Privacy Policy
Last updated: 2026
EXO is operated by OutHives Inc. ("OutHives," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use EXO, our website, and related services.
EXO is a personal health companion. Because the information you choose to provide may include health, nutrition, fitness, body, and lifestyle data, we treat it carefully and use it to provide and improve EXO.
1. Information We Collect
Account information. We collect information used to create and manage your account, such as your name, email address, authentication method, session information, and account status. If you use Sign in with Apple, we receive information Apple provides, such as your Apple account identifier and, when available, your name or email address.
Profile and onboarding information. You may provide age, biological sex, height, weight, unit preferences, timezone, goals, allergies, dietary preferences, conditions, activity level, sleep patterns, and similar setup information.
Health, nutrition, and activity logs. EXO stores information you choose to log or sync, including meals, food items, calories, macros, micronutrients, supplements, hydration, fasting, weight, body composition, activity, sleep, vitals, workouts, goals, check-ins, notes, and related timestamps.
Photos, scans, and attachments. You may upload or capture images such as food photos, supplement labels, product labels, progress photos, chat attachments, and similar content. EXO may process these images to identify foods, estimate nutrition, extract label information, or provide insights.
Messages and AI interactions. We collect chat messages, prompts, responses, task requests, generated summaries, and related context needed to provide EXO's assistant, reports, recommendations, and planning features.
Subscriptions and purchases. Purchases and subscriptions are processed through the Apple App Store. We receive subscription status information, such as product identifier, entitlement status, renewal state, purchase or expiration dates, and related account identifiers, so we can provide paid features.
Device, diagnostics, and usage information. We may collect device and app information such as app version, device type, operating system, IP address, user agent, logs, crash reports, diagnostics, performance data, notification tokens, and feature usage events to operate, secure, debug, and improve EXO.
2. Apple Health and HealthKit
If you choose to enable Apple Health access, EXO may read health and fitness data from HealthKit, such as activity, steps, active energy, exercise minutes, sleep, vitals, workouts, weight, and related measurements, depending on the permissions you grant.
HealthKit access is optional. You can change or revoke HealthKit permissions at any time in Apple Health or iOS Settings. If you revoke access, EXO will stop collecting new HealthKit data, but information already synced to EXO may remain in your EXO account until you delete it or delete your account.
We use HealthKit-derived data only to provide and improve EXO's health, nutrition, fitness, goal, and insight features. We do not sell HealthKit data, use it for advertising, share it with data brokers, or use it for marketing unrelated to EXO's health features.
3. How We Use Information
- Provide, personalize, and maintain EXO's tracking, assistant, analysis, dashboard, notification, and reporting features.
- Analyze food photos, labels, messages, logs, and health signals to generate nutrition estimates, summaries, insights, plans, and recommendations.
- Create and manage your account, subscription access, preferences, goals, and saved content.
- Send service-related messages, reminders, push notifications, support responses, and account notices.
- Debug errors, prevent abuse, secure the service, measure performance, and improve reliability.
- Comply with legal obligations, enforce our terms, and protect the rights, safety, and security of users, OutHives, and others.
4. AI Processing
EXO uses artificial intelligence and machine learning systems to power features such as food recognition, label extraction, chat, insights, reports, meal planning, and personalized recommendations.
To provide these features, we may send relevant content, such as photos, labels, messages, logs, profile context, or health signals, to AI infrastructure and model providers acting on our behalf. We use these providers to process requests and return results for EXO features. We do not permit these providers to use your personal information for advertising on our behalf.
AI outputs may be incomplete or inaccurate. EXO is not a medical provider and does not provide medical advice, diagnosis, or treatment.
5. How We Share Information
We do not sell your personal information or personal health data.
We may share information with service providers that help us operate EXO, including cloud hosting, database, storage, authentication, subscription management, payment support, AI processing, notifications, diagnostics, security, and customer support providers. These providers are allowed to use information only to provide services to us or as otherwise permitted by law.
We may share information if required by law, legal process, or a valid government request; to protect rights, safety, and security; to investigate abuse or fraud; or in connection with a merger, acquisition, financing, reorganization, or sale of assets.
We may share information with your consent or at your direction, such as when you export, share, or send content from EXO.
6. Notifications
If you allow push notifications, EXO stores a device token and notification preferences so we can send reminders, task updates, insights, and account-related messages. You can turn off notifications in iOS Settings or in EXO where controls are available.
7. Retention and Deletion
We keep personal information for as long as needed to provide EXO, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and protect the service.
You can delete your account in the app. Account deletion removes your account and user-owned data from EXO's active systems, including stored logs, profile data, messages, goals, subscription mirror data, notification tokens, and user-uploaded files where technically possible. Some information may remain temporarily in backups, logs, or records we must keep for legal, security, fraud-prevention, or accounting reasons.
8. Your Choices and Rights
- You can update account, profile, goal, notification, and app preferences in EXO where available.
- You can revoke HealthKit permissions in Apple Health or iOS Settings.
- You can request access, correction, deletion, or export of personal information by contacting us.
- You can delete your account from within the app.
Depending on where you live, you may have additional privacy rights, including rights to access, correct, delete, port, restrict, or object to certain processing of your personal information. We will respond to privacy requests as required by applicable law.
9. Security
We use technical, administrative, and organizational safeguards designed to protect personal information, including access controls and encryption in transit. No system is completely secure, and we cannot guarantee absolute security.
10. International Users
EXO may be available globally. Your information may be processed in countries other than where you live, including countries that may have different data protection laws. Where required, we use appropriate safeguards for international transfers.
11. Children
EXO is not intended for children under 13, or the minimum age required in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided personal information to EXO, contact us and we will take appropriate steps.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and provide additional notice where required by law.
13. Contact
If you have questions or privacy requests, contact us at support@exoai.app.