Grio Privacy Policy

1. Scope

This Privacy Policy explains how Grio collects, uses, discloses, retains, and deletes personal information when you use Grio's website, waitlist, mobile app, account services, wellness coaching features, and related support channels. Grio is a general wellness and weight-management service. It is not a healthcare provider, medical device, or emergency monitoring tool.

Grio is provided by ManyWorlds. In this policy, "Grio," "we," "us," and "our" refer to ManyWorlds as the service provider responsible for Grio's privacy practices, except where a third-party store, processor, operating system, or service acts under its own terms and privacy policy.

2. Information We Collect

Information you provide

• Account information: name, email address, login provider, and internal user ID
• Waitlist information: email address, launch or early-invite consent timestamp, and UTM attribution
• Profile and goals: age, selected sex, height, current weight, target weight, and weight-management goal
• Coaching inputs: Grio coach settings, instructions, ritual answers, and chat messages
• Meal, activity, diary, and weight records, including journal entries and doodles
• Photos selected by the user for meal or workout analysis, or Grio profile setup
• Voice recordings when you choose voice input for chat transcription
• Support requests and other messages you send to Grio

Information from your device, stores, and service providers

• Apple Health data, if explicitly permitted: sleep, steps, active energy, heart rate, HRV, workouts, respiratory rate, wrist temperature, and related read-only data.
• Subscription state from app store systems: trial dates, subscription status, selected plan type, entitlements, and receipt or billing-support metadata
• AI, image-analysis, voice-transcription, storage, and infrastructure outputs returned by processors acting on Grio's behalf

App stores and payment providers process payment instruments under their own terms. Grio does not collect or store full payment card numbers.

Information collected automatically

• App analytics: screen route shape, low-cardinality action events, subscription state transitions, and app lifecycle signals
• App advertising attribution: ATT permission status, device or app identifiers available under that permission, app activation, and trial or subscription lifecycle events
• Website analytics: page views, waitlist funnel events, CTA clicks, referral and campaign metadata, browser or device information, and approximate location derived from network information
• Diagnostics: errors, performance, crash reports, request metadata, and security or abuse-prevention signals

3. How We Use Information

We use information to provide, personalize, evaluate, develop, test, maintain, secure, support, troubleshoot, and improve Grio and related features. This includes wellness coaching, energy and food/activity context, conversational logging, accounts and subscriptions, customer support, safety and abuse prevention, reliability, quality review, product research, prompt and policy evaluation, nutrition and catalog matching, AI-assisted feature evaluation, internal analytics, administrative tools, and pre-launch planning. We do not use health, meal, chat, diary, photo, voice, or other wellness content for advertising targeting, advertising measurement, or data sale. If the user permits tracking on iOS, Grio uses limited app attribution information to understand which ads led people to start using Grio and to measure or optimize advertising campaigns. Pre-launch waitlist records are used to send Grio launch updates, soft launch invitations, App Store link notices, manage early-access cohorts, understand demand, and improve launch planning.

Authorized Grio personnel, contractors, or service providers may review account data, user content, coaching inputs and outputs, support messages, diagnostics, and related records when reasonably useful for the purposes above, including debugging, support, quality control, product development, AI or prompt evaluation, safety review, fraud or abuse prevention, compliance, and business operations. We may create internal notes, labels, summaries, derived signals, test cases, deidentified data, or aggregated data from this information.

4. Apple Health and Wellness Data

Apple Health connection is optional. Users can revoke permission in iOS Settings at any time. Grio does not send raw HealthKit samples to the server or to AI models. The app may derive and send daily summaries, indicators, trends, readiness or energy context, sync status, diagnostic metadata, and other wellness context needed or useful for Grio features. Grio may store, process, analyze, review, combine, summarize, evaluate, and use those derived health and wellness signals to provide coaching, personalize the service, debug issues, measure quality, evaluate AI behavior, develop features, and improve Grio. If a user explicitly chooses or consents to a feature that needs additional health-related data or more detailed derived context, Grio may process that information for the disclosed feature and related operation, support, quality, safety, and improvement purposes. HealthKit data and future medical-adjacent data are not used for advertising, marketing, data sale, credit, insurance, employment, or similar decisions.

