Ayro ("Ayro," "we," "us," or "our") provides personalized breathwork training through the Ayro mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have.
Ayro is not a medical device and does not provide medical advice, diagnosis, or treatment.
Information We Collect
Account and profile information
When you create an account or use Ayro, we may collect:
- Display name
- Email address
- Age range
- Goal priorities and ratings
- Preferred training schedule and reminder time
- Account identifiers generated by Ayro or our backend provider
Breathwork and training information
To personalize your training and show progress, we collect:
- BOLT scores
- Completed breathing sessions, including exercise type, exercise level, duration, breaths taken, and session timestamps
- Training block progress, including planned sessions, completed sessions, block number, block level, and BOLT retest information
- Apple Health connection preference and last sync timestamp, if Apple Health is enabled
Apple Health information
Apple Health integration is optional and off by default. If you enable it, Ayro requests permission to read heart rate, resting heart rate, and heart rate variability (HRV) data from Apple Health to power fitness progress graphs in the app. Ayro also requests permission to write completed breathing sessions to Apple Health as mindful session data.
Subscription information
Purchases and subscriptions are processed by Apple through the App Store. Ayro does not receive or store your full payment card details. We use RevenueCat to help manage subscription entitlement status, restore purchases, and determine whether paid features should be unlocked.
We may store subscription status, entitlement level, product/package identifiers, renewal-related entitlement state, and related account state needed to operate paid features.
Analytics and paywall information
We collect information about how you use Ayro, including onboarding and screen interactions, paywall and purchase-flow events, exercise and session activity, session durations, and related app interactions. We may associate this information with a pseudonymous account identifier and user properties such as onboarding state, training focus, age range, sessions per week, training block number, and BOLT score. We use this information to understand product usage, improve Ayro, and evaluate paywalls and subscription flows.
Paywall services may also process paywall interactions, subscription or purchase state, app and device information, vendor identifiers, network information, and approximate location derived from an IP address.
Email communications
We use your email address and first name to send authentication codes, necessary transactional messages, and, where permitted, automated onboarding, trial, cancellation, and training lifecycle emails. To personalize and time those messages, we may use subscription or trial state, expiration date, session count, total training minutes, training-block progress, and BOLT score.
Support communications
If you contact us, we may receive the information you choose to provide, such as your email address and the content of your support request.
Device, diagnostics, and security information
We and our service providers may process technical information needed to operate, secure, debug, and maintain the App and backend services, such as authentication events, server logs, error information, device or app version information, and network request metadata. We use this information for app functionality, security, reliability, fraud prevention, and troubleshooting.
How We Use Information
We use information to:
- Create and manage your account
- Authenticate you when you sign in
- Generate personalized breathing recommendations
- Build and update your training blocks
- Track and display session history, streaks, BOLT history, and progress
- Save completed mindful sessions to Apple Health when you choose to enable Apple Health
- Send local training reminders if enabled
- Manage subscription access and restore entitlement state
- Analyze onboarding, screen, exercise, session, paywall, and purchase-flow activity to understand and improve Ayro
- Present, personalize, and evaluate paywalls and subscription offers
- Send authentication, transactional, onboarding, trial, cancellation, and training lifecycle emails
- Measure app registrations and subscription performance, including advertising attribution and measurement
- Respond to support requests
- Maintain app security, debug issues, prevent abuse, and improve reliability
- Comply with legal obligations
We do not sell personal information for money. As described below, we disclose limited app-event, identifier, subscription, and revenue information to Meta for advertising attribution and measurement. Depending on applicable law, this disclosure may be considered "sharing," targeted advertising, or tracking even though Ayro does not deliberately access the Apple advertising identifier (IDFA).
Apple Health and HealthKit
HealthKit data is never used for advertising, marketing, or tracking. HealthKit data is never sold. Ayro does not use HealthKit data for purposes other than the optional Apple Health features you choose to enable: displaying heart rate, resting heart rate, and HRV progress graphs within the app, and logging completed breathing sessions as mindful minutes in Apple Health.
Heart rate, resting heart rate, and HRV data read from Apple Health are processed on-device. They are never uploaded to Ayro, Supabase, PostHog, RevenueCat, Superwall, Meta, Resend, or any other third party.
You can grant or revoke Apple Health permissions at any time in iOS Settings or the Health app. Completed mindful sessions already written to Apple Health are stored and controlled by Apple Health. Disabling Apple Health or deleting your Ayro account does not remove those entries; you can view or delete them in Apple Health.
Service Providers
We use trusted service providers to operate Ayro:
- Supabase: authentication, database hosting, Edge Functions, and backend infrastructure. Supabase stores account and profile information, training preferences and schedules, reminders, BOLT scores, completed sessions, training blocks, and related account state.
