Grio Privacy Policy

1. Scope

This Privacy Policy explains how Grio collects, uses, discloses, retains, and deletes personal information when you use Grio's website, waitlist, mobile app, account services, wellness coaching features, and related support channels. Grio is a general wellness and weight-management service. It is not a healthcare provider, medical device, or emergency monitoring tool.

Grio is provided by ManyWorlds. In this policy, "Grio," "we," "us," and "our" refer to ManyWorlds as the service provider responsible for Grio's privacy practices, except where a third-party store, processor, operating system, or service acts under its own terms and privacy policy.

2. Information We Collect

Information you provide

• Account information: name, email address, login provider, and internal user ID
• Waitlist information: email address, launch or early-invite consent timestamp, and UTM attribution
• Profile and goals: age, selected sex, height, current weight, target weight, and weight-management goal
• Coaching inputs: Grio coach settings, instructions, ritual answers, and chat messages
• Meal, activity, diary, and weight records, including journal entries and doodles
• Photos selected by the user for meal or workout analysis, or Grio profile setup
• Voice recordings when you choose voice input for chat transcription
• Support requests and other messages you send to Grio

Information from your device, stores, and service providers

• Apple Health data, if explicitly permitted: sleep, steps, active energy, heart rate, HRV, workouts, respiratory rate, wrist temperature, and related read-only data.
• Subscription state from app store systems: trial dates, subscription status, selected plan type, entitlements, and receipt or billing-support metadata
• AI, image-analysis, voice-transcription, storage, and infrastructure outputs returned by processors acting on Grio's behalf

App stores and payment providers process payment instruments under their own terms. Grio does not collect or store full payment card numbers.

Information collected automatically

• App analytics: screen route shape, low-cardinality action events, subscription state transitions, and app lifecycle signals
• Website analytics: page views, waitlist funnel events, CTA clicks, referral and campaign metadata, browser or device information, and approximate location derived from network information
• Diagnostics: errors, performance, crash reports, request metadata, and security or abuse-prevention signals

3. How We Use Information

We use information to provide, personalize, evaluate, develop, test, maintain, secure, support, troubleshoot, and improve Grio and related features. This includes wellness coaching, energy and food/activity context, conversational logging, accounts and subscriptions, customer support, safety and abuse prevention, reliability, quality review, product research, prompt and policy evaluation, nutrition and catalog matching, AI-assisted feature evaluation, internal analytics, administrative tools, and pre-launch planning. We do not use this information for advertising targeting or data sale. Pre-launch waitlist records are used to send Grio launch updates, soft launch invitations, App Store link notices, manage early-access cohorts, understand demand, and improve launch planning.

Authorized Grio personnel, contractors, or service providers may review account data, user content, coaching inputs and outputs, support messages, diagnostics, and related records when reasonably useful for the purposes above, including debugging, support, quality control, product development, AI or prompt evaluation, safety review, fraud or abuse prevention, compliance, and business operations. We may create internal notes, labels, summaries, derived signals, test cases, deidentified data, or aggregated data from this information.

4. Apple Health and Wellness Data

Apple Health connection is optional. Users can revoke permission in iOS Settings at any time. Grio does not send raw HealthKit samples to the server or to AI models. The app may derive and send daily summaries, indicators, trends, readiness or energy context, sync status, diagnostic metadata, and other wellness context needed or useful for Grio features. Grio may store, process, analyze, review, combine, summarize, evaluate, and use those derived health and wellness signals to provide coaching, personalize the service, debug issues, measure quality, evaluate AI behavior, develop features, and improve Grio. If a user explicitly chooses or consents to a feature that needs additional health-related data or more detailed derived context, Grio may process that information for the disclosed feature and related operation, support, quality, safety, and improvement purposes. HealthKit data and future medical-adjacent data are not used for advertising, marketing, data sale, credit, insurance, employment, or similar decisions.

5. Third-Party AI, Image, and Voice Processing

When a user uses Grio's AI, image-analysis, embedding, or voice features, Grio may send the profile, goals, meal, activity, or health-related context, photos or descriptions, voice input, and chat context needed for that feature to the third-party processors below. Grio may also use related inputs and outputs for quality evaluation, debugging, and feature improvement as described in this policy. Raw HealthKit samples, product-analytics events, and billing ledgers are not included in AI requests:

• DeepSeek V4 Flash via OpenRouter: coach conversations, coaching notes, and short comments
• Google Gemini Embedding 2: memory search and embedding for personalized coaching context
• Google Gemini multimodal models: meal or workout photo and description analysis when used
• Deepgram: chat voice-input transcription when you choose to record and send voice input

Your data is never used to train AI models. Grio sends every AI request with training and data collection denied, and routes only to providers that honor that setting. This applies to chat, coaching notes, meal and workout analysis, memory search, and voice transcription alike, and Grio uses API or business tiers rather than consumer products so the exclusion is a contractual term and not a preference toggle.

Processors may hold a request for a limited period — generally no more than 30 days, under each provider's own published retention limits — for security, abuse monitoring, and service reliability, after which it is deleted. Grio does not access or use that operational copy for any other purpose, and it is never used for training. Grio also applies the access controls each provider makes available. If processors, retention practices, or purposes materially change, we update this policy and the in-app disclosure.

AI, image, and voice features may require sending the user's selected inputs, relevant context, and generated outputs to processors and returning their results to Grio. Authorized Grio personnel or service providers may access, review, annotate, compare, summarize, and evaluate related inputs, outputs, prompts, tool results, and metadata when reasonably useful to operate, secure, troubleshoot, support, evaluate, develop, or improve Grio, including its prompts, safety rules, retrieval, memory, nutrition analysis, and coaching quality. Users should not submit financial information, government IDs, raw medical records, another person's personal information, or other sensitive information unrelated to Grio's wellness-coaching purpose.

