Privacy Policy

1. Who is responsible

The controller of your personal data is Alexis Lomeli Mejia, the individual who offers mio («mio», «we» or «us»).

For any matter related to this notice, including legal notices, write to soporte@mio.fitness. Our support team is the department in charge of personal data requests, including the exercise of your rights.

2. What data we process

We process only the data the features you use need. Depending on how you use mio, it may include:

• Identity and contact: name, email address, profile photo, username (@handle) and the identifier Apple or Google gives us when you sign in. If you use Apple's «Hide My Email», we receive an Apple relay address. Your email is stored only in the sign-in system and is not shown on your profile.
• Age: the date of birth you declare once when you create your account or, when your device supports it, the age range you choose to share through Apple. We use it to confirm you meet the minimum age and to apply the protections for minors (section 15). The declared date can't be changed in the app; if you made a mistake, write to us.
• Profile and preferences: bio, language, units, goals, experience level, availability and training and food preferences.
• Training: routines, sessions, exercises, sets, loads, reps, perceived effort, rest times, notes, the discomfort or other signals you mark on each exercise (also from Apple Watch), history, records and streaks.
• Health data (sensitive personal data): weight, height, body fat percentage and body measurements; progress photos; age and biological sex; injuries, limitations, conditions and discomfort you tell us about; allergies, excluded foods, the supplements you log, your eating habits, goals and food log; heart rate and calories of your sessions, and the Apple Health data you authorize (section 5).
• Content and communications: posts, comments, stories, reactions, public routines, coach reviews, messages and their attachments, coaching requests, check-ins, month recaps (section 7), reports and the emails you send us.
• Coaching appointments, which the coach books: type (in person, video call, phone call or check-in), date, time and duration, reason, place or video call link, who calls, what the coach asks for the check-in, their note, the chosen reminders, the appointment's status (confirmed, canceled or with another time requested, with the client's note) and, once the appointment starts, whether the client attended, as the coach marks it.
• Social graph: who you follow, who follows you, follow requests and who you block.
• Coaching history: which coach or client you had each coaching with, when it started and ended and how it ended (one of you ended it, there was a block or an account was deleted). How it ended is shown to no one (section 7).
• Coaching payment record: if your coach keeps track in mio of the payments you make to them outside mio, the fee and how often you agreed to pay, the due dates, the payments they record (amount, date and whether by bank transfer or in cash) and their status. mio does not charge, process or receive those payments.
• Coach data, if you register as a coach: country and city, specialties, format, experience, coach bio, social links, reference fee and currency, your coach plan and your AI credits. If you keep track of your trainees' payments in mio, also the beneficiary name and the last 4 digits of your CLABE that you choose to save (never the full CLABE). If a coach invites you by email, we receive your name and address from that coach to send you the invitation and, if they saw you in person, what they record to prepare your coaching (sections 4 and 7). If you decline their invitation, we keep a cryptographic hash of your email, not the email, for 90 days (section 4).
• App store purchases: Apple's transaction and app download identifiers (appTransactionId), or Google Play purchase tokens and an account reference without your name or email, depending on the store you use. We link them to your account to verify the product, purchase, renewal and expiration dates and purchase or subscription status; Apple also gives us the storefront country. Our server receives original Google Play tokens to verify the purchase with Google; our database stores their cryptographic hashes, not the original tokens. For these purchases, Apple or Google Play processes the payment; mio does not receive your card details.
• Web subscriptions to mio Coach: payment takes place on a Stripe-hosted page, where you provide the payment method and billing information it requests, including your billing address. mio stores the customer, checkout session and subscription references needed to link the purchase to your account, the plan, currency, subscription periods and status, and the records needed to process notifications, prevent duplicates and resolve billing issues. We do not store your full card number or its security code in our database. This purchase pays for your mio Coach plan; it is not a coaching payment to another coach.
• Use of the optional AI: the requests you make, the data each feature sends (section 6), the results (including the summaries of your questions to the exercise chat and the readings of your month your coach requests), the usage and cost of each use and the answers you report.
• Technical data: notification and Live Activity tokens, an app installation identifier, device model, operating system and app versions, language, time zone, IP address and server logs.
• Consents: your privacy choices (AI, what you share with your coach, public or private account), your acceptance of this notice and the history of those decisions.

We don't access your device's precise location, your address book contacts or your photo library: we only receive the photos you pick in the system picker, photos you take with mio's camera are not saved to your library, and we only add an achievement image to Photos when you choose to save it. mio does not use advertising identifiers for its own campaigns; sections 10 and 16 explain the YouTube player's data practices. Meal reminders and the rest-finished alert are notifications your device schedules on its own.

When you dictate a routine, mio uses the microphone with your permission. On iOS, transcription runs on your device. On Android, mio prefers on-device recognition; if it is unavailable or cannot transcribe your language, it uses the system's recognition service, which may send audio to its provider's servers. mio does not save recordings or send that audio to its own servers; it uses the transcribed text for the feature you chose, including sending it to AI if you allowed it (section 6). How the Android service processes audio depends on its provider and policies (section 10). You can type instead of dictating.

