Privacy Policy

This Privacy Policy explains how personal information is collected, used, disclosed, retained, and protected in connection with the Ouro iPhone app (the “App”), listed on the App Store as “Ouro: GLP-1 Tracker”; the website at ouroloop.app; and related support services (collectively, the “Services”).

The controller of personal information processed through the Services is Chris Davies, located at 269 South Beverly Drive, #1234, Beverly Hills, California 90212 (“Chris Davies,” “Ouro,” “we,” “us,” or “our”). Privacy requests may be submitted to privacy@ouroloop.app.

This Policy applies to the App, our website, and communications with our support team. It does not govern products or services operated independently by Apple or other third parties. Their own terms and privacy notices apply to those services.

Four assisted features in Ouro cannot run on your phone alone: Ask Ouro, written meal plans, reading a meal photo, and hearing a reply in an optional natural voice. Each one has to send your request to an AI company's computers and wait for an answer.

We ask you first. Before any of these runs for the first time, Ouro shows you a screen listing exactly what gets sent and every company that receives it, and asks for your permission. Nothing is sent unless you agree. Saying no leaves the rest of Ouro fully working—all of your logging, your daily targets, your charts, the relief guides, the eating-out playbooks, and the doctor report are calculated on your phone and do not depend on this. You can change your answer at any time in Settings › Privacy, and turning it off stops any further sending immediately.

Who receives it:

• Rork operates the gateway your request passes through on its way to a model. Read the Rork Privacy Policy.
• Anthropic runs the model that writes Ask Ouro's answers. Read the Anthropic Privacy Policy.
• Google runs models used for meal plans and for reading meal photos. Read the Google Privacy Policy.
• OpenAI runs a backup model used when another provider is unavailable. Read the OpenAI Privacy Policy.
• ElevenLabs turns replies into a natural spoken voice, only if you switch that on. Read the ElevenLabs Privacy Policy.

What they may do with it. These companies process your request to produce the reply and nothing else. Under our agreements with them, your data is not used to train their models and is not sold or shared onward. It is retained only briefly for abuse monitoring and then deleted.

What never goes to any of them, whatever you choose: your name, email address, or account; your bloodwork, which never leaves your phone at all; your progress photos; anything read from Apple Health; and your location, which Ouro never asks for and never looks at.

We process personal information to:

• provide, personalize, and maintain features you request;
• calculate schedule-based views, reminders, summaries, and reports;
• prepare meal plans and food estimates;
• answer Ask Ouro questions and provide optional spoken replies;
• operate accounts, optional backup, and data restoration;
• process and restore purchases;
• respond to support, privacy, and security requests;
• diagnose errors, prevent fraud or abuse, and protect the Services; and
• comply with legal obligations and enforce applicable terms.

The App does not use plans or estimates to make decisions that produce legal or similarly significant effects about you.

Account creation and cloud backup are optional. When backup is enabled, backup information is associated with your account and transmitted to the cloud service used to provide restoration. Backup may synchronize after changes to information stored in the App.

We use safeguards designed to protect backup information during transmission and storage. No method of storage or transmission is completely secure, and we cannot guarantee uninterrupted availability or recovery of every entry. Information obtained directly from Apple Health is not included in Ouro cloud backup. Lab and bloodwork results and progress photos are not included either and remain on your iPhone.

Meal names, ingredients, quantities, and preparation steps prepared for a request may be retained and reused to respond to a substantially similar request. Before reuse, we separate this content from direct account and device identifiers and maintain it in de-identified form. We do not attach the originating user’s name, email address, account identifier, photographs, notes, or symptom history to reusable meal-plan content.

De-identified information that is not reasonably linkable to an individual may be retained and used to operate and improve the meal-planning service. We do not attempt to re-identify it.

