis (duration and quality)
• Step count and active workouts
• Resting and active heart rate
• Active and resting energy
• Height, weight, and biological sex (to skip manual entry)

Apple Health access is read-only. Aloe does not write any data back to your HealthKit store.

We use this data alongside your meals so Aloe can spot connections like "low sleep plus a heavy dinner often makes you bloat the next morning" - context a food-only tracker can't see.

You can revoke Apple Health access anytime in the iOS Settings > Privacy & Security > Health > Aloe screen. We will stop reading new data immediately. Past data we already used to find patterns is retained according to our normal retention rules unless you delete your account.

Aloe's chat coach and nutrition inference are powered by OpenAIas our model provider. When you send a message, log a meal, or check in on how you feel, Aloe assembles relevant context - recent meals, recent feelings, relevant patterns, your conditions - and sends it to OpenAI's API to generate a response.

OpenAI is contractually prohibited from using API data to train their general models. They process the data only to fulfill our request and, per their standard terms, may retain it for up to 30 days for abuse monitoring before deletion.

AI-generated responses can be wrong. Aloe is a coaching tool, not a medical device. Do not rely on it for diagnosis, treatment, or emergency decisions. See our Terms of Service for the full disclaimer.

We share data only with service providers that help us operate Aloe, under contracts that require them to protect your data and use it only for the purposes we authorize. The providers are:

• OpenAI - powers the AI coach and nutrition inference (see above).
• Apple - processes App Store subscriptions, delivers push notifications, and verifies Apple Sign In tokens.
• Google - verifies Google Sign In tokens for users who choose that login method.
• Sentry - aggregates crash reports and errors so we can fix bugs. Sensitive request bodies are redacted before sending.
• Cloud hosting providers - our database and application servers run on managed cloud infrastructure under standard data-processing agreements.
• Website analytics and ad pixels - on aloeai.app only: Google Analytics, Microsoft Clarity, Meta Pixel, TikTok Pixel, and Reddit Pixel. These help us measure traffic and ad performance. They are not active inside the iOS app.

We may also disclose data if required by valid legal process, to protect against fraud or abuse, or in connection with a corporate transaction (e.g., acquisition). If the company is acquired, your data remains protected under terms at least as strong as this policy.

We do not sell your personal informationfor any purpose under any state or international definition of "sale," including under the California Consumer Privacy Act.

We keep your data while your account is active so Aloe can keep learning your patterns. Specifically:

• Account, profile, food logs, feelings, chat, health data: retained for as long as your account exists.
• After account deletion: we begin deletion within 7 days. All personal data is purged from our active systems within 30 days. Encrypted backups are overwritten on our normal backup cycle, usually within 90 days.
• Subscription and billing records: retained for up to 7 years to meet financial recordkeeping obligations, in de-identified form where possible.
• Support and legal records: retained as long as necessary to resolve the matter and meet legal requirements.

You have meaningful control over your data. Depending on where you live, you have some or all of these rights:

• Access - request a copy of the personal data we hold about you.
• Correction - update inaccurate or incomplete data (you can also do this in the app).
• Deletion - delete your account and the data associated with it.
• Portability - receive your data in a structured, machine-readable format.
• Objection and restriction - object to certain processing or ask us to limit it.
• Withdraw consent - revoke Apple Health, push notifications, or any other consent at any time.
• Complaint- lodge a complaint with your local data protection authority if you believe we've handled your data improperly.

California residents have additional rights under the CCPA, including the right to know what categories of personal information we collect and to whom we disclose it (described in this policy), the right to delete, and the right to non-discrimination for exercising privacy rights.

To exercise any of these rights, email aloeai@studioeastgate.comfrom the email address on your account. We'll respond within 30 days.

Aloe is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you're a parent or guardian and you believe your child has provided data to Aloe, contact us at aloeai@studioeastgate.com and we will delete it promptly.

For users in the European Economic Area and the United Kingdom, the minimum age to use Aloe is 16 unless your country has set a lower age for digital consent.

We use industry-standard safeguards to protect your data, including encryption in transit (TLS), encryption at rest for our database and backups, access controls, audit logs, and regular review of our systems. Authentication uses tokens issued by Apple and Google - Aloe never sees or stores your sign-in password.

No system is perfectly secure. If we ever have a breach that affects your data, we will notify you in the timeframe required by applicable law.

Aloe is operated from the United States. If you use Aloe from outside the U.S., your data will be transferred to and processed in the U.S. and other countries where our service providers operate. Where required, we rely on standard contractual clauses or equivalent safeguards to protect data transferred out of the EEA, UK, or Switzerland.

We may update this policy as Aloe evolves or as laws change. If we make a material change, we'll notify you in the app or by email before the change takes effect. The "Effective date" at the top of this page always reflects the latest version. Continuing to use Aloe after a change means you accept the updated policy.

For privacy questions, requests, or complaints:

Email: aloeai@studioeastgate.com
Mailing address: Studio Eastgate, LLC, Delaware, USA

If you write us about a privacy matter, please mention "Privacy" in the subject line so we can route it to the right person.