If you are a coach, on your iPhone or iPad you can turn on Calendar sync, which saves all your appointments there, or, with it off, add only the appointments you choose to your calendar when you book or reschedule them. To do this, mio asks for full access to your calendars, the permission iOS requires to keep a calendar of its own up to date and read your busy times, and uses it only for what is explained here. mio saves those appointments to the «mio · Citas» calendar, which it creates in iCloud or, if you don't use it, on your iPhone or iPad, or to another of your iCloud or on-device calendars that you choose: date, time and duration, the reason or type of appointment, your client's name, the place or link if you added them, who calls on a phone call and a link to open the appointment in mio; never the note or what you ask for the check-in. That calendar is yours and shows on your devices and in the calendar services you use, under their own policies; your clients only see their appointments with you, never your calendar. mio brings those appointments up to date when you change them in mio and when you open your agenda in mio, and removes the ones that are canceled. An appointment you added individually also leaves your calendar if you turn off «Add to my calendar» when you reschedule it. If you turn sync off, it asks whether to remove those appointments; the ones that stay follow your changes in mio. When you delete your account from the app, mio removes the ones it wrote. mio can only update or remove those appointments from an iPhone or iPad that wrote them or syncs your appointments, and while it has access to your calendars: if you withdraw it, or delete your account on another device or on the web, they may stay in your calendar until you delete them. With sync on, if you also choose to see your busy times, mio uses only the start and end times of events in the calendars you choose, to mark them in your agenda and warn you if an appointment clashes; that information is read on your iPhone or iPad and never leaves it. You can withdraw the permission in Settings › Privacy & Security › Calendars.

On Android, if you are a coach, calendar sync and «Add to my calendar» work the same way and your appointments carry the same details, with these differences. mio asks for Android's Calendar permission, which it needs to write your appointments and read your busy times, and uses it only for what is explained here. It saves your appointments only to the «mio · Citas» calendar, which it creates on your device without linking it to an online account, so it doesn't show on your other devices or in the web version of your calendar; apps on your device with access to your calendars can see it, under their own policies. That is why mio can only update or remove those appointments from that device, and while it has the permission: if you withdraw it, or delete your account on another device or on the web, they may stay there until you delete them. If you uninstall mio without removing them, they may also stay on your device until you delete them or reinstall mio and remove them from the app. With sync on, if you also choose to see your busy times, mio uses only the start and end times of events in the calendars on your device that you choose; that information is read on your device and never leaves it. You can withdraw the permission in Android settings, under mio's permissions.

mio doesn't ask clients for calendar access. If you add an appointment to your calendar, your device's calendar screen opens with its details and you decide whether to save that copy, which doesn't update on its own: if your coach changes the appointment, we let you know in mio.

3. What we use your data for

Purposes needed to provide the service (primary purposes):

• Create and manage your account, sign you in with Apple or Google and confirm your age.
• Log your workouts and your food, calculate your targets, show your progress and sync your data between your devices and the web dashboard.
• Connect you with a coach and run the coaching: requests, assigned routines and plans, messages, appointments, check-ins and reviews, and let your coach keep track of the payments you make to them outside mio.
• Run the social features you choose: profile, followers, posts, stories and public routines.
• Process and verify your Apple or Google Play purchases, grant your plan's benefits or credits, handle store notices (such as renewals, cancellations or refunds) and prevent duplicate charges and fraud. We also handle Apple's notices of withdrawn parental consent.
• Process and verify your web subscription to mio Coach with Stripe, provide its benefits, let you manage its renewal and cancellation, handle payment notifications and status changes, and prevent duplicate charges and fraud.
• Send you the notifications you turn on, such as your appointment notices and reminders. So those notices show the right time, we store your device's time zone, which we use only for that and show to no one. If you are a coach and you book or move repeating appointments, mio uses your device's or browser's time zone at that moment to work out their dates, without storing it.
• Protect the community and the service: moderate content, handle reports, prevent abuse, fraud and unauthorized access, and enforce our Terms.
• Handle your support and rights requests, keep proof of your consents and comply with legal obligations.

Purposes that depend on your permission (you can refuse or withdraw them without losing the rest of the service):

• The artificial intelligence features, for each purpose you turn on (section 6).
• Reading and saving data in Apple Health (section 5).
• Sharing your measurements, progress photos, daily Apple Health activity and the summaries of your questions to the exercise chat with your coach (section 7), and letting them request the AI reading of your month (section 6).
• Showing your profile and content publicly (section 8).
• If you are a coach, syncing your appointments with the calendar on your iPhone, iPad or Android device, or adding only the ones you choose, and reading your busy times there (section 2).

mio does not use your data for its own advertising campaigns, sell it or build commercial profiles. YouTube videos may include advertising managed by Google (section 10). If we ever wanted to use it for a different purpose, such as promotional messages, we will ask for your consent first and you can say no without affecting the service. We use aggregated statistics that don't identify you, such as exercise popularity, to improve mio.

