Legal
The short version
Lō is a personal wellness app. You enter health and wellness information to help you understand and track what is happening for you. We store it securely and we don’t sell it or use it for advertising.
Some Lō features use artificial intelligence. With your permission, relevant information is sent to our AI providers, Anthropic and OpenAI, to create those features. We also use a small number of service providers to operate Lō.
You can change your permissions, access your information and delete your account.
Lō is not a medical device or healthcare provider. The information and tracking tools in Lō are for personal wellness and education purposes only. Nothing in Lō constitutes medical advice, diagnosis or treatment. Always consult a qualified healthcare provider for medical concerns.
Lō is a personal wellness application operated by Lo Health LLC (“we”, “us” or “our”), a California limited liability company.
Our website is joinlo.co and our app is at app.joinlo.co.
If you have questions about this Privacy Policy or how we handle your data, contact us at support@joinlo.co.
Lo Health LLC is registered as a data controller with the UK Information Commissioner’s Office (ICO). ICO registration number: ZC171013.
Depending on how you use Lō, we may collect:
Account information: your name, email address and account credentials.
Health and wellness information: your date of birth, height, weight, target weight, menopause life stage, symptoms, check-ins, goals, activity, nutrition, medications, supplements, hormone therapy information, training information, lab results and other health information you choose to enter.
Optional information: information such as your ethnic background, where you choose to provide it. We use this to improve the relevance of your experience. Providing it is optional and you can withdraw your consent at any time.
Information you upload or scan: such as lab reports and photos of supplement or nutrition labels. We process these to provide the feature you requested. We do not keep the original lab report or label photo after it has been processed, although information extracted from it may be saved in your Lō record.
Ask Lō and other content: questions you ask, answers you receive and other information you choose to write in Lō.
Wearable data: if you connect a supported wearable such as an Oura Ring, we may receive information including sleep, activity, readiness, heart rate, heart rate variability, blood oxygen, stress and temperature data.
Subscription and billing information: information about your subscription, billing status, country and payment periods. Payment card details are handled by our payment provider and do not reach Lō.
Communications and preferences: messages you send us and your communication preferences.
Permissions: records of the permissions and consents you give or withdraw.
Technical information: information such as your IP address, device, operating system and browser, where needed to operate and secure Lō. Where you use Lō as an Android app, this includes your device type and operating system version.
We do not collect your precise GPS location, contacts or microphone. We use your camera only when you choose to use a feature that requires it.
Health information and some other information you provide may be classified as sensitive personal information under applicable privacy laws. We apply the protections described in this policy to that information.
We use your information to:
We do not sell your personal information.
We do not use your personal information for advertising or build advertising profiles about you.
We do not use your personal information to train AI models.
We use service providers to operate Lō. They receive information only where needed to provide their services to us.
Lō uses Anthropic and OpenAI to provide AI-powered features. We send information to them only when you have given permission for AI processing and only as needed to provide the feature you are using.
Depending on the feature, Anthropic may receive health and wellness information from your Lō record and information you upload or scan. If you upload a lab report, the whole report is processed, including information printed on it. Lō does not intentionally add your name, email address, date of birth or payment details to information sent to Anthropic or OpenAI, although information you type yourself or information contained in an uploaded document may include identifying information.
Depending on the feature, OpenAI may receive information such as questions you ask Ask Lō and relevant information from your Lō record.
Under the business terms we use with our AI providers, information submitted through Lō is not used to train their AI models.
Under their terms for the API services Lō uses, Anthropic automatically deletes standard API inputs and outputs from its systems within 30 days, and OpenAI may retain API inputs and outputs in abuse-monitoring logs for up to 30 days. In each case, those terms allow information to be retained for longer where required by law or where necessary to investigate or address misuse or security issues. Certain API features can have different retention periods; Lō does not use those features to store your health information.
We also use providers for services such as hosting and data storage, payments, background processing, email delivery, authentication and security, error monitoring, website operation and analytics.
These providers may process information where necessary to perform their services for us and are subject to contractual and legal obligations governing that processing.
If you connect a third-party service such as Oura, information may also be exchanged with that service as necessary to provide the connection you requested.
Where Lō is available as an app on Google Play, Google handles the download under its own privacy policy. Lō sends Google none of the information you enter in Lō.
If you create a shareable feature, such as a Dr. Prep share link, anyone you choose to give that link to may be able to view the information you shared.
We may also disclose information where required by law or valid legal process.
We use technical and organisational measures designed to protect your information, including access controls, encryption in transit, secure authentication and controls over administrative access.
Access to personal information is limited to people and service providers who need it to operate, support or secure Lō.
No system can be guaranteed to be completely secure. If you believe you have found a security vulnerability, contact us at support@joinlo.co.
Depending on where you live, you may have rights over your personal information.
You can access and update much of your information directly in Lō. You can also ask us for a copy of your information, ask us to correct it, or request deletion by contacting support@joinlo.co.
You can delete your Lō account in the app. We delete personal information associated with the account subject to information we must retain for legal, regulatory, security or transaction-record purposes.
You can change or withdraw permissions you have given us. If you withdraw permission to process your health information or to use AI, features that require that permission will stop working. You can still access and export information already held in Lō.
If you have a paid subscription, withdrawing a permission required to provide Lō will cancel renewal of your subscription at the end of your current paid period. Turning the permission back on does not automatically restart future billing.
You can also manage your email preferences in Lō.
If UK GDPR or EU GDPR applies to you, your rights may include access, correction, deletion, portability, restriction of processing and objection to certain processing.
You also have the right to complain to the ICO in the United Kingdom or your local data protection authority in the European Union.
Lō’s AI features provide information to help you make your own choices. They are not used to make automated decisions about you that have legal or similarly significant effects.
