Orion Privacy Policy

Stelr Labs, LLC
Effective date: September 30, 2026
Last updated: September 30, 2026

Who we are and what this policy covers

This Privacy Policy explains how Stelr Labs, LLC ("Stelr Labs," "we," "us") collects, uses, shares, stores and deletes personal information when you use Orion, our workout app for iPhone and Apple Watch, including the Orion AI Coach, and the services that support it (together, the "Services").

Stelr Labs, LLC, based in Spokane, Washington, United States, is the controller of your personal information.

Privacy contact: privacy@stelrlabs.com. Our Privacy Officer can be reached at this address for any privacy question, request or complaint, including as the person in charge of the protection of personal information for Québec.

If you are a resident of Washington or Nevada, please also read our Consumer Health Data Privacy Policy (https://www.stelrlabs.com/consumer-health-data.html).

Summary of key points

Information we collect

Information you give us

Account information. You create an account with Sign in with Apple or Google Sign-In. We do not offer password accounts or other social logins, and we do not collect passwords.

We also create an Orion account ID and an internal username based on your email address. The internal username is not shown to other users.

Profile. Your name, an optional profile photo, and optional Instagram, Snapchat and X handles. Adding a handle does not connect Orion to those accounts, and we receive no data from those platforms.

Workouts. The workouts, routines and exercises you log: exercise names (including custom exercises), sets, weights, reps, times, distances, notes, captions, workout names and effort ratings. For outdoor workouts this also includes workout type, distance, pace, splits, elevation gain, step count and active duration.

Photos. Photos you attach to a workout and your profile photo. Progress photos you take to track your physical progress are stored on your device and in your own private iCloud account, and we never receive them.

AI Coach profile. If you set up the AI Coach: your goals, date of birth, gender, height, weight, training experience, training days, session length, available equipment, favorite exercises, focus areas, and any injuries or limitations you select or describe.

Groups and social activity. Groups you create or join, your role in them, and the likes and comments you post.

Subscriptions. If you subscribe, the App Store handles payment. We receive your subscription status, not your payment details (see "Subscriptions").

Support and feedback. What you send through Settings > Feedback / Support, including any screenshot you attach.

Information from your device, with your permission

Orion asks through standard iOS prompts, and you can change each permission at any time in iOS Settings.

Is providing information required?

An account requires an email address, which Sign in with Apple or Google provides. Everything else is optional. If you don't provide an item, only the feature that needs it won't work.

Information collected automatically

Information we receive from others

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information we generate

Sensitive information

Some of the information we process is considered sensitive in many places:

  1. Health and fitness information:
    • Apple Health data you allow Orion to read (see "Apple Health"). For the AI Coach, Apple Health metrics are summarized on your device, and only the summary is sent.
    • Heart rate saved with the routes of outdoor workouts you record on your iPhone.
    • The workouts you log or import, including effort ratings, step counts and notes.
    • Injuries, height and weight you enter in the AI Coach.
  2. Precise location: GPS during outdoor workouts, and the coordinates recorded when you save a workout (see "Location").
  3. Photos of you: your profile photo and workout photos. Progress photos stay on your device and in your own private iCloud account.
  4. Date of birth and gender, if you complete the AI Coach profile.

How we handle it:

Apple Health

With your permission, Orion writes workouts you record to Apple Health, including routes, heart rate, active energy and distance.

With your permission, Orion reads from Apple Health:

Workouts imported from Apple Health. When the "Show Apple Health Workouts" setting is on, which it is by default, Orion imports workouts that other apps saved to Apple Health: type, times, duration, distance and elevation. Imported workouts are handled like your other workouts:

Turning the setting off hides imported workouts in the app, but does not delete them from our servers or from group feeds. To remove one, delete it in the app.

You can change or revoke Apple Health access at any time in iOS Settings > Privacy & Security > Health > Orion. Workouts Orion saved to Apple Health stay there until you delete them in Apple Health.

Location

During outdoor workouts. If you allow location access, Orion uses your device's precise GPS while you record an outdoor workout, including when the app is in the background or your screen is locked. It uses this to measure distance, pace, splits, elevation and your route. Your route is saved with the workout in your Orion account on our servers, so it is available on all your devices, and, if Apple Health access is on, in Apple Health. The copy on our servers also includes your heart rate at each point along the route, read from Apple Health. Outdoor recording requires location access; logging gym workouts does not.