We don't make decisions based solely on automated processing that produce legal effects for you or similarly affect you. If an automatic filter rejects your content or we suspend your account, you can ask for a person to review it.

4. Sensitive data and your consent

Health data is sensitive personal data. We process it only with your express consent, which you give by accepting this notice when you create your account, by granting Apple Health permissions on the system screen, by turning on mio's switches (AI privacy and what you share with your coach), by entering the data yourself in the app, for the measurements your coach records, by starting the coaching with them and, for what your coach prepares before you have an account, when you accept their invitation. We keep a record of each acceptance and each change to those switches, with its date, so we can prove it.

While the coaching is active, your coach can record your body measurements (weight, body fat percentage and circumferences), for example when they measure you in person. The entry stays in your history marked «Recorded by your coach», we notify you in the app, and you can edit or delete it like any other. Your coach can record every measurement but only sees the ones you share with them (section 7).

If a coach sees you in person before you have an account, they can record your training form and nutrition profile in mio (including the health conditions you tell them) and prepare a routine and a meal plan for you, only if they declare that you gave them that information and agreed that they record it. We keep it separately, without an account, until you answer: if you accept their invitation by signing in to mio with that email, it goes to your account and you can change it like any other information; if you decline it, the coach cancels it or it expires, we delete it at that moment. The invitation expires 30 days after the coach first sends it to you or, if they never send it, 30 days after they create it; editing or resending it doesn't extend that period. While the coaching is active, your coach can also update your nutrition profile; we let you know in the app and mark it «Updated by your coach».

A coach can email you each invitation at most 3 times. The email says which coach is inviting you and why you are getting it, what they prepared for you, whether the coach declared that you agreed to the use of mio's AI (OpenAI models) with your information, how to sign in to mio and where to read this notice. To stop getting invitations from that coach, decline the invitation when you sign in to mio or write to us at soporte@mio.fitness. If you decline it, that coach can't invite your email again for 90 days: for that we keep only a cryptographic hash of your email, not the email, and only for that period. If you have an account and block a coach, they can no longer invite you.

You can withdraw your consent at any time (section 13); if you do, we will stop using that data for what you no longer allow, although some features may stop working. If a change to this notice affects how we process your sensitive data, we will ask for your consent again in the app before applying it.

5. Apple Health (HealthKit) and Health Connect

Connecting Apple Health on your iPhone and Apple Watch is optional, and you control it from the system permission screen. With your permission, mio can:

• Read on iPhone: sleep, steps, active energy, heart rate, weight, height, date of birth (age) and biological sex.
• Read on Apple Watch, during a workout: heart rate and active energy.
• Save: your strength workouts, the active energy of those sessions (estimated when the device doesn't measure it, and marked as estimated) and the weight and height you choose to log.

We use it to show your activity and progress, summarize each workout and prefill your nutrition profile to calculate your targets. On our servers we store each session's summary (average and maximum heart rate and active energy), which only you see; the nutrition profile data you confirm (age, sex, weight and height), and, only if you have a coach and turn on activity sharing, the daily summary of steps, active energy and sleep so your coach can see it; turning it on also uploads the earlier days since the coaching started, up to 90. If you turn that switch off or the coaching ends, we delete those daily summaries.

We never use Apple Health data for advertising or marketing, and we don't sell it or share it with data brokers. It reaches OpenAI in only one case: if you share your daily activity with your coach, the AI reading of your month that they can request includes a monthly summary of your steps, active energy and sleep, as long as you keep «AI monthly reading» on, which starts off, and both of you have Training assistance turned on (section 6). We never send OpenAI your heart rate or the Health data of your workouts, and AI nutrition assistance receives only the targets already calculated, never your Health records. You can change the permissions in Settings › Privacy & Security › Health › mio. Revoking them stops future access, but doesn't delete what was already synced with mio (deleted when you delete your account) or what mio saved in Health (you manage it in the Health app).

On Android, connecting Health Connect is also optional. With your permission, mio reads sleep, steps, active calories, heart rate, weight and height, and saves only the weight and height you choose to log. It does not read workout records or save workouts or active calories to Health Connect. Health Connect data follows the same purposes, storage rules, coach-sharing choices, advertising restrictions and rules for sending data to OpenAI described in this section. You can change permissions and manage stored data in Health Connect; revoking permissions stops future access but does not delete data already synced with mio or saved in Health Connect.

