Data Privacy Policy

Effective Date: October 14, 2026
Controller: Novaire Capital Corporation
Contact: support@usehite.com

This policy supplements Hite’s Privacy Policy. It explains how the Hite app processes your growth profile, lifestyle information and AI requests, including information that may be consumer health data. Read it with our Terms of Service. Hite is a lifestyle and educational tool, not a medical service.

1. Information covered by this policy

We receive information you enter or choose to upload: birthdate or age, gender, height, weight, shoe size, parent heights, height measurements, nutrition and meal entries, sleep entries, exercise completion, meal photos and messages to Hite Bot. Predictions, consistency scores and insights derived from those inputs are also covered. An optional profile avatar is stored with your account.

Sources are you, your use of the app, and the calculations or AI processing used to provide the features you request. We do not collect precise GPS location. Device and app information, diagnostics and account identifiers are described separately in the Privacy Policy.

Before you create an account, onboarding information and app activity can be associated with an anonymous device identifier. Creating or signing into an account can link that information to your account. Not creating an account does not mean no data has been processed.

2. Why we process it

We use this information to provide height estimates, maintain your logs, show your progress, personalize your experience and generate requested AI responses and insights. Height estimates are statistical estimates, not clinical assessments or guaranteed outcomes.

We do not sell personal information or use your health-related profile, logs, photos or predictions for advertising. The app’s install attribution and product analytics are described in the Privacy Policy; the marketing website does not set cookies or run analytics or advertising scripts.

3. AI processing and consent

AI processing occurs after you grant the app’s AI data consent. Requests go through Hite’s server-side proxy to OpenRouter, which routes them to model providers such as OpenAI.

• Food scanner: The meal photo you submit is used to identify food and estimate portions. Meal photos are processed in real time and are not retained by Hite as stored meal images. Saved food entries and estimated nutrition values remain part of your logs.
• Hite Bot: The message you send and relevant growth-profile information, such as age, height and lifestyle context, are sent for response generation.
• Insights: Relevant profile and lifestyle-log information may be used to generate personalized summaries and recommendations.

Under our processing arrangements, AI inputs are used to return results and not to train third-party models. This is not a promise that the entire service has no logs or backups; the retention provisions below and in the Privacy Policy still apply. AI can make mistakes. Do not rely on it for medical decisions, allergy safety or precise dietary management.

In Hite Settings → AI Data Processing, you can review the consent information. Use Revoke AI Consent in Settings to withdraw it. AI-dependent features stop working after withdrawal. Withdrawal does not reverse processing already performed or automatically delete your account; see Delete Your Data.

4. Service providers and recipients

The categories of data are shared only as needed for the service each provider supplies:

We do not collect Apple’s IDFA. Additional disclosures required by law, for security, or in a business transaction are described in the Privacy Policy. Any transfer in a merger or sale remains subject to its commitments; it does not permit an unrestricted sale of health information.

5. Security, storage and retention

We use encrypted transport, authentication, access controls and other safeguards described in the Privacy Policy. No system is guaranteed completely secure. Our providers may process information in the United States and other countries, with the transfer safeguards described in that policy.

We retain account data while the account is active and as needed for service operation, legal obligations, security and dispute resolution. Following account deletion, personal data is deleted or de-identified within 30 days, with encrypted backups purged within 90 days, subject to the limited legal and security exceptions in the Privacy Policy. These are the existing Hite policy periods, not a promise that every independent Apple purchase record is deleted.

6. Your choices and rights

Depending on applicable law, you may request access, correction, portability, deletion, restriction of processing, or withdrawal of consent. Email support@usehite.com from your account address and explain your request. We verify identity before disclosing or deleting account information and respond within the period required by applicable law. An authorized agent may act with proof of authorization. We do not discriminate against you for exercising your rights.

For consumer health data covered by Washington’s My Health My Data Act or similar laws, you may request confirmation of collection or sharing, access, withdrawal of consent and deletion. We collect and share this data with processors to provide the features described above, with your consent where required. We do not sell it. If we deny a request, reply to appeal; if an appeal is denied, you can contact your state Attorney General. Other applicable regulator and complaint rights are explained in the Privacy Policy.

7. Children and updates

Hite is for people 13 and older. Minors need a parent or guardian’s agreement and guidance. If a parent believes a child under 13 has provided information, contact us to request deletion. We update this page when relevant practices change and provide notice of material changes as described in the Privacy Policy.

For questions, contact Novaire Capital Corporation at support@usehite.com.