Back to AYO

Privacy Policy

AYO Wellness Platform  ·  Effective Date: June 9, 2026  ·  Last Updated: June 9, 2026

Also see our usage terms:

Terms of Service →

AYO ("we," "us," or "our") is committed to protecting your privacy and handling your personal information with care, transparency, and respect. This Privacy Policy describes what data we collect, why we collect it, what we never collect, and how we protect and eventually discard it.

AYO is an adult-only platform. By accessing or using AYO, you confirm that you are at least 18 years of age. We reserve the right to request age verification at any time to ensure compliance with this requirement. If we determine that a user is under 18, that account will be immediately deactivated and any associated data deleted.

1. Data We Collect & Why

We collect only what is necessary to deliver a safe, personalized wellness experience.

Account & Identity

Full name and email address — Account creation, communication, and authentication (via Google OAuth or email).
Display name and profile preferences — Personalizing your in-app experience.
Account role (e.g., individual user, enterprise member, admin) — Access control and feature availability.

Wellness & Engagement Data

Daily mood logs (mood score, energy level, notes) — Providing personalized insights, trend analysis, and AI wellness support.
Journal entries — Private reflection storage; optionally used for AI-generated personal insights.
Meditation and audio session activity (session duration, completion, category) — Tracking wellness progress, awarding points, and improving recommendations.
Wellness challenges and streak records — Gamification, motivation, and progress tracking.
Circle and community participation (posts, reactions, discussion activity) — Community features and content moderation.
Support request interactions (anonymized where applicable) — Connecting users with peer supporters and AI check-ins.
AI coaching conversation history — Maintaining conversation context and enabling follow-up insights.

Enterprise Users (Institutional Accounts)

Organization ID and role within the organization — Granting appropriate access levels and generating anonymized team analytics.
Participation and engagement metrics — Aggregated (never individual) reporting for HR and organizational wellness dashboards.

Subscription & Billing

Email address (passed to Stripe) — Subscription processing.
Stripe Customer ID and Subscription ID — Managing your active plan, renewals, and cancellations.

Note: AYO does not directly process or store any payment card information. All payment processing is handled exclusively by Stripe, Inc. under their own PCI-compliant privacy and security policies.

Technical & Security Data

Browser type, device type, and operating system — Ensuring platform compatibility and security monitoring.
IP address (session-level only) — Fraud prevention, abuse detection, and rate limiting.
In-app usage patterns and feature interactions — Product improvement, crash diagnostics, and UX optimization.

2. Data We Do Not Collect

We are explicit about what we do not collect, because your trust depends on it:

  • ✕Social Security Numbers (SSNs) or any government-issued identification numbers
  • ✕Financial account numbers, bank account details, or credit/debit card numbers
  • ✕Precise real-time geolocation or GPS coordinates
  • ✕Phone contacts, SMS messages, or call logs
  • ✕Biometric data (fingerprints, facial recognition data, retinal scans)
  • ✕Medical records or formal clinical health diagnoses
  • ✕Data from minors (users under 18 years of age)
  • ✕Political or religious beliefs (unless voluntarily shared in community posts)
  • ✕Data from third-party data brokers or advertising networks

3. We Do Not Sell or Share Your Data

AYO does not sell, rent, trade, or share your personal data with any third party for advertising, marketing, or commercial purposes — ever.

The only circumstances under which data may be shared with third parties are:

  • →Stripe: Payment processing for subscriptions only. Stripe receives your email and processes payments under their own Privacy Policy.
  • →Legal obligations: If required by valid court order, subpoena, or applicable law, we may disclose data to comply — and will notify you to the extent permitted by law.
  • →Critical safety: If there is an imminent risk of harm to you or others, and only to the extent necessary to address that risk.

Enterprise organizations receive only anonymized, aggregated wellness metrics. Individual user data is never disclosed to employers or organizations.

4. Data Retention & Deletion

We retain your data only for as long as necessary for the purpose it was collected.

Active account data

Retained for the duration of your account.

Mood logs and wellness activity

Retained for up to 3 years to power long-term trend analysis. You may request deletion at any time.

Journal entries

Retained indefinitely while your account is active. Deleted within 30 days of account deletion.

AI conversation history

Retained for 12 months, then automatically purged.

Community posts and discussions

Retained while your account is active. You may delete your own posts at any time.

Session logs and IP addresses

Retained for up to 90 days for security purposes, then deleted.

Deleted accounts

All personal data is permanently deleted within 30 days of account deletion. Anonymized, non-identifiable aggregate data may be retained for analytics.

Billing records (via Stripe)

Retained for 7 years as required by financial regulations. AYO holds only the Stripe Customer ID and subscription status.

5. Data Security

We implement industry-standard security measures to protect your data, including encrypted data transmission (TLS/HTTPS), access controls limiting data access to authorized personnel only, regular security reviews, and secure cloud infrastructure.

No system is 100% impenetrable. In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws.

6. Your Rights

You have the right to:

  • ✓Access a copy of the personal data we hold about you
  • ✓Request correction of inaccurate data
  • ✓Request deletion of your account and associated data
  • ✓Withdraw consent for optional data processing (e.g., AI insights)
  • ✓Export your wellness data in a portable format
  • ✓Object to processing in certain circumstances

To exercise any of these rights, contact us at privacy@ayowellness.com. We will respond within 30 days.

7. Cookies & Tracking

AYO uses only essential session cookies required for authentication and security. We do not use third-party advertising cookies, tracking pixels, or behavioral analytics tools that profile you across other websites.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification and/or email at least 14 days before the changes take effect. Continued use of AYO after that date constitutes acceptance of the revised policy.

9. Contact Us

If you have questions, concerns, or requests related to your privacy, please contact our Privacy Team at: privacy@ayowellness.com

© 2026 AYO Wellness Platform. All rights reserved.