6. Artificial intelligence features (optional)

mio's AI features are optional and stay off until you allow them in Profile › Settings › AI privacy, where you choose each purpose separately. When you use one, our servers send OpenAI (United States), acting as our processor, only the data for that purpose:

• Training assistance (generating routines, analyzing your progress, the AI Coach, the «Ask the AI» chat about your exercises and the session you finish, while you have a coach, and the reading of your month your coach requests, if you turn it on): your requests and questions, workout history, results, exercise notes, your coach's comments on your exercises, the discomfort you mark and your limitations; for the reading of your month, also the summary of that month explained below, which may include your Apple Health or Health Connect activity, your measurements and, if you also allow Nutrition assistance, your food and your water.
• Nutrition assistance (plans, dishes and recipes): nutrition goals, preferences, eating habits, allergies, the health conditions you choose to tell us, foods, supplements and the text you type. If you turned on the reading of your month, it also lets that reading include your food and your water.
• Food photo analysis: the photos you choose and their descriptions, allergies, excluded foods and nutrition targets.
• Generated voice: the text of the answers mio reads aloud. The voice is synthetic, generated by AI; it is not a person.

With each request we send an identifier of your account transformed with a hash function, which doesn't reveal who you are, so OpenAI can detect abuse. Before an answer is generated, the text you type or dictate in the routine chat, in the AI Coach and in the exercise chat is checked with OpenAI's moderation service to stop harmful content.

The exercise chat works in any routine while you have a coach. It answers your training questions —technique, load, substitutions, warm-up, mobility, rest, progression and discomfort— using as context the exercise you are doing or, when you finish, the session you just did; it doesn't give advice on diet, supplements or medication, make diagnoses or answer topics unrelated to training. Only in the routines your coach created and assigned to you, the AI writes with each answer a short summary of your question for your coach, whether it is about an exercise or about the session, which is kept only if you accepted it (section 7); in your other routines no summary is written. mio doesn't keep the conversation.

If you have a coach, your coach can also use these features with the data you share with them to create or adjust your routines and your meal plan; both of you must have allowed it. Before you have an account, your coach can use them with what they recorded to prepare your coaching only if they declare that you agreed to the use of mio's AI with your information; we tell you so when you accept their invitation. OpenAI doesn't use the data it receives through its API to train its models and may keep it for up to 30 days only to detect abuse, unless we have zero data retention in place, in which case it keeps nothing. Withdrawing a permission stops future sending but doesn't undo what was already sent.

If you turn it on, your coach can also request an AI reading of your month. OpenAI receives a summary of the data for that month that your coach can already see (section 7): your workouts (sessions, sets, loads, records and how many times you marked each training signal, such as fatigue or muscle soreness); if they can see your food log and you have Nutrition assistance turned on, how much you ate against your target, the meal times you skipped, what you ate off your menu (swapped dishes, adjusted portions and extras), how many times you chose another option of your menu and your water; if you share your daily activity, your Apple Health or Health Connect steps, active energy and sleep; the changes in the measurements you share; how many check-ins you did, and how many questions of each type you asked the exercise chat among those your coach sees a summary of. It never includes the text of your notes or of the summaries of your questions, or your heart rate. The reading starts off and only you can turn it on, with the «AI monthly reading» switch: we ask you about it from your first launch, on the AI privacy screen, and you change it whenever you want in Profile › Settings › AI privacy or in Fitness › My coach › What your coach sees. To request it, both of you must also have Training assistance turned on. Only your coach sees the reading, and we delete it if you turn that switch off, if either of you withdraws that permission or when the coaching ends.

If you are 16 or 17 you can use the AI with limits: nutrition assistance never proposes a calorie deficit (a weight-loss goal is treated as maintenance) or supplements, and you'll see reminders to review your plan with your parent or guardian and a health professional. The same limits apply when your coach generates a plan for you. In the exercise chat, the AI doesn't suggest supplements, diets or weight loss either, and every answer reminds you to review your training with your parent or guardian and a health professional. The reading of your month your coach requests doesn't suggest a calorie deficit or supplements either.

On iOS, transcription of your voice and classification of your requests with Apple's models run on your device. On Android, dictation may use the system's recognition service and send audio to its provider, as section 2 explains. If an AI answer seems wrong or harmful, you can report it; we keep the reported text, your question and the reason (section 12).

AI can make mistakes. Its results are guidance and don't replace advice from a doctor, dietitian or other health professional.

7. What your coach sees

Your coach is an independent professional you choose; they are not a mio employee. When you send a coaching request you share its details (goals, experience, availability and any injuries or conditions you decide to mention). If you accept a coach's invitation, accepting plays the same role: you see what they will see and agree to it before the coaching starts. While the coaching is active, your coach can see:

• Your profile, your favorite exercises and the routines and meal plans they assign you. They never see the meal plans you make on your own, with AI or with another coach; they only know whether you follow one.
• The workouts you log (exercises, sets, loads, effort, notes and limitations), including those from before the coaching, and the check-ins and forms you send them.
• Your nutrition file: sex, age, height and allergies, your eating habits, the health conditions you choose to tell us and what you write about how you eat; your weight, only if you share it.
• Your food and water log for the plans they assign you, if the plan says so, since the current coaching started, also if you later switch to another plan; never what you log on a plan they didn't assign you.
• The appointments they book with you and whether you confirm them or ask for another time, with the note you write, and whether you attended each one, as your coach marks it.
• The messages you exchange.

