Privacy Policy

Last updated October 12, 2026

Palio uses the information you provide to deliver recovery tracking and, when you choose to use them, AI-powered insights. We do not sell personal information, use health information for advertising, or receive your payment-card details.

This Privacy Policy describes how Saif Khamis, doing business as Palio ("Palio," "we," "us," or "our"), collects, uses, discloses, and protects information when you use the Palio mobile application and related services (the "Services"). You can use tracking without enabling AI sharing. Contact us if you have questions about these practices.

1. Information we collect

Account information

We collect information used to create and manage your account, including your name, email address, authentication information, and an internal user identifier. If you sign in with Apple or Google, we receive the account information that provider makes available according to your choices.

Recovery, health, and fitness information

We collect information you enter into Palio, including injury type, injured side, optional surgery or injury date, recovery phase, range-of-motion readings and their method or position, symptom check-ins, mood, daily routine, custom exercises, exercises, sets, repetitions, weight, duration, workout dates, notes, pain and swelling ratings, post-workout check-ins, weekly goals, and calculated progress or symmetry measurements. This information may be considered sensitive health information.

User content

We process content you choose to provide, including workout and photo notes, questions sent to Ask Palio, and AI conversation history. Recovery records and AI conversations are saved with your account in Supabase. The following photo and device features have different storage behavior:

• Progress photo journal: photos and their dates, labels and notes are stored in Palio’s app storage on the phone where you save them. They do not sync to Palio’s cloud or go to an AI provider. Camera or photo-library access is used only for the capture or import you request. We remove supported embedded location and camera metadata from the saved journal copy.
• Photo-based angle estimates: a selected or captured image is used on the device to place landmarks and calculate an estimated angle. Palio saves the result and measurement context to your account, not the measurement image. Phone-sensor measurements use motion information on the device and save the estimated result and context.
• Older session-photo attachments: earlier versions supported photos attached to workout sessions and stored in Supabase. Existing attachments may remain until removed or your account is deleted. They are separate from the on-device progress journal.
• Device copies: your original photos remain in your system library or other locations. Palio’s app storage may be included in device backups. It is not a separately encrypted photo vault.

Palio does not enable Apple Health access in this release.

Purchases and communications

We receive information about purchase status and Palio Pro entitlement from Apple and RevenueCat. Purchase history and the internal account identifier are used for access, purchase restoration, fraud prevention and RevenueCat’s purchase-performance reporting. We do not send recovery records or journal photos to RevenueCat for those reports. Apple processes payment credentials; Palio does not receive your complete payment-card or bank-account information. We also process notification preferences and information needed to send account, security, and trial-related emails.

Technical information

Our service providers may process basic technical information needed to operate, secure, and troubleshoot the Services, such as request timestamps, AI usage-limit records, IP address, device or application information, and service logs. Palio does not use third-party advertising trackers.

2. How we use information

We use information to:

• create, authenticate, and maintain your account;
• store workout history and calculate progress, trends, and symmetry;
• provide reminders and post-workout check-ins when you explicitly enable them;
• generate reports and other features you request;
• verify purchases, restore access, and administer Palio Pro;
• provide support, service notices, security communications, and trial reminders;
• protect the Services, prevent misuse, comply with law, and resolve technical problems; and
• generate AI features as described below.

3. AI features and automated processing

Ask Palio and AI-generated weekly reviews are optional. Before a new AI request is sent, Palio asks for explicit permission to share relevant information with Anthropic. This can include your message, prior conversation turns, injury and recovery context, routine, goals, measurements, check-ins, pain or swelling, and exercise or workout history. The context depends on the question or review you request. Do not include information about another person without their permission.

Photos are not sent to Anthropic. When you ask about a progress-photo entry, Palio can share the dates and written notes you choose to attach. The AI cannot see the photo or assess visual changes, swelling or wound healing from it.

Questions, AI replies and reviews are saved with your account. Conversation-style preferences and the permission choice are stored per account on the device. You can turn off future AI sharing under More → Settings → AI sharing. Turning it off does not retract an already sent request or erase existing chats; you can delete chats or delete your account. A request already in progress may finish.