We disclose information only as reasonably necessary to the following categories of recipients:

• cloud hosting, account-authentication, and backup providers;
• AI-model gateways and providers used for Ask Ouro, meal planning, and image analysis;
• nutrition and barcode-data providers;
• Apple, for system speech recognition when on-device recognition is unavailable;
• speech-synthesis providers used for optional natural voice;
• Apple, RevenueCat, and related purchase-processing services;
• website hosting, email, support, security, and diagnostic providers;
• professional advisers, auditors, or insurers subject to confidentiality obligations; and
• government authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security.

We require service providers that process personal information for us to use it only for authorized purposes and to apply protections appropriate to the information involved. We may also disclose information at your direction, including when you choose to export or share a report with a healthcare professional.

If Chris Davies is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to applicable law and this Policy.

Medication, symptom, weight, nutrition, activity, and related information may constitute health, consumer-health, or other sensitive personal information. We do not:

• sell personal information or consumer health data;
• share personal information for cross-context behavioral advertising;
• use health information to create advertising or marketing profiles;
• disclose health information to data brokers, employers, or insurers for their independent use; or
• permit personal health information to be used for unrelated product development.

We process health information to provide features you request, maintain and secure the Services, and comply with law. Where applicable law requires consent for the collection or sharing of consumer health data, we will request that consent before the relevant processing occurs. You may withdraw consent through the applicable App permission, feature setting, or by contacting us, subject to processing already completed and legal requirements.

We do not feed your logs, photos, bloodwork, or plans into third-party analytics products. This commitment concerns analytics and is separate from the permission-based AI processing described above. The anonymous measurement described below is our own and never receives those materials.

Ouro is a direct-to-consumer wellness and tracking service and is not intended to provide services on behalf of a healthcare provider or health plan. Unless expressly stated otherwise for a particular service, Chris Davies is not acting as a covered entity or business associate under HIPAA. Other federal and state privacy and consumer-health laws may apply.

To see where Ouro confuses people or quietly fails them, the App counts a short, fixed list of things that happen. It records that something happened, never what was in it. Twenty counts exist in total, covering: opening the App, starting setup and how far through it you got, that a dose, weight, meal, or lab result was recorded, that Ask Ouro was asked a question, that a relief guide, the bloodwork screen, or the doctor report was opened, that travel mode was switched on, that the eating-out guide or one of its venue playbooks was opened, that the assisted-features permission was granted or declined, and that the upgrade screen was seen, started, or completed.

What that means in practice is worth being precise about. We learn that a weight was logged. We do not learn the weight. We learn that a lab result was recorded. We do not learn which marker, the number, or whether it was in range. There is no field anywhere in this system that can carry a value you typed. Where a count records which setup step you finished, it carries the name of the step and never anything you typed into it.

• It runs on our own server, not a third-party analytics product. Nothing is shared with anyone.
• Your phone makes up a random identifier for itself. It is not your account, your email, or Apple's advertising identifier, and it is never linked to any of them.
• Only totals are kept—how many times a thing happened on a given day, and how far installs get through setup. There is no per-person event history to read, so there is nothing to reconstruct a person from.
• Counts are deleted after 120 days.
• It only sends over Wi-Fi. Measurement is never worth spending your cellular data on, and if a send fails it is dropped rather than retried.

You can switch it off in Settings → Privacy, which also throws the random identifier away. Switching it back on later starts from a fresh one, so it cannot be stitched back to anything counted before. Nothing in the App behaves differently either way, and we do not treat you differently for turning it off.

This is not used for advertising, is not sold or shared, and does not track you across other companies' apps or websites.

With your permission, the App may read selected weight, steps, active energy, exercise, distance, body-fat, lean-mass, and strength-workout information from Apple Health. It may write weigh-ins, nutrition, and fluid entries to Apple Health. Access is controlled by the separate, category-specific permissions you grant in iOS.

Information obtained directly from Apple Health is processed on the device and is not used for advertising or marketing. You may change or revoke Apple Health permissions at any time in the Health app. Revoking access does not remove information already written to Apple Health; that information must be managed in Apple Health.