Only if you turn it on will they also see your body measurements and progress photos (you choose each item in «My Progress») and your daily Apple Health activity: steps, active energy and sleep (you turn it on in Fitness › My coach, where you can also end the coaching). Of your daily activity they only see the days since the current coaching started and, of the photos you upload to your profile as «Coach only», only the ones you uploaded since then; never anything earlier. For your measurements and progress photos, you choose in «My Progress» how far back they see them: since the current coaching started, your whole history (including what came before this coaching) or only from the day you choose that option. The measurements your coach records for you (section 4) follow the same rule: they only see the ones you share. With this data, mio shows them a summary of each day (workouts, food against your target, water and, if you share it, your activity) and a report for each month, which include nothing they can't see separately. Your coach never sees the heart rate or calories of your workouts, your conversations with other people or data you haven't shared. Your coach may keep private notes about your coaching.

Your coach can also keep a private record in mio of the payments you make to them outside mio: the fee and how often you agreed to pay, the due dates, the payments they record and whether you're up to date. Only your coach sees it; you don't see it in the app. If your coach reminds you about a payment, it reaches you as their own chat message, only when they choose to send it. mio does not charge, process or receive these payments, and the record is deleted when the coaching ends.

If you use the exercise chat or the chat about the session you finish in the routines your coach created and assigned to you (section 6), your coach sees a short summary of each question only if you allow it with the «AI chat summaries» switch: the exercise (or, if you asked about the session, that it was about that day's session), one sentence, its type (technique, load, discomfort, substitution, progression or other) and whether you mentioned discomfort; never the conversation. It starts off: we ask you about it from your first launch, on the AI privacy screen, and you change it whenever you want in Profile › Settings › AI privacy or in Fitness › My coach › What your coach sees. Without allowing it you can't use the chat in those routines. In your other routines no summary is made and your coach doesn't see your questions. Questions about the menstrual cycle, pregnancy, sexual or reproductive health, mental health, eating behavior or medication are not summarized, nor are the ones the chat doesn't answer. You can see and delete the summaries in Fitness › My coach › What your coach sees; turning the switch off deletes them all and turns the chat off in your coach's routines. They are deleted automatically after 180 days or when the coaching ends.

Your coach can also request the AI reading of your month that section 6 explains. If they report a summary of your questions or a reading as wrong or harmful, we keep the reported text and the reason for up to 180 days from the report to review it, even if you later turn the switch off, remove the summary, the coaching ends or you delete your account.

Only your coach can book appointments with you, and only while the coaching is active. In mio you see their date, time, type, reason, place or link, who calls, what they ask for the check-in and their note; your coach never sees your calendar. We let you know about your appointments inside mio and, if you have coaching notifications turned on, also on your device, for example with the reminders your coach chooses (1 day, 1 hour or 15 minutes before). Those notifications only say who the appointment is with, when and what type it is. If your coach saves their appointments to their calendar, the appointment, with its reason, your name and, depending on its type, the place, the link or who calls, also stays in that calendar, which is theirs (section 2). Once each appointment starts, and while the coaching is active, your coach can mark whether you attended; only your coach sees that mark, we don't notify you about it, and it is deleted with the appointment (section 12).

At the end of each month of your coaching (months are counted from the day it started), mio reminds your coach to prepare your month recap. Your coach sees a summary of that month built only from what they can already see: your sessions and consistency, your best loads, the measurements you share with them that changed and, if they can see your food log, the days you logged food and water. They write you a message and what comes next (a stage and up to 3 goals), and mio adds the changes they made to your routine or meal plan. Once they send it, that summary is frozen and you see it in My coach as stories and as a report. Your coach's text goes through our filter of disallowed terms (section 9). You can report a recap from its «…» menu › Report and, if there is a block between you and your coach, their recaps stop being shown. You keep the recaps you received while you have your account, also after the coaching ends. Your coach only sees those of the current coaching, without the measurements you stop sharing with them, and the drafts they didn't send you are deleted when the coaching ends. If your coach deletes their account, their recaps stay with you without their name; if we suspend their account, you see them without their text.

When the coaching ends, whether you end it, your coach ends it or you block them, your coach loses access to your workouts, measurements, photos, activity and nutrition, we delete the summaries of your questions, the readings of your month and the drafts of your month recaps, and we record that you withdrew what you shared. The measurements your coach recorded stay in your history. Pending appointments between you are also canceled, without another notice, and the notices about your appointments are deleted; your coach can still see past ones, with the attendance they marked, until they are deleted (section 12), unless one of you blocks the other. If you later start a new coaching, with the same coach or another, you choose again what you share with them, and what they see follows these same rules: your measurements and progress photos from the date you choose in «My Progress», which can be your whole history; your activity and your «Coach only» photos only from the day that new coaching starts. If you go back to the same coach, they see again the meal plans they made for you. Conversations and your coach's notes are kept until either of you deletes their account. Your coach is responsible for how they use your data outside mio and must keep it confidential and use it only to coach you.

