Privacy Policy

The data controller responsible for your personal data is:

Folio AI, Inc.

For privacy inquiries, data requests, or to contact the data controller:

privacy@orrum.dev

We collect information necessary to provide our service:

• ·Workout Data: Session history, exercise metrics, and progress records. Stored on-device and synced via iCloud. This is wellness data, not medical data under HIPAA.
• ·Apple Health Data (optional): With your explicit permission, Orrum may read and write workout activity and menstrual cycle data to Apple Health (HealthKit). See Section 6 for full details.
• ·Account Information: Email, name, and profile information if you create an account.
• ·AI Coach Usage: A usage quota counter to manage AI coaching interactions. Stored server-side in Firebase Firestore.
• ·Usage Data: Anonymous metrics to improve the app.

With your explicit permission, Orrum may read and write data to Apple Health (HealthKit), including:

• ·Workout activity data (exercise sessions, duration, and metrics)
• ·Menstrual cycle data (if you choose to enable cycle sync features)

Important: HealthKit data is used solely to enhance your in-app experience. It is never shared with third parties, never used for advertising or marketing purposes, and never uploaded to our servers. All HealthKit data remains on your device and within Apple's ecosystem.

You can grant or revoke HealthKit permissions at any time in your iPhone's Settings → Privacy & Security → Health → Orrum.

We use a layered storage approach designed to keep your data private:

• ·On-device (primary): Workout data, stats, and program progress are stored locally on your device using Apple's secure storage.
• ·iCloud sync (Apple): Your data syncs across your own Apple devices via iCloud. Apple governs this data under their privacy policy.
• ·Firebase Firestore (Google Cloud): Used exclusively to track your AI coach usage quota. This does not include workout data or personal health information.
• ·Firebase Auth (Google Cloud): Manages secure account authentication.

We use industry-standard encryption and security protocols to protect your data in transit and at rest.

You have the right to access, correct, or delete your personal data. Manage your data in app settings where available.

Right to Erasure (GDPR Art. 17): You have the right to request deletion of your personal data. To exercise your right to erasure or request data deletion, contact us at:

privacy@orrum.dev

We use the following data processors to operate Orrum:

• ·Apple (iCloud): On-device data sync across your Apple devices. Governed by Apple's Privacy Policy.
• ·Google (Firebase Auth & Firestore): Account authentication and AI coach usage quota tracking. See Firebase Privacy.
• ·Google (Gemini API): AI-powered coaching features. Data is processed in accordance with Google's Privacy Policy.