Workout location for every saved workout. If location access is allowed when you save any workout, gym or outdoor, Orion records:

This is stored with the workout in your Orion account on our servers, and included in the workout history the AI Coach uses (see "AI Coach").

What group members see. When any workout, gym or outdoor, is shared with your groups, members see where it happened as a place name: the city, region and country, or the venue name you typed. They don't see the exact map coordinate. For outdoor workouts, they also see a map of your route, which can show where you started and finished, but not the heart rate saved with it. To keep a workout's location and route to yourself, set that workout to "Only me", or change your default workout visibility in Settings.

To stop Orion recording workout location, turn off location access in iOS Settings > Privacy & Security > Location Services > Orion. Location data already stored stays with those workouts until you delete the workout or your account.

Share images. If you create a share image for an outdoor workout, it can include a map of your route. The image is made on your device, and it goes only where you choose to share or save it. To draw the map, Apple Maps receives the area your route covers.

AI Coach

The AI Coach is part of Orion Premium and uses AI models to create a weekly training plan. You can request a plan yourself, and by default one is created automatically at the start of each week. Turn this off in Settings > Auto-Generate Weekly Plan.

What we send. When a plan is created, the app sends our coach service (which runs on Amazon Web Services in the United States):

Who creates your plan. Our coach service sends this information to a third-party AI model provider that acts as our service provider, under contract, to create your plan. That includes your age, gender, height, weight, goals, injuries and injury notes, workout history and readiness assessment. The provider may process requests outside the United States. You can ask us at privacy@stelrlabs.com for the names of the providers that receive your information.

We use AI model providers only under business terms that allow them to use your information just to process our requests and keep their service secure, and that prohibit them from using it to train their AI models. We don't use your information to train AI models.

Automated assessments. Our service works out a recovery "readiness" rating from your health summary, and an AI model estimates how consistently you've been training. These only adjust the amount and intensity of your plan. They are not used for anything else, and they have no legal or similarly significant effect on you. You can ignore, change or regenerate any plan, and stop using the AI Coach at any time.

Your choices. Health summaries are sent only if you connected Apple Health during AI Coach setup. To stop them, turn off Orion's Apple Health access in iOS Settings > Privacy & Security > Health > Orion.

What we store. Your AI Coach profile is stored on our servers so it's available on all your devices. The health summary and workout history sent for a plan are not stored after the plan is created, and your plan is saved in your Orion account. Our coach service logs record your account ID, each request, and the readiness rating with its notes, which can include health values (see "How long we keep information").

Not medical advice. AI Coach plans are general fitness suggestions, not medical advice. Talk to a qualified professional before training with an injury or health condition.

Photos

Subscriptions

Orion Premium is bought and billed through Apple's App Store. We never receive your card number or billing details. From Apple we receive and store:

We use this to unlock Premium features and to prevent the same subscription from being claimed by more than one account. We link purchases to your Orion account with a pseudonymous identifier derived from your account ID, which Apple stores with the purchase.

We also record purchase events in our analytics, linked to your account: product, price, currency, trial or renewal status and offer type. Meta's SDK may also log purchase events automatically.

Apple's privacy policy: https://www.apple.com/legal/privacy/

Groups and social features

When you create or join a group, all members of that group can see:

Your weekly count includes every workout you log, including workouts set to "Only me". When you log any workout, group members may get a notification with your name and your progress toward the group's weekly goal.

Workouts set to "My groups". This is the default for new workouts, including those recorded on Apple Watch or imported from Apple Health. You can change the default in Settings, and change any individual workout. Members of all your groups can see these workouts:

Members don't see your notes, effort ratings, step counts or heart rate. A member who joins later can see your earlier "My groups" workouts. Members who can see a workout can like and comment on it, and see its likes and comments.

Invite links. Anyone you send an invite link to can, after signing in, see the group's name and goal, and its members' names, photos, social handles and weekly workout counts, before joining. Invite links expire after 3 days.

Notifications. If you allow notifications, we store your device's push token and send notifications through Apple's Push Notification service when a group member completes a workout or joins, or when someone likes or comments on your workout. Comment text isn't included in notifications. You can turn off "Group Workouts" and "Likes & Comments" notifications in the app's Settings, and all Orion notifications in iOS Settings. Workout reminders and rest timers are scheduled on your device and don't use your push token.

You can leave a group, change a workout's visibility, delete your own comments and comments on your workouts, and remove your photo and handles at any time.