We keep a record of each coaching: who it was with, when it started and ended and how it ended (one of you ended it, there was a block or an account was deleted). With it, in «Your past coaches» you see the coaches you had, and you can rate them up to 60 days after the coaching ended and report them at any time, even if they blocked you. That list doesn't say who ended the coaching or whether there was a block, and how it ended is shown to no one. Your rating is published on the coach's profile like any review, and your coach can read and report it even if there is a block between you. The record is kept while both accounts exist; if one is deleted, it no longer identifies that person.

8. Public content and social features

If you are 18 or older, your account is public by default: anyone who uses mio can see your name, photo, @handle, bio, followers, posts, stories, public routines and social activity, and anyone with the link can see your profile and posts at https://mio.fitness. You can make your account private in Profile › Settings › Account privacy; then only approved followers see your content, although your name and photo remain visible.

If you are 16 or 17, your account is private from the start, we limit how people you don't know can find you in search, and only people you follow mutually and your coach can send you messages.

If you are a coach, your coach profile (specialties, city, reference fee and reviews) appears in the directory while you have an active plan. If we suspend an account for breaking the Terms, its content stops being shown to others.

Stories disappear from your profile after 24 hours and stay in your private archive. Published images are delivered through a content delivery network and may remain in temporary caches for up to one hour after you delete them. What other people have already saved, such as a public routine they adopted, may continue to exist without your identity.

9. Safety and content moderation

To protect the community, we automatically check what you publish before showing it: the text of posts, comments, stories, reviews, coaching requests, public routines, name, bio and @handle is compared on our servers with a list of disallowed terms (in direct messages, appointments and month recaps, only with the most severe terms), and the images you publish on your profile, posts, stories and public gallery are analyzed with OpenAI's moderation service before publication. Before sending each photo to OpenAI, we ask for specific permission to check it against the community rules. If you cancel, the photo is neither sent nor published. This permission covers only that photo: it is separate from the AI feature permissions in section 6 and does not enable those features. OpenAI receives the photo only to classify it; it is not used to train AI models. Private photos shared only with your coach are not sent to this moderation service. If the content breaks our rules, it isn't published.

When you report content, we hide it from you immediately and, if several people report it, from everyone while we review it. We keep a copy of the reported content, the reason and who reported it for up to 180 days, and our team gets an email alert with the reported excerpt to review it within 24 hours. If someone breaks the Terms, we may remove their content and suspend or terminate their account.

10. Who we share your data with

We share data only in these cases:

• With the people you choose: your coach (section 7), the people you chat with and, depending on your settings, the mio public (section 8).
• With Apple, when you sign in with Apple, make in-app purchases (Apple processes the payment as the seller) or receive notifications.
• With Google, when you purchase through Google Play: Google processes the payment and lets us verify the purchase and its status.
• With Stripe, to process and manage the mio Coach subscription you purchase on the web. We send customer and purchase references, the plan, currency and parameters needed for billing; Stripe collects payment method and billing information directly. We do not send Stripe workouts, measurements, photos, health data or information about your trainees to bill this subscription. Stripe also processes information under its Privacy Policy: https://stripe.com/privacy.
• With the providers that process data on our behalf (processors), listed below.
• With authorities, when a law or an order from a competent authority requires it, or to protect rights, people's safety or the service's.
• If mio merges, is sold or changes control, with whoever acquires the business, who must honor this notice.

These are the providers of the services we use. When they process data on our behalf as processors, they act under our instructions and the applicable contracts. Apple and Google also process data under their own policies when providing services such as sign-in and payments in their stores. Stripe also processes information under its own policy when providing its payment services:

Android's system speech recognition service may be provided by Google or another provider, depending on your device and its configuration. If it processes audio off your device, it does so under its own terms and privacy policies, including its security and retention practices. mio does not control or guarantee those practices. Check the speech recognition provider in your device settings before dictating; if it is Google, its policy is at https://policies.google.com/privacy.

mio uses YouTube API Services. When you play a recipe video, Google may collect player usage data, identifiers, IP addresses and diagnostics, use cookies or similar technologies and show ads under its own policies; its use is subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://www.google.com/policies/privacy). City search sends Google Places, through our servers, the text you type, the language and a session token. The other providers' policies are on their websites: Supabase (https://supabase.com/privacy), Cloudflare (https://www.cloudflare.com/privacypolicy/), OpenAI (https://openai.com/policies/privacy-policy), Apple (https://www.apple.com/legal/privacy/), Resend (https://resend.com/legal/privacy-policy), Vercel (https://vercel.com/legal/privacy-policy) and Stripe (https://stripe.com/privacy).

11. International transfers

Our processors are mainly in the United States, so your data is processed outside Mexico and possibly outside your country. Sending data to our processors doesn't require your consent; what we share with your coach and the people you choose happens by your decision and to provide the service you ask for.

