Privacy Policy

This Privacy Policy describes how Inyo, Inc. ("Inyo," "we," "us") collects, uses, and protects information when you use the Inyo Movement Awareness Platform ("Service"). We built Inyo to help you understand your body. Trust is the foundation of that relationship — this policy explains in plain language what we do with your data and what we will never do.

Information We Collect

Account information: name, email, and authentication identifiers when you sign up.

Movement and body-awareness data: the assessments, body-region selections, sensations, check-ins, and exercise activity you record.

Connected app data: if you choose to connect Apple Health, Garmin, Strava, or WHOOP, we receive only the metrics you authorize and only for as long as the connection is active.

Device and usage signals: basic technical information (device type, OS, app version, crash diagnostics) used to keep the Service stable.

How We Use It

To deliver your personalized Matched Geometry calendar, surface your Mobility Arc, generate AI assessment summaries, and maintain your account. We use de-identified, aggregated signals to improve our recommendation models — you can opt out at any time in Manage Data Sharing.

What We Will Never Do

We will never sell your personal or health data. We will never share identifiable health information with advertisers or data brokers. We will never use your data to train third-party AI models without your explicit consent.

How We Protect It

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is restricted to authorized personnel under the principle of least privilege and audited. We perform regular security reviews and follow SOC 2 controls.

Your Rights

You can access, export, correct, or delete your data at any time from the Settings area in the Inyo app. Residents of California, Colorado, Virginia, the EU/UK, and other jurisdictions with comprehensive privacy laws have additional rights, including the right to know, the right to deletion, and the right to non-discrimination for exercising these rights.

Retention

We retain account data while your account is active. When you delete your account, we permanently remove personal data within 30 days, except where retention is required by law.

Children

Inyo is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

Contact

Privacy questions and requests: privacy@inyo.world