- Apple: App Store purchases, subscription management, Apple Health, iOS notifications, and other iOS system services
- RevenueCat: purchase and subscription management, entitlement status, and purchase restoration. RevenueCat receives purchase history, subscription state, product information, a pseudonymous Supabase user UUID, a PostHog identifier attribute, and Meta's anonymous app identifier. RevenueCat may send subscription lifecycle and revenue events to Meta through Meta's Conversions API for advertising attribution or measurement.
- PostHog: product analytics. PostHog receives a pseudonymous Supabase user UUID; onboarding and screen interactions; paywall and purchase-flow events; exercise and session activity and durations; and user properties such as onboarding state, training focus, age range, sessions per week, training block number, and BOLT score. The Ayro App does not send your email address to PostHog.
- Superwall: paywall presentation and experimentation. Superwall receives a pseudonymous Supabase user UUID and attributes including BOLT score, training focus, and sessions per week. Its SDK may also process paywall interactions, subscription or purchase state, app and device information, vendor identifiers, and approximate IP-derived location. RevenueCat remains authoritative for purchase and entitlement status.
- Meta: app-event measurement and advertising attribution. Meta App Events receives app activation and completed-registration events. Automatic event logging and advertiser-identifier collection are disabled, Ayro does not deliberately access IDFA, and Ayro does not currently present an App Tracking Transparency prompt. Meta may also receive subscription lifecycle and revenue events from RevenueCat through the Conversions API, together with Meta's anonymous app identifier.
- Resend: delivery of authentication, transactional, onboarding, trial, cancellation, and training lifecycle emails. Resend receives email address, first name, subscription or trial state, expiration date, session count, total minutes, training-block progress, and BOLT score as needed to deliver those messages.
These providers process information on our behalf, provide platform services, or receive information for the purposes described above. Their handling of information is also governed by their applicable terms and privacy practices.
We may also disclose information if required by law, to protect rights and safety, to prevent fraud or abuse, or in connection with a merger, acquisition, financing, or sale of assets.
App Privacy Labels
Ayro is responsible for maintaining separate App Store privacy disclosures that reflect the practices described in this policy and those of third-party SDKs in the App. Relevant categories include contact information, user and device identifiers, purchases, health and fitness-related training data, product interactions and other usage data, diagnostics, and customer support data. Depending on the data and purpose, this information is used for app functionality, product personalization, analytics, account management, developer marketing, advertising attribution or measurement, security, and reliability. Information associated with your account identifier, device identifier, or provider profile may be linked to you, and some advertising-measurement disclosures may qualify as tracking under Apple's definitions.
Data Retention and Deletion
We retain personal information while your account is active or as needed for the purposes described in this policy. Retention periods vary by the type of information and service involved. We consider how long the information is needed to provide Ayro, maintain security, resolve disputes, meet accounting and legal obligations, and enforce our agreements.
You may delete your account from Settings in the App. Account deletion deletes your Ayro profile and associated training data from Ayro's active systems, including BOLT scores, completed sessions, and training block data, subject to reasonable processing time. Information already sent to service providers may be deleted, de-identified, or retained according to our instructions, the provider's role, and applicable legal requirements. We may retain limited records where required by law or reasonably necessary for security, fraud prevention, accounting, dispute resolution, or compliance. We may also retain a suppression record of an unsubscribed email address so that we can honor the marketing opt-out.
Deleting your Ayro account does not cancel an active App Store subscription. App Store subscriptions are managed by Apple and can be managed or canceled through Apple subscription settings.
Account deletion does not remove completed mindful sessions previously written to Apple Health. Those entries are controlled through Apple Health and must be managed or deleted there.
Your Choices
You can:
- Update your display name in the App
- Change goal priorities and training schedule in the App
- Enable or disable Apple Health syncing
- Revoke Apple Health permissions in iOS Settings or the Health app
- Manage, restore, or cancel subscriptions through Apple subscription settings
- Unsubscribe from promotional emails using the link in those messages; authentication codes and other necessary transactional emails are not subject to marketing suppression
- Contact us to request an opt-out of disclosures considered targeted advertising, sharing, or tracking under applicable law
- Delete your account in the App
- Contact us to request access, correction, or deletion of personal information
Children's Privacy
Ayro is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13, we will delete it.
If you are under the age of majority where you live, you should use Ayro only with permission from a parent or guardian.
Security
We use reasonable technical and organizational safeguards to protect personal information, including encrypted network connections, Supabase row-level security for user-owned data, backend access controls, and server-side account deletion for Auth records. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and may provide additional notice in the App or by email.
Contact
If you have questions about this Privacy Policy or Ayro's privacy practices, please email us at support@ayro.fit.