Privacy policy

Account details: your name, email address, password (stored only as a one-way hash), optional phone number and profile picture, your timezone and unit choices. If you sign in with Apple or Google, we receive an account identifier and your email address from them.

Training and progress: the plans, workouts, sets, cardio, habits, goals and nutrition totals you or your coach log, body measurements and body composition scans, check-in answers, and messages between you and your coach.

Health information, if you choose to give it: answers to the health questionnaire (PAR-Q), injuries, medical history, medications, allergies, an emergency contact, and lifestyle details such as sleep and stress. We ask for your separate consent before any of this is stored.

Progress photos and video, with their own separate consent.

Apple Health and Health Connect, only if you turn the connection on. The app can read workouts, steps, active calories, distance, food and nutrient totals logged in other apps, height and body measurements, and can write the body measurements you log in Oryian. You choose exactly which types to allow in the system's own permission screen, and you can change that at any time in your phone's settings.

Identity verification, only if you choose to verify. Our provider, Didit, compares a live selfie with your profile photo, which we send it for that purpose, to confirm you're a real person and the one in the photo. If that doesn't work, or you have no profile photo, it checks a photo of your ID and a selfie instead to confirm you are who your account says. Both use biometric data. We never receive or keep the selfie or the ID images. We keep only the outcome, which check you passed, which profile photo a selfie was matched against, and, for an ID check, whether the name on the ID matched your account, the country that issued it, whether it shows you're under 18, and a scrambled fingerprint of the document number that lets us spot one ID being used on several accounts without storing the number itself.

Files you upload, such as a screenshot of a food diary or a body scan report, so the app can fill in the numbers for you to check.

Technical information: a push notification token for your device, the app version, IP addresses in server logs and rate limits, and crash reports. Crash reports are set up to leave out request contents, headers and your identity.

• To run the app: show your plan and history, work out your weekly adherence, sync between your devices and send the reminders, summaries and notifications you've left on.
• To let your coach coach you, within the sharing choices you make (see below).
• To confirm your identity, if you choose to verify, and show a verified badge next to your name.
• To read the numbers off a screenshot or scan you upload, and to check exercises people add to the shared library.
• To keep accounts secure, prevent abuse and fix bugs.
• To send occasional promotional messages, only if you have agreed to them. Service messages about your training are sent either way, and you can turn reminder and summary emails off in Account.

We do not sell your personal information, share it for targeted advertising, or use it to profile you for anyone else. Information from Apple Health or Health Connect is used only to provide the app's health and fitness features to you and your coach. It is never used for advertising or marketing, and never shared with or sold to data brokers or anyone else.

Under the UK GDPR we rely on: performing our contract with you, to provide the app; your explicit consent, for health information, progress photos and video, and the biometric check behind identity verification, which are special category data; your consent, for promotional messages; and our legitimate interests, for security, abuse prevention and fixing problems.

Your coach, and the owners and managers of the organization they coach through, can see the training, measurements and photos you share with them. When you join a coach you choose whether they see what you logged before, and you can change what you share at any time in Account. Every time staff view your health information, photos or an export, it's recorded, and you can ask us for that record.

Oryian staff can access accounts only to provide support, keep the service secure or meet a legal obligation.

We use service providers who process information on our behalf, under contracts that limit them to doing so:

• Vercel: hosting for the app and its servers.
• Google Cloud: the database and file storage.
• Upstash: short-lived rate-limit counters.
• Resend: sending email.
• Sentry: crash and error reports.
• Didit: comparing a selfie with your profile photo, or checking your ID and a selfie, if you choose to verify your identity. It deletes the images after one month, and when you withdraw consent or close your account we ask it to delete them straight away.
• Anthropic: reading the numbers off a screenshot or scan you upload, and checking exercise names added to the library. Under its commercial terms it does not use this information to train its models.
• Expo, Apple and Google: delivering push notifications.
• Apple and Google: Sign in with Apple and Google sign-in, if you use them.
• Cloudflare: bot protection on the web sign-up form, and our domain and email.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or reorganization of the business, in which case this policy would continue to apply to your information.

Oryian is based in Canada. Our servers and most of our service providers are in the United States, so your information is stored and processed there and may be accessible to authorities in those countries under their laws. For UK users, transfers rely on the safeguards UK law requires, such as the UK International Data Transfer Addendum to the EU standard contractual clauses.

We keep your information while your account is open. If your account is closed, your data is kept for 730 days and then removed, unless you ask for it to be deleted sooner. A coach or their organization may need to keep some records longer for insurance or legal reasons, and will tell you if so. Some records may persist in backups for a short time before they are overwritten, and we keep the record of your consent choices for as long as we need to show what you agreed to.

• Consent: change any of your consent choices in Account › What you've agreed to. Turning one off never affects the others.
• Access and portability: email us and we'll send you a copy of everything in your account, in a machine-readable format.
• Correction: edit your details in the app, or ask us.
• Deletion: Account › Delete account sends a deletion request, which is completed by your coach's team or by us. You can also email us.
• Identity verification: withdraw your consent in Account › Identity. We'll ask Didit to delete your selfie and any ID you showed; your verified result stays, since the check already happened.
• Apple Health and Health Connect: turn access off in your phone's settings at any time. Data already written to Apple Health stays there until you remove it.
• Notifications and email: turn them off in Account or in your phone's settings.

Depending on where you live, you may also have the right to object to or restrict some processing, or to ask what we hold about you and how it's used. We give these rights to everyone, wherever you live, and we won't treat you differently for using them. Email us and we'll reply within 30 days.

If you're not happy with our answer you can complain to a privacy regulator: in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca); in the UK, the Information Commissioner's Office (ico.org.uk); in the US, your state attorney general.

Some US state laws, such as Washington's My Health My Data Act, give extra protection to consumer health data. The health information, measurements, nutrition, photos and Apple Health or Health Connect data described above may count as consumer health data. We collect it to provide the app to you and, where you choose, your coach; we share it only with your coach and the service providers above; we never sell it; and you can access it, have it deleted or withdraw your consent as described in this policy. If you verify your identity, the selfie and face comparison are biometric information under laws such as Illinois's Biometric Information Privacy Act: we ask for your written consent first, Didit processes them only to confirm who you are, and neither of us sells them.

Information is encrypted in transit, passwords are stored as one-way hashes, sign-in tokens are kept in your phone's secure storage, administrator accounts use two-factor authentication, and staff access to health information is logged. No system is perfectly secure; if a breach puts you at risk, we'll tell you and the regulators as the law requires.

Oryian is not intended for children under 16, and we don't knowingly collect information from them. If you think a child has given us information, email support@oryian.com and we'll delete it.

If we change this policy we'll update the date at the top. If a change affects something you've consented to, the app will ask you to review your choices again before it applies.

Email support@oryian.com with any question about this policy or your information.