Privacy Policy

Last updated: Jul 16, 2026

OLOS Inc. ("OLOS," “we”, “our”, or “us”) is an Alberta based corporation that operates the OLOS mobile application and related services ("the Services").

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when individuals use OLOS. The Services are currently intended for users located in Canada and the United States.

OLOS is a wellness application and is not a medical service. OLOS does not provide medical advice, diagnosis or treatment.

1. Information We Collect

Depending on how you use OLOS, we may collect the following information:

- Account information (e.g., email address, user identifier, authentication and account-security information).

- Profile and onboarding information (e.g., age or date of birth, sex, weight, health or wellness goals, activity level, hours of sleep, time-zone and location-related settings that you provide).

- User inputs (e.g., nutrition related entries, dietary-quality selections, physical activity and exercise, weight, daily wellness logs, other health or lifestyle information you choose to enter).

- Derived information (e.g., OLOS score, trends, summaries, insights and other results generated from user inputs like momentum and consistency indicators).

- Technical information (e.g., such as authentication logs, app version, and limited technical information necessary to operate, secure, and troubleshoot the Services. OLOS does not currently use any analytics or crash-reporting software).

2. How We Use Your Information

Information is collected:

- Directly from the user when you create an account, complete onboarding or enter information.

- Automatically through authentication, security, and limited service logs required to operate the Services.

- From third-party services only where you choose to connect such a service or where the service supports the operation of OLOS.

We collect and use your data to:

- Create, authenticate, and manage user accounts.

- Operate and provide the app.

- Calculate and display the OLOS score.

- Generate trends, summaries, and behavioural insights.

- Store and display user history.

- Respond to support and privacy requests.

- Diagnose technical problems and maintain security.

- Prevent misuse, fraud, and unauthorized access.

- Improve the app using aggregated or de-identified information.

- Comply with legal obligations.

We will not use sensitive health or lifestyle information for a materially different purpose without providing additional notice and obtaining consent where required.

3. Consent

By creating an account and voluntarily submitting information, you consent to the collection, use and disclosure of personal information for the purposes described in this Privacy Policy.

Some information is necessary for OLOS to calculate scores and provide its core functionality. You may choose to not provide optional information, although doing so may limit certain features.

You may withdraw your consent by contacting us or deleting your account, subject to legal or contractual restrictions. Withdrawal of consent may prevent us from continuing to provide some or all of the Services.

For sensitive information, such as health and lifestyle data, OLOS may request express consent where required by applicable law.

4. Data Storage

OLOS Inc. is based in Canada. We and our service providers may store or process personal information in Canada, the United State and other jurisdictions in which our service providers operate.

When information is processed outside your province, state or country, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies or governmental authorities in accordance with applicable law.

OLOS remains responsible for personal information transferred to service providers for processing and uses contractual and other safeguards appropriate to the sensitivity of the information.

5. Data Sharing

We do not sell personal information or consumer health data.

We do not use health or lifestyle information for targeted advertising.

We may disclose personal information in the following circumstances.

SERVICE PROVIDERS

We use service providers that process information on our behalf, including providers of:

- Cloud hosting and database services.

- Authentication.

- File storage.

- Customer support.

- Software development and technical maintenance.

These service providers may access personal information only as necessary to provide their services to OLOS, subject to applicable contractual and legal obligations.

Our current service providers include:

We use Supabase to provide cloud hosting, authentication, and database services.

Authentication providers, including Apple Sign In when selected by the user.

Our primary production database is hosted on (Amazon Web Services (AWS) in US East North Virginia). As a result, personal information you provide through OLOS may be stored or processed in the United States.

When personal information is processed outside your province or country of residence, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement agencies, or governmental authorities in accordance with applicable law.

OLOS remains responsible for personal information processed by our service providers and uses contractual and other safeguards to protect your information.

Legal and safety reasons

We may disclose information where reasonably necessary to:

- Comply with applicable law, court orders or lawful government requests.

- Protect the rights, safety and security of OLOS, our users or others.

- Investigate fraud, security incidents or misuse.

- Complete a merger, financing, acquisition, reorganization or sale of business assets, subject to applicable privacy protections.

6. Data Retention

We retain personal information only for as long as reasonably necessary to:

- Provide the Services.

- Fulfill the purposes described in this Privacy Policy.

- Maintain security and business records.

- Comply with legal obligations.

- Resolve disputes and enforce agreements.

When personal information is no longer required, we delete, anonymize or securely dispose of it, subject to legal requirements and reasonable backup-retention periods.

7. Security

We use encryption in transit (HTTPS/TLS), encrypted cloud infrastructure, authentication controls, and database access controls such as Row Level Security (RLS) to help protect personal information.

8. Your Privacy Rights

Depending on where you live, you may have the right to:

- Ask whether we hold or process your personal information.

- Request access to your personal information.

- Request correction of inaccurate or incomplete information.

- Request deletion of your information.

- Withdraw consent to certain collection, use or disclosure.

- Ask how your information has been used or disclosed.

- Submit a privacy complaint.

- Appeal our refusal to act on a request where applicable law provides that right.

Deleting your account permanently removes your active account information from our production systems. Certain information may temporarily remain in secure backups until those backups expire in accordance with our backup retention schedule.

To submit a request, contact:

Privacy Officer

OLOS Inc.

Email: hello@olosapp.com

We may take reasonable steps to verify your identity before fulfilling a request. We will respond within the period required by applicable law.

You may also initiate account deletion using the account-deletion function in the OLOS app.

9. United States Consumer Health Data Notice

Some information processed through OLOS may qualify as "consumer health data" under applicable US state laws. This may include:

- Weight and weight history.

- Meals and nutrition information.

- Exercise and activity information.

- Health and wellness goals.

- Information inferred from these entries.

- OLOS scores, trends, and behavioural insights.

We collect this information directly from you and use it to provide the functionality you request, including calculating your OLOS score, displaying your history and generating insights.

We may disclose this information to service providers on our behalf, such as cloud hosting, database, authentication and technical-support providers.

We do not:

- Sell consumer health data.

- Use consumer health data for targeted advertising.

- Disclose consumer health data to data brokers.

- Use consumer health data for purposes unrelated to providing OLOS without additional notice and consent where required.

US users may request access, deletion or withdrawal by contacting hello@olosapp.com. Where required by law, users may also request information about the service providers or third parties that received their consumer health data and may appeal a refusal to act on a request.

10. Privacy and Security Incidents

If a privacy or security incident occurs, we will investigate it and provide notice to affected individuals, regulators or other parties where required by applicable law.

11. Children's Privacy

OLOS is intended only for individuals aged 18 or older.

We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from an individual under 18, we will take reasonable steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

We will post the revised version with an updated effective date. Where required by law, we will provide additional notice or obtain consent before making material changes to how we collect, use or disclose personal information.

13. Contact and Complaints

Questions, requests or complaints concerning this Privacy Policy or our privacy practices may be directed to:

Privacy Officer

OLOS Inc.

Email: hello@olosapp.com

We will investigate privacy complaints and respond within a reasonable period.