5. Third-Party AI, Image, and Voice Processing

Grio asks for the user's permission before first sending personal information to external AI processors. The in-app disclosure identifies the recipients, the information sent, and the purposes of the transfer. Grio does not make those external AI requests unless the user gives permission.

• OpenRouter, Inc. and OpenAI, L.L.C.: OpenRouter routes text-generation requests to OpenAI. These requests may include profile and goals; chat messages and relevant conversation history; coaching instructions, memories, and other context; and meal, activity, and health-related records or derived summaries needed to generate coach replies, plans, notes, comments, summaries, and analyses.
• Google LLC (Gemini): text, relevant coaching context, memory content, and user-selected meal or workout photos and descriptions needed for embeddings and memory retrieval, image understanding, and meal or workout analysis.
• Deepgram, Inc.: a voice recording the user chooses to record and send, together with the technical request information needed to transcribe it into a chat draft.

This information comes from content the user types, records, selects, or uploads; profile, goal, meal, activity, diary, and other records the user has provided to Grio; derived Apple Health summaries created after the user separately permits Apple Health access; and relevant context or results Grio creates while providing the service. Raw HealthKit samples, product-analytics events, and billing ledgers are not included in these AI requests.

Users can withdraw this permission at any time in Grio under Settings → Privacy → AI Data Sharing and can grant it again there later. Withdrawing permission blocks future transfers to the processors listed above. Features that require external AI processing, image analysis, memory retrieval, or voice transcription will be unavailable while permission is withdrawn; the user's account and non-AI surfaces remain available. Withdrawal does not by itself delete information Grio already holds or recall information already processed. Users can use the account-deletion and privacy-request options in Sections 8 and 9 to request deletion where applicable.

Grio requires processors that receive personal information on its behalf to use it only for authorized purposes, follow confidentiality and security obligations, and provide the same or equivalent protection described in this policy and required by applicable law. Grio reviews the protections applicable to these services and uses contractual, technical, and organizational safeguards appropriate to the information and processing. If recipients, information categories, purposes, or safeguards materially change, Grio will update this policy and the in-app disclosure and request new permission where required.

AI, image, and voice features may require sending the user's selected inputs, relevant context, and generated outputs to processors and returning their results to Grio. Authorized Grio personnel or service providers may access, review, annotate, compare, summarize, and evaluate related inputs, outputs, prompts, tool results, and metadata when reasonably useful to operate, secure, troubleshoot, support, evaluate, develop, or improve Grio, including its prompts, safety rules, retrieval, memory, nutrition analysis, and coaching quality. Users should not submit financial information, government IDs, raw medical records, another person's personal information, or other sensitive information unrelated to Grio's wellness-coaching purpose.

6. Analytics, Cookies, Crash Reporting, and Storage

Grio may use PostHog for product analytics, Google Analytics and the Meta Pixel for website analytics and advertising measurement, the Meta SDK for app activation and advertising attribution, RevenueCat for subscription administration and delivery of trial or subscription lifecycle events to Meta, Sentry for crash/error diagnostics, and cloud infrastructure for backend storage. Product analytics events must stay low-sensitivity and low-cardinality. Chat text, diary or freeform text, food names, raw HealthKit data, photos, voice recordings, and wellness-sensitive content are not sent as product analytics events.

Grio's website may use cookies, local storage, SDKs, pixels, tags, and similar technologies to make the site work, measure traffic, understand waitlist funnel performance, and prevent abuse. These tools may collect browser, device, page, referral, campaign, and event information, and sampled session recordings with form input and page text masked. Grio does not use wellness data, HealthKit data, meal records, chat history, diary entries, photos, or voice recordings for advertising targeting or data sale.

You can control cookies through your browser settings. Blocking cookies or similar storage may affect site analytics and some site functions. Google also provides browser tools and account settings for limiting Google Analytics measurement.

7. Sharing and No Sale

We do not sell personal information, health data, meal records, or chat history to data brokers. We share information as needed or useful to operate, provide, personalize, secure, support, troubleshoot, evaluate, develop, or improve Grio; at the user's direction; for legal compliance; or when necessary for security.