6. Analytics, Cookies, Crash Reporting, and Storage

Grio may use PostHog for product analytics, Google Analytics and the Meta Pixel for website analytics and advertising measurement, Sentry for crash/error diagnostics, and cloud infrastructure for backend storage. Product analytics events must stay low-sensitivity and low-cardinality. Chat text, diary or freeform text, food names, raw HealthKit data, photos, voice recordings, and wellness-sensitive content are not sent as product analytics events.

Grio's website may use cookies, local storage, SDKs, pixels, tags, and similar technologies to make the site work, measure traffic, understand waitlist funnel performance, and prevent abuse. These tools may collect browser, device, page, referral, campaign, and event information, and sampled session recordings with form input and page text masked. Grio does not use wellness data, HealthKit data, meal records, chat history, diary entries, photos, or voice recordings for advertising targeting or data sale.

You can control cookies through your browser settings. Blocking cookies or similar storage may affect site analytics and some site functions. Google also provides browser tools and account settings for limiting Google Analytics measurement.

7. Sharing and No Sale

We do not sell personal information, health data, meal records, or chat history to data brokers. We share information as needed or useful to operate, provide, personalize, secure, support, troubleshoot, evaluate, develop, or improve Grio; at the user's direction; for legal compliance; or when necessary for security.

• Google Sign-In for account authentication
• Cloud hosting, database, storage, and infrastructure providers
• AI, image-analysis, embedding, and voice-transcription processors listed in this policy
• Analytics and diagnostics providers under Grio's data-minimization rules
• App store and payment systems for subscriptions, entitlements, refunds, and billing support
• Security, legal, compliance, and support providers when needed to protect users or operate the service
• Other parties if you direct us to share information or if disclosure is required by law
• Successors or advisors if Grio or ManyWorlds is involved in a merger, acquisition, financing, reorganization, or similar corporate transaction, subject to appropriate safeguards where required

8. Retention and Deletion

We retain information while the account is active and as needed to provide the service. Users can delete their account and data directly in the app: Settings → Account and Subscription → Account deletion, then confirm.

The in-app deletion path immediately deletes the active server-stored account, profile, coach settings, Apple Health derived summaries, memory embeddings, and uploaded photos, and also clears goals, body information, weight, meal, activity, and diary local state remaining in the app. Conversations and store metadata enter manual deletion review and are handled within 30 days. Security logs, diagnostics, backups, and records needed for legal or billing-dispute purposes may remain for their disclosed or legally required retention periods.

If you cannot access the app or already deleted it, you can request deletion by emailing support@getgrio.com with the Google or Apple account email used to sign up for Grio; these requests follow the same manual review path.

Deleted accounts and deleted content may not be recoverable. Grio responds to verified deletion and privacy requests within the time required by applicable law. Backup, security, diagnostic, and provider-side copies may persist for a limited period through ordinary retention cycles before deletion or deidentification.

Account deletion does not automatically cancel App Store or Play Store subscriptions. If a paid subscription or trial is active, review billing status separately in the store subscription management screen.

Some records may be retained only when required for legal, security, billing-dispute, or abuse-prevention purposes. Waitlist records are deleted when the launch-notice purpose is complete, when the recipient opts out, or when deletion is requested.

Analytics, diagnostic, review, research, test, administrative, and security records are retained as long as needed for product quality, development, operations, support, security, abuse prevention, legal, or compliance purposes. If Grio creates deidentified or aggregated product-quality signals, we maintain and use them in a form not reasonably linkable to an individual.

9. Choices and Privacy Rights

Depending on where you live, you may have rights to access, receive a copy of, correct, delete, restrict, object to, or withdraw consent for certain processing of your personal information. You may also have the right to appeal a privacy request decision or use an authorized agent where applicable law allows it.

• Revoke Apple Health permission in iOS Settings
• Change notification permissions in OS settings
• Control website cookies and similar technologies through browser settings
• Opt out of or delete waitlist records
• Delete account and data
• Request privacy help or corrections

To exercise privacy rights, email support@getgrio.com and describe the request. Grio may need to verify your identity or authority before fulfilling the request. If we cannot verify the request, or if an exception applies under law, we may deny, limit, or delay the request and explain the decision where required. Grio will not discriminate against you for exercising privacy rights.

10. Children

Grio is not intended for users under 14. If we learn that a user under 14 provided personal information without required permission, we will take appropriate steps to delete the account and related information.

11. Additional Notices and International Transfers

Washington consumers can review Grio's Washington Consumer Health Data Privacy Policy for additional consumer health data disclosures and rights. Other regions may provide additional privacy rights under applicable law; Grio will respond to authenticated requests as required by those laws.

Grio and its service providers may process information in the United States, Korea, and other countries where we or our processors operate. These countries may have privacy laws different from the laws where you live. When we transfer or process information across borders, we take steps designed to protect it according to this policy and applicable law, including contractual or other transfer safeguards where required.

12. Security

Grio uses technical, organizational, and administrative safeguards designed to protect personal information, which may include encryption in transit, access controls, provider security settings, monitoring, and limited employee or contractor access based on operational need. No security measure can guarantee absolute security, and users should keep account credentials and devices protected.

13. Changes to This Policy

We may update this policy when Grio's features, providers, legal obligations, or privacy practices change. If a change materially affects how we collect, use, or share personal information, we will update this page and provide in-app or other notice where required.

14. Contact

Privacy contact: support@getgrio.com