Where the law of your country requires it, we protect these transfers with appropriate safeguards: the standard contractual clauses approved by the European Commission or the United Kingdom, the EU-U.S. Data Privacy Framework when the provider is certified, or the equivalent mechanism your law recognizes. You can ask us for a copy of these safeguards by writing to soporte@mio.fitness.

12. How long we keep your data

When these periods end, we delete the data or anonymize it so it no longer identifies you.

13. Your rights and how to exercise them

You have the right to access your data, rectify it, cancel it (ask us to delete it) and object to its processing for specific purposes (ARCO rights under Mexican law), and to withdraw your consent and limit the use or disclosure of your data. Depending on where you live, you may also have the right to data portability and the other rights explained in sections 18 to 23.

You can exercise many of these rights directly in the app: edit your profile and data; delete posts, photos, measurements and logs; change what you share with your coach in «My Progress» and in Fitness › My coach; adjust the AI in Profile › Settings › AI privacy; make your account private; change Apple Health permissions in iPhone Settings, and delete your account in Profile › Settings › Account › Delete account or at https://mio.fitness/eliminar-cuenta.

For any other request, write to soporte@mio.fitness with the subject «Privacy request» and include: your name, your mio account email (write from that address if you can), the right you want to exercise, the data it refers to and any document that helps locate it. If you act on behalf of someone else, attach the document that proves your authority. To protect your account we may ask you to confirm your identity.

We will reply within 20 business days of receiving your complete request and, if it applies, carry it out within the following 15 business days; if the law of your country sets a shorter period, we follow it. The process is free, except for delivery or copying costs the law allows. If you believe we didn't handle your request as the law requires, you can contact the data protection authority of your country.

14. How we protect your data

We apply administrative, technical and physical measures: encrypted communications (HTTPS), database encryption at rest by our provider, row-level access controls so only you and those you authorize see your data, additional encryption of the progress photos you share only with your coach, keys and secrets kept only on the server and internal access limited to what is essential. No system is infallible; if a breach significantly affects your rights, we will notify you without delay.

15. Minimum age and minors

mio is for people aged 16 or older. When you create your account we confirm your age with your date of birth or, when your device supports it, with the age range you choose to share through Apple. We don't knowingly collect data from people under 16: if we detect or are told that an account belongs to someone under that age, we will delete it along with its data. If you are a parent or guardian and believe your child gave us their data, write to soporte@mio.fitness.

If you are 16 or 17, you may need your parent's or guardian's permission under the law of your country, and we apply additional protections: your account is private from the start, we limit who can find and message you (section 8) and the AI works with limits (section 6).

If a parent or guardian withdraws, through Apple, the permission for a minor to use mio, Apple notifies us. We keep that notice linked to the app download identifier, delete the account's notification tokens, so we stop sending it notifications, and the app can no longer be used with that account until the permission is given again. The account and its data are kept; to review it or delete it, write to us.

16. Cookies and similar technologies

The website and web dashboard's own cookies are those needed to keep your session secure. mio does not include its own advertising or advertising analytics tools. When you play YouTube videos, its player may use cookies, local storage or identifiers and collect usage data, IP addresses and diagnostics under Google's policies (section 10). You can review those controls in your Google account and device settings.

17. Where mio is available

For now, mio is distributed on the App Store and Google Play only in countries of the Americas. It isn't available in the countries where our artificial intelligence providers don't offer service or in the European Economic Area (which includes the European Union), Switzerland and the United Kingdom, where it will launch once we appoint our representatives there (section 18). We process your data under this notice wherever you live and, in addition, under the rules for your region explained in sections 18 to 23. If you have questions about the law that applies to you, write to soporte@mio.fitness.

18. European Economic Area, Switzerland and United Kingdom

If you live in the European Economic Area (EEA), Switzerland or the United Kingdom, the General Data Protection Regulation (GDPR), the UK GDPR or the Swiss data protection law applies to the processing of your data, and the controller is the one named in section 1. The legal basis for each processing activity is:

In addition to the rights in section 13, you have the right to data portability, to restrict processing, to object to processing based on our legitimate interest and not to be subject to decisions based solely on automated processing with significant effects. We reply within one month. You can lodge a complaint with the data protection authority of the country where you live or work or where the alleged infringement took place; in the United Kingdom, with the Information Commissioner's Office.

We will appoint a representative in the European Union and another in the United Kingdom, as Article 27 of the GDPR and the UK GDPR requires, and publish their contact details here. Meanwhile, send any question or request to soporte@mio.fitness. Transfers of your data outside the EEA, Switzerland or the United Kingdom are protected as section 11 explains.