• Google Sign-In for account authentication
• Cloud hosting, database, storage, and infrastructure providers
• AI, image-analysis, embedding, and voice-transcription processors listed in this policy
• Analytics, advertising-measurement, and diagnostics providers under Grio's data-minimization rules, including Meta and RevenueCat for limited app attribution and subscription lifecycle measurement
• App store and payment systems for subscriptions, entitlements, refunds, and billing support
• Security, legal, compliance, and support providers when needed to protect users or operate the service
• Other parties if you direct us to share information or if disclosure is required by law
• Successors or advisors if Grio or ManyWorlds is involved in a merger, acquisition, financing, reorganization, or similar corporate transaction, subject to appropriate safeguards where required

8. Retention and Deletion

We retain information while the account is active and as needed to provide the service. Users can delete their account and data directly in the app: Settings → Account and Subscription → Account deletion, then confirm.

The in-app deletion path immediately deletes the active server-stored account, profile, coach settings, Apple Health derived summaries, memory embeddings, and uploaded photos, and also clears goals, body information, weight, meal, activity, and diary local state remaining in the app. Conversations and store metadata enter manual deletion review and are handled within 30 days. Security logs, diagnostics, backups, and records needed for legal or billing-dispute purposes may remain for their disclosed or legally required retention periods.

If you cannot access the app or already deleted it, you can request deletion by emailing support@getgrio.com with the Google or Apple account email used to sign up for Grio; these requests follow the same manual review path.

Deleted accounts and deleted content may not be recoverable. Grio responds to verified deletion and privacy requests within the time required by applicable law. Backup, security, diagnostic, and provider-side copies may persist for a limited period through ordinary retention cycles before deletion or deidentification.

Account deletion does not automatically cancel App Store or Play Store subscriptions. If a paid subscription or trial is active, review billing status separately in the store subscription management screen.

Some records may be retained only when required for legal, security, billing-dispute, or abuse-prevention purposes. Waitlist records are deleted when the launch-notice purpose is complete, when the recipient opts out, or when deletion is requested.

Analytics, diagnostic, review, research, test, administrative, and security records are retained as long as needed for product quality, development, operations, support, security, abuse prevention, legal, or compliance purposes. If Grio creates deidentified or aggregated product-quality signals, we maintain and use them in a form not reasonably linkable to an individual.

9. Choices and Privacy Rights

Depending on where you live, you may have rights to access, receive a copy of, correct, delete, restrict, object to, or withdraw consent for certain processing of your personal information. You may also have the right to appeal a privacy request decision or use an authorized agent where applicable law allows it.

• Withdraw or grant AI Data Sharing permission in Grio under Settings → Privacy → AI Data Sharing
• Revoke Apple Health permission in iOS Settings
• Change notification permissions in OS settings
• Allow or deny app tracking when iOS asks, and change that choice later in iOS Settings → Privacy & Security → Tracking
• Control website cookies and similar technologies through browser settings
• Opt out of or delete waitlist records
• Delete account and data
• Request privacy help or corrections

To exercise privacy rights, email support@getgrio.com and describe the request. Grio may need to verify your identity or authority before fulfilling the request. If we cannot verify the request, or if an exception applies under law, we may deny, limit, or delay the request and explain the decision where required. Grio will not discriminate against you for exercising privacy rights.

10. Children

Grio is not intended for users under 14. If we learn that a user under 14 provided personal information without required permission, we will take appropriate steps to delete the account and related information.

11. Additional Notices and International Transfers

Washington consumers can review Grio's Washington Consumer Health Data Privacy Policy for additional consumer health data disclosures and rights. Other regions may provide additional privacy rights under applicable law; Grio will respond to authenticated requests as required by those laws.

Grio and its service providers may process information in the United States, Korea, and other countries where we or our processors operate. These countries may have privacy laws different from the laws where you live. When we transfer or process information across borders, we take steps designed to protect it according to this policy and applicable law, including contractual or other transfer safeguards where required.

12. Security

Grio uses technical, organizational, and administrative safeguards designed to protect personal information, which may include encryption in transit, access controls, provider security settings, monitoring, and limited employee or contractor access based on operational need. No security measure can guarantee absolute security, and users should keep account credentials and devices protected.

13. Changes to This Policy

We may update this policy when Grio's features, providers, legal obligations, or privacy practices change. If a change materially affects how we collect, use, or share personal information, we will update this page and provide in-app or other notice where required.

14. Contact

Privacy contact: support@getgrio.com