Support and bug reports

We use Shake for crash reports and feedback. Shake receives your email address, your name and your Orion account ID, plus app and device details, with every report. Reports are sent:

We don't send marketing emails. If you email us, we use your message and email address to respond.

Analytics, bug reporting and advertising SDKs

The Orion app doesn't use browser cookies and doesn't show ads. It includes these third-party software development kits (SDKs):

PostHog (product analytics and error reporting)

Runs on iPhone and Apple Watch, hosted in the United States. PostHog receives:

PostHog doesn't receive Apple Health values, workout coordinates, photos or workout notes.

Shake (crash and bug reporting)

Runs on iPhone. See "Support and bug reports".

Meta (Facebook SDK)

Orion includes Meta Platforms' SDK, which helps us measure how people find and install Orion, such as which ads led to an install. When you use the app, the SDK automatically sends Meta: app install and open events, how long the app is used, a Meta-generated app identifier, device and app information (such as device model, operating system, app version, language and time zone) and your IP address. It may also send subscription purchase events.

We don't send Meta your name, email address, workouts, health information, location or photos. Orion doesn't ask for permission to track you across other companies' apps and websites, so the SDK doesn't receive your device's advertising identifier.

Meta uses this information under its own privacy policy, including to measure and improve ads: https://www.facebook.com/privacy/policy. You can review and disconnect the activity apps share with Meta in your Meta account, under "Your activity off Meta technologies".

Who we share information with

Sale and "sharing" of personal information

We don't sell personal information for money, and we don't disclose it to third parties for their own direct marketing. California residents may ask about this at privacy@stelrlabs.com.

Under some US state laws, making information available to Meta through its SDK for advertising measurement (see "Meta (Facebook SDK)") may be considered "sharing" personal information for cross-context behavioral advertising. The categories involved are identifiers (such as IP address and device information), app activity, and commercial information (subscription purchase events). We don't otherwise sell or share personal information, and we don't knowingly sell or share the information of anyone under 18.

Do Not Track. There is no agreed standard for browser "Do Not Track" signals, so we don't respond to them. The Orion app isn't a web browser and doesn't receive Global Privacy Control signals.

How we use information

We use personal information to:

We don't use your information to make decisions that have legal or similarly significant effects on you.

We don't use personal information to train large language models.

PurposeLegal basis
Your account; storing and syncing workouts, photos and settings; groups, likes, comments and notifications; subscriptions; recording outdoor workouts; creating AI Coach plansPerformance of our contract with you
Health information: Apple Health data, AI Coach injuries, height and weight, and the AI Coach health summaryYour explicit consent, given through the iOS Apple Health permission and when you choose to enter it
Workout location taggingYour consent, given through the iOS location permission
Security, server logs, crash and error reports, product analyticsOur legitimate interests in keeping Orion secure, reliable and improving
Measuring how people find and install Orion (Meta SDK)Our legitimate interests in understanding our marketing
Legal requests and legal claimsLegal obligation, or our legitimate interests (and, for health data, establishing or defending legal claims)

Your right to object. Where we rely on legitimate interests, you can object at any time, on grounds relating to your situation, by emailing privacy@stelrlabs.com. We'll stop unless we have compelling legitimate grounds, or need the information for legal claims.

Withdrawing consent. You can withdraw consent at any time by turning off the permission in iOS Settings or by deleting the information in the app. Withdrawing doesn't affect processing that happened before.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy:

When you delete your account, we delete your personal information promptly, within the time required by applicable law, and ask our service providers to delete it, except where we need to keep it as described above, or to comply with the law, resolve disputes or enforce our terms.

International transfers

Stelr Labs is based in the United States, and we store and process your information in the United States. Some of our service providers, including our AI model provider, may process information in other countries.

If you use Orion from outside the United States, including from the EEA, UK, Switzerland, Canada (including Québec) or other countries, your information is sent to and processed in the United States, where data protection laws may differ from those where you live. Where the law requires it, we use contractual safeguards with our service providers, such as standard contractual clauses. We protect your information as described in this policy wherever it is processed.

Your choices and controls

Deleting your account

You can delete your account at any time in the app, in Settings > Account > Delete, or by emailing privacy@stelrlabs.com. We then delete your personal information as described in "How long we keep information".

Some things are under your own control and aren't deleted with your Orion account:

Signing out is different from deleting your account: it removes your data from that device but keeps it in your account.

Your privacy rights

Wherever you live, you can view and edit your profile and delete your account in the app. Depending on where you live, you may also have the right to:

We won't discriminate against you for using these rights.