Anthropic processes requests through its commercial API. Its published API retention policy generally deletes inputs and outputs within 30 days, with exceptions for agreed arrangements, safety enforcement and legal requirements. We do not promise zero retention or use your logs to train a personalized AI model. Provider policies and the applicable commercial agreement govern that processing.

AI can make mistakes. Replies are educational support, not medical advice, diagnosis, treatment or clearance to return to sport. We do not use AI to make legally significant or medical decisions for you.

4. Service providers and disclosures

We disclose information only as needed to operate the Services, comply with law, protect rights and safety, or complete a business transaction. Our principal service providers are:

• Supabase — authentication, cloud recovery records, chats, server functions and legacy session-photo attachments;
• Anthropic — generation of optional AI responses and summaries;
• RevenueCat — purchase verification and entitlement management;
• Apple — App Store distribution, in-app purchases, and optional Sign in with Apple;
• Google — optional Google sign-in;
• Resend — delivery of account and service-related emails; and
• Cloudflare — hosting this website and legal pages.

We may also disclose information when required by law; to investigate fraud, abuse, or security incidents; to protect users or others; or in connection with a merger, financing, acquisition, or sale, subject to appropriate protections.

5. Legal bases and consent

Depending on where you live, we rely on your consent, performance of our agreement with you, our legitimate interests in operating and securing the Services, and compliance with legal obligations. You choose whether to enable AI sharing and device permissions. You can withdraw AI sharing in Palio’s Settings and change camera, photo-library, motion or notification access in your device settings. The affected feature may then be unavailable. A significant new use of sensitive information or new disclosure will require additional notice and consent where applicable.

6. Data retention and deletion

We generally retain account information, recovery records, photos, AI conversations, and summaries while your account remains active so we can provide the Services. Local journal photos, workout drafts, cached reviews and preferences can remain on your phone after sign-out. Removing Palio removes its local app storage, but not original photos, previously exported files or other copies. We may keep limited records longer when reasonably necessary for legal compliance, fraud prevention, dispute resolution, security, or enforcement of our agreements. Service-provider backups may take additional time to expire.

You may permanently delete your account inside Palio under More → Settings → Delete Account. The deletion flow removes legacy uploaded session photos before deleting your active account and its associated recovery records, chats and reviews. Palio also attempts to remove the deleted account’s journal photos, drafts, cached reviews and preferences from this phone. Failed journal cleanup is queued for retry and the app tells you if local cleanup needs attention. Deleting an account on one phone cannot erase files held on another phone, old backups, original system-library photos or reports you already shared. If local cleanup cannot complete, removing the app clears its app storage. Account deletion does not cancel an App Store subscription; cancel it separately in your Apple account settings. Limited legal or security retention and backup expiration may still apply. You may also request access, correction, or deletion by emailing [email protected].

Reports, sharing and reminders

When you export a report or share information, it is sent to the destination you select in the system share sheet. Palio deletes its temporary generated report copy after sharing finishes; recipients and your chosen destination may retain their copies. We cannot recall those copies. Reminders are scheduled locally after you opt in and may show recovery-related text on your lock screen. You control notification previews in your device settings.

7. Security and international processing

We use reasonable administrative, technical, and organizational safeguards, including authenticated access and access controls designed to limit users to their own records. No storage or transmission system can be guaranteed completely secure. Our providers may process information in Canada, the United States, or other jurisdictions where they operate, which may have different privacy laws than your jurisdiction.

8. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of personal information; withdraw consent; restrict or object to processing; or complain to a privacy regulator. We will not discriminate against you for exercising applicable privacy rights. Contact us using the address below. We may need to verify your identity before completing a request.

9. Children

Palio is not directed to children under 13, or under the minimum age required by applicable local law. We do not knowingly collect personal information from a child below that age. If you believe a child has provided information without appropriate authorization, contact us so we can investigate and delete it.

10. Health information and advertising

We do not sell personal information. We do not use or disclose health, fitness, recovery, photo, or AI-conversation information for targeted advertising, advertising measurement, or data-broker purposes.

11. Changes to this policy

We may update this policy when our practices or legal obligations change. We will update the date above and provide additional notice when required by law. Continued use after an update is governed by the revised policy.

12. Contact us

Saif Khamis, doing business as Palio
Toronto, Ontario, Canada
Email: [email protected]