19. Brazil

If you live in Brazil, the Lei Geral de Proteção de Dados (LGPD) applies to the processing of your data. We process your health data only with your specific and highlighted consent, which you give through the permissions and switches in section 4, or where the law allows it. You have the right to confirm that processing exists, access your data, correct, anonymize, block or delete it, to its portability, to know who we share it with, to withdraw your consent and to object to processing. The channel to contact our data protection officer (encarregado) is soporte@mio.fitness. International transfers rely on the safeguards in section 11. You can file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

20. United States

If you live in the United States, this section supplements the notice under the California Consumer Privacy Act (CCPA, as amended by the CPRA) and the privacy laws of other states, such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon.

• Categories of data we collect (section 2): identifiers; customer records; commercial information (purchases); internet and app activity (usage and server logs); sensitive personal information (health data, date of birth and the content of your messages); the content you publish, and calculations about your targets and progress within the service.
• Sources: you, your devices, Apple Health, your coach, Apple, Google and Stripe (for web subscriptions).
• Why we use it and who we disclose it to: for the purposes in section 3, to the service providers and people in section 10, only for those purposes.
• mio does not sell your personal data, including the data of people under 16, or use it for its own advertising campaigns. When you play YouTube videos, Google processes player data under its own policies, as sections 10 and 16 explain. We use your sensitive personal information only to provide the service you request.
• Your rights: to know what data we process and access it, to correct it, to delete it, to receive it in a portable format and to opt out of its sale, its use for targeted advertising and profiling with significant effects. We won't discriminate against you for exercising them.
• How to exercise them: write to soporte@mio.fitness with the subject «Privacy request». We verify your identity with your account email. An authorized agent can act for you with your signed permission. We reply within 45 days. If we deny your request, you can appeal by replying to our email with the subject «Appeal»; if we deny your appeal, you can file a complaint with your state attorney general.

Consumer health data has its own rules, explained in section 21.

21. Consumer health data (Washington, Nevada, Connecticut and other states)

This section is our Consumer Health Data Privacy Policy under Washington's My Health My Data Act, Nevada's SB 370, the Connecticut privacy law and similar laws of other U.S. states.

• Consumer health data we collect: weight, height, body fat and measurements; progress photos; age and biological sex; injuries, limitations, conditions and discomfort you tell us about; allergies, excluded foods, supplements, eating habits, goals and food log; heart rate, calories and the other Apple Health or Health Connect data you authorize (section 5); the summary of your month kept in each month recap your coach sends you (section 7), and the data the nutrition and food photo AI features and the reading of your month your coach requests send (section 6).
• Sources: you, your devices, Apple Health or Health Connect and your coach: the measurements they record and, when they prepare an invitation for you or update your file, your training form and nutrition profile, with the injuries and health conditions you tell them about (section 4).
• Why: to provide the features you ask for (logging and analyzing your workouts and food, calculating your targets, coaching with your coach and the AI features you turn on), to keep the service secure and to comply with the law.
• Who we share it with: the coach you choose, only what section 7 describes; the processors in section 10 that process it on our behalf (Supabase, OpenAI only with your permission for the AI feature or to moderate the public photo you selected, Cloudflare for images and Apple), and authorities when the law requires it. If you dictate a routine on Android and system recognition is used, its provider may receive the audio, including health data you dictate, as sections 2 and 10 explain. Outside these cases, we don't share it with other third parties or affiliates.
• We don't sell consumer health data, and we collect or share it only with your consent or when necessary to provide the service you ask for.
• Your rights: to confirm whether we process your health data and access it, including the list of third parties we share it with; to withdraw your consent, and to ask us to delete it, including from our processors. Write to soporte@mio.fitness, or delete your account at any time in Profile › Settings › Account › Delete account.
• If we deny your request, you can appeal by replying to our email with the subject «Appeal»; we will answer within 45 days. If we deny your appeal, you can file a complaint with your state attorney general.

22. Canada

If you live in Canada, we process your data under the Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable provincial laws. We obtain your consent for the purposes in this notice, and you can withdraw it with the options in section 13. Your data is processed outside Canada, mainly in the United States, where it may be subject to that country's laws. You can access and correct your data and file a complaint with the Office of the Privacy Commissioner of Canada.

23. Other Latin American countries

If you live in Argentina, Chile, Colombia, Peru, Uruguay or another Latin American country, you have the right to access, rectify, update and delete your data, to object to its processing and to withdraw your consent, under the data protection law of your country. Exercise them as section 13 explains. If we don't answer as the law requires, you can contact your country's data protection authority, such as the Agencia de Acceso a la Información Pública (Argentina), the Superintendencia de Industria y Comercio (Colombia) or the Autoridad Nacional de Protección de Datos Personales (Peru).

24. Changes to this notice

We may update this notice. We will publish the current version at https://mio.fitness/en/privacy with its date and, if the change is important, notify you in the app or by email before it applies. If the change affects the processing of your sensitive data or requires your consent, we will ask for it again in the app.

25. Contact

Alexis Lomeli Mejia · soporte@mio.fitness. See also the Terms of Use at https://mio.fitness/en/terms and the support page at https://mio.fitness/en/support.