How to make a request. Email privacy@stelrlabs.com. You can also delete your account in the app. Requests are free, unless they are clearly unfounded or excessive. We respond within the time required by applicable law, and we'll tell you if we need more time.

Verification. We verify requests by confirming that you control the email address on your Orion account. If you use Apple's "Hide My Email", write from that relay address or tell us, and we'll find another way to verify you. An authorized agent may make a request for you with your signed permission, and we may ask you to confirm your identity directly.

If we decline. We'll tell you why. You can appeal by emailing privacy@stelrlabs.com with the subject "Privacy Appeal", and we'll respond in writing within the time required by law. If we deny your appeal, you can contact your state Attorney General.

Complaints. You can complain to the data protection authority where you live, such as your national authority in the EEA, the Information Commissioner's Office in the UK, or the Office of the Privacy Commissioner of Canada.

US state privacy disclosures

This section gives the disclosures required by the California Consumer Privacy Act and other US state privacy laws. In the last 12 months we have collected these categories of personal information:

CategoryExamplesCollectedDisclosed for a business purpose toSold or shared
IdentifiersName, email, account ID, Apple or Google account ID, IP address, device and push identifiers, social handlesYesService providers, Apple, Google, other users (name and handles)Shared with Meta (IP address, device identifiers)
Customer recordsName, emailYesService providersNo
Protected characteristicsAge and gender (AI Coach)YesService providers, AI model providerNo
Commercial informationSubscription status and purchase eventsYesService providersShared with Meta (purchase events)
Biometric informationHealth and exercise data, such as workouts, heart rate, heart-rate variability and sleepYesService providers, AI model provider (workouts and a readiness assessment), other users (workouts)No
Internet or app activityHow you use the app, errorsYesService providersShared with Meta (app events)
GeolocationPrecise workout location and routesYesService providers, Apple (to look up place names), AI model provider, other users (place names and routes)No
Audio or visualProfile and workout photos, screenshots in bug reportsYesService providers, other usersNo
Professional or education—No——
InferencesAI Coach plans and readiness assessmentsYesService providers, AI model providerNo
Sensitive personal informationHealth information, precise geolocationYesAs aboveNo

Sources, purposes and retention are described in "Information we collect", "How we use information" and "How long we keep information". We use sensitive personal information only as necessary to provide the Services you request and as otherwise permitted by law.

Children

Orion is for people 18 and older. We don't knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we'll delete the account and its personal information. If you believe someone under 18 has given us information, contact privacy@stelrlabs.com.

Security

We use technical and organizational measures designed to protect your information, including encryption in transit between the app and our servers, encryption at rest by our hosting and storage providers, access tokens that expire, time-limited links for photos, and secure storage of sign-in credentials on your device.

No system is completely secure, and we can't guarantee that unauthorized parties will never defeat our security measures. You can help protect your account by keeping your device's software up to date and using a device passcode.

Region-specific information

Washington and Nevada. See our Consumer Health Data Privacy Policy (https://www.stelrlabs.com/consumer-health-data.html).

Canada and Québec. Our Privacy Officer, reachable at privacy@stelrlabs.com, is responsible for your personal information. Your information is stored and processed outside Canada, mainly in the United States, and may be accessible to courts and authorities there. Orion uses technology that can locate you (device location, only if you allow it) and technology that profiles your training readiness and consistency (only if you use the AI Coach). Both are off unless you turn them on.

Brazil. You have the rights described in "Your privacy rights", including information about the entities we share data with, and the right to petition the National Data Protection Authority (ANPD). Contact us at privacy@stelrlabs.com.

Australia. We disclose personal information to recipients in the United States and other countries where our service providers operate. You can send complaints about how we handle your information to privacy@stelrlabs.com; if you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

Japan. Personal information is transferred to the United States and other countries. You can find information about those countries' personal information protection systems on the Personal Information Protection Commission's website. Our security measures are summarized in "Security".

Other countries. Wherever you live, you can contact us to exercise the rights your local law provides, and we'll respond as that law requires.

Changes to this policy

We update this policy when our practices change. The date at the top shows when it last changed. If we make material changes, we'll notify you as required by applicable law, such as through the app or on our website. Before we use health or other sensitive information for a new purpose, we'll ask for your consent.

Contact us

Stelr Labs, LLC, Spokane, Washington, United States
privacy@stelrlabs.com