Where European or United Kingdom data-protection law applies, we rely on the following legal bases, as appropriate:

• performance of a contract to provide features you request;
• consent for optional permissions and features, including Apple Health, cloud backup, assisted AI features, and, where required, processing of health information;
• legitimate interests in securing, maintaining, and improving the Services, provided those interests are not overridden by your rights; and
• compliance with legal obligations.

Where information concerning health is special-category data, we also rely on an applicable condition under Article 9 of the GDPR or UK GDPR, including explicit consent where required. You may withdraw consent at any time without affecting processing completed before withdrawal.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security, and dispute-resolution requirements.

• Local App information remains on the device until you delete it, erase App data, or remove the App.
• Account information and cloud backup remain while the account or backup is active and are deleted or de-identified after a valid deletion request, subject to limited legal, security, and recovery retention.
• Purchase and entitlement records may be retained as needed to provide purchases, prevent fraud, and satisfy tax, accounting, or legal requirements.
• Support communications and operational logs are retained for the period reasonably necessary to resolve requests, maintain security, and document compliance. The anonymous counts described above are deleted after 120 days.
• Online-feature request information is retained only as needed to complete the request, maintain security, and meet applicable service-provider requirements.
• De-identified meal-plan content may be retained as described under Reusable Meal-Plan Content.

Residual copies may remain temporarily in restricted recovery backups until those backups are overwritten under the applicable retention cycle.

You may control App permissions in iOS and may disable optional cloud backup in the App. You may erase local App information using the available data controls. Deleting the App removes its active local copy from that device but does not remove information already written to Apple Health or copies contained in device backups you control.

To request deletion of an account, cloud backup, or other personal information held by Chris Davies, email privacy@ouroloop.app from the address associated with the account. We may take reasonable steps to verify the request. Deletion does not affect information that we must retain by law, purchase records held independently by Apple, or information that has been validly de-identified and is no longer reasonably linkable to you.

Subject to applicable law, you may have the right to:

• request access to or a copy of personal information we hold;
• correct inaccurate information;
• request deletion;
• restrict or object to processing;
• receive certain information in a portable format;
• withdraw consent;
• appeal a refusal of a privacy request where applicable;
• use an authorized agent where permitted; and
• complain to an applicable privacy or data-protection authority.

We do not discriminate against users for exercising privacy rights. Requests may be submitted to privacy@ouroloop.app. We will respond within the period required by applicable law.

California residents may request information about the categories and specific pieces of personal information collected, processing purposes, and categories of recipients, and may request correction or deletion subject to applicable exceptions. We do not sell personal information or share it for cross-context behavioral advertising. The anonymous counts described above are not sold or shared either, and are not used for cross-context behavioral advertising.

Chris Davies is based in the United States. Service providers may process information in the United States and other countries that may have different data-protection laws. Where required, we use recognized transfer mechanisms and safeguards, such as adequacy decisions, standard contractual clauses, or applicable United Kingdom transfer terms.

We use administrative, technical, and organizational safeguards designed to protect personal information, taking account of its sensitivity and the nature of the processing. These measures may include access controls, encryption, data minimization, logging, vendor review, and incident-response procedures. No security measure can eliminate all risk.

The Services are intended for adults and are not directed to individuals under 18. We do not knowingly collect personal information from a person under 18. If you believe a person under 18 has provided personal information, contact privacy@ouroloop.app so that we can review and, where appropriate, delete it.

We may update this Policy to reflect changes in the Services, service providers, law, or our practices. The revised Policy will identify its effective date. Where required, we will provide additional notice or obtain consent before materially expanding the collection, use, or disclosure of previously collected health information.

Privacy questions and requests may be sent to privacy@ouroloop.app. General support requests may be sent to support@ouroloop.app.

Chris Davies
269 South Beverly Drive, #1234
Beverly Hills, CA 90212
United States