Additional privacy rights may apply depending on where you live. Section 13 describes rights relating to consumer health data, including rights under Washington and Nevada law.
You can contact support@joinlo.co to exercise your rights.
Lo Health LLC is based in the United States and our service providers may process information in the United States and other countries.
If you use Lō outside the United States, your information may therefore be transferred internationally.
Where applicable law requires safeguards for an international transfer, we use recognised transfer mechanisms or contractual safeguards provided by our service providers.
Lo Health LLC is registered with the UK Information Commissioner’s Office as a data controller under registration number ZC171013.
Information you enter into Lō may include health information that receives additional protection under privacy laws, including special category data under UK and EU GDPR.
Where UK or EU GDPR applies, we process personal information as necessary to provide the service you request and process health information with your explicit consent where required.
Permission to process health information and permission to use AI are requested separately in Lō.
You can withdraw either permission at any time. Withdrawal does not affect processing that lawfully took place before you withdrew it.
If you withdraw permission to process your health information, you can still access, export or delete information already in Lō, but Lō will stop collecting or processing new health information where that permission is required.
We do not sell health information or share it for advertising or marketing purposes.
We keep your personal information while your account is open and for as long as we need it to provide Lō.
When you delete your account, we delete your personal information within 30 days, except for limited records that we need to keep for legal, regulatory, transaction or record-keeping purposes.
Subscription and renewal records. We retain the record of the subscription and automatic-renewal terms you agreed to for the period required by applicable law. This record may include the terms you were shown, your price, any discount, billing country and an account or transaction identifier. It does not contain your health information.
Payment records. We may retain limited payment and transaction records where needed for accounting, tax, fraud prevention, dispute resolution or other legal obligations. Payment providers may also retain their own transaction records under their legal obligations and privacy policies.
Account closure records. After your account is closed, we may retain de-identified information such as the dates the account was opened and closed, country and how the account was closed. We use this for business reporting and to understand account activity. This record does not contain your name, email address, health information or account identifier.
Under their terms for the standard API services we use, information sent to Anthropic and OpenAI is ordinarily deleted from their systems within 30 days, subject to the legal, security and misuse exceptions described in section 04.
We regularly review the information we retain and delete or de-identify it when it is no longer needed for the purpose for which it was retained.
Lō is intended for adults aged 18 and over.
We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact support@joinlo.co.
Lō uses cookies and similar technologies where necessary to provide and secure the service.
We do not use advertising cookies or tracking technologies to follow you across other websites for advertising purposes.
Where Lō is available as an Android app, it does not collect your device’s advertising identifier and contains no advertising or tracking code.
We may use privacy-focused analytics to understand how our website and service are used and to improve them.
We may update this Privacy Policy as Lō develops or where legal requirements change.
We will update the effective date when we do. If a change materially affects how we use your personal information, we will provide appropriate notice.
Where a change requires new consent, we will ask for it rather than treating continued use of Lō as consent.
This section is our consumer health data privacy policy under applicable consumer health privacy laws, including Washington’s My Health My Data Act and Nevada’s consumer health data law.
We collect the health and wellness information you choose to enter or connect to Lō. The categories include:
We may also create consumer health data from information you provide, such as a protocol, lab summary, training plan, Dr. Prep brief or other personalised insight.
Consumer health data comes from:
We collect and use consumer health data to provide the Lō service you request.
This includes tracking information and showing it back to you, calculating targets, personalising your experience and creating features such as protocols, training plans, lab summaries, Dr. Prep briefs and Ask Lō answers.
We also process consumer health data where necessary to operate, secure and support those features.
We do not sell consumer health data or use it for advertising.
We disclose consumer health data only where necessary to provide or operate Lō, where you have asked us to share it, or where disclosure is required by law.
The categories of consumer health data disclosed may include the health and wellness information listed above, depending on the service or feature involved.
The categories of recipients are:
AI providers, with your permission. Anthropic may receive health and wellness information relevant to the feature you are using, photos of labels and lab reports you upload. OpenAI may receive information such as questions you ask Ask Lō and relevant information from your Lō record. Section 04 explains this processing in more detail.
Hosting and data-storage providers. These providers store and process Lō data on our behalf.
Processing providers. Providers that perform technical processing needed to create or operate Lō features may receive the information needed to perform that task.
Communication providers. Providers that deliver service communications may receive limited information needed to send those communications.
We have no affiliates with which we share consumer health data.
If you create a shareable feature such as a Dr. Prep share link, anyone you deliberately give that link to may be able to view the information you shared.
We may also disclose consumer health data where required by law.
We do not sell consumer health data or use advertising or cross-site tracking technologies to build advertising profiles from it.
Depending on the law that applies to you, you may have the right to:
You can see much of your consumer health data directly in Lō.
You can make a privacy request by emailing support@joinlo.co from the email address associated with your account. We may take reasonable steps to verify your identity before acting on a request.
We will respond without undue delay and within 45 days of receiving your request. Where permitted by law and reasonably necessary because of the complexity or number of requests, we may extend this once by up to another 45 days. If we do, we will tell you within the first 45 days and explain why.
If you request deletion, we will delete consumer health data as required by applicable law and notify processors and other recipients where the law requires us to do so. Information held in archived or backup systems may take longer to delete where applicable law permits this.
If we decline to act on your request, you can appeal by emailing support@joinlo.co with Appeal in the subject line.
We will respond to your appeal in writing within 45 days and explain what action we have taken and why.
If we deny your appeal, we will provide information about how you can contact the relevant Attorney General or other regulator where applicable.
We will tell you about material changes to this consumer health data policy as required by applicable law.
Where a change requires new consent, we will ask for it rather than relying on your continued use of Lō.
This section takes effect on 30 September 2026.