Skip to content

Privacy Policy (Hite)

Effective Date: October 14, 2026
Contact: support@usehite.com

This Privacy Policy explains how Novaire Capital Corporation ("Hite," "we," "us," or "our") collects, uses, shares, and protects information when you use the Hite mobile application and related services (collectively, the "Service"). Novaire Capital Corporation is the data controller for the personal data described here.

Important: Hite is a lifestyle and educational tool. It is not a medical device and does not provide medical diagnosis or treatment.

This Privacy Policy is incorporated into and forms part of our Terms of Service (https://usehite.com/terms). The disclaimers of warranties and limitations of liability in the Terms of Service apply to this policy and to our handling of your data to the maximum extent permitted by law.

1. Summary of Key Points

  • What we collect: Account info (email), profile data you provide (e.g., height, weight, birthdate, gender, parent heights), lifestyle logs (sleep, nutrition, exercise, height entries), and technical data (device/app diagnostics).
  • Photos: Meal photos you submit are sent to our AI provider for food identification and portion estimation and are processed in real time — not retained as stored images. An optional avatar photo you upload is stored with your account until you replace it or delete your account.
  • AI coach (Hite Bot): Questions you send, along with a snapshot of your growth profile, are sent to our AI provider to generate responses.
  • Third parties: We use Supabase (database/auth/storage), OpenRouter → OpenAI (AI processing), RevenueCat (subscriptions), Sentry (crash/error reporting), PostHog (product analytics), and Singular with Apple's SKAdNetwork (install and marketing attribution).
  • No selling: We do not sell your personal information, and we do not use your health-related data for advertising.
  • Age: The Service is for users 13 and older.
  • Control: Use Settings to manage your profile, AI consent and deletion. Request access to or an export of your data by emailing support@usehite.com.

2. Information We Collect

2.1 Information You Provide

  • Account information: Email address and authentication identity (email/password via our authentication provider, Sign in with Apple, or Sign in with Google).
  • Profile information: Birthdate, gender, height, weight, shoe size, parent heights, and other growth-related inputs collected during onboarding or later.
  • Lifestyle logs: Height entries, sleep entries (hours, bedtime/wake time, quality), exercise completion, and nutrition entries.
  • Photos: Meal photos you choose to submit for food identification, an optional avatar photo, and any other photo a feature explicitly requests.
  • AI coach messages: The questions and messages you type to Hite Bot.
  • Communications: Messages you send to support or feedback channels.

2.2 Information Generated by Your Use

  • Predictions and derived insights: Height prediction outputs and confidence ranges, scores (e.g., sleep and lifestyle scores), weekly AI insights, and trend analytics generated from your inputs.
  • Preferences: Settings, units, reminders, and feature preferences.

2.3 Information Collected Automatically

  • Device and app information: Device model, OS version, app version, language, and similar metadata.
  • Diagnostics and crash data: Error logs, performance metrics, and crash reports (via Sentry).
  • Usage and product analytics: Screens viewed, features used, and in-app events, collected via PostHog, keyed to a user or anonymous device identifier (not your email address).
  • Marketing attribution data: Device identifiers (such as Apple's identifier-for-vendor and a Singular-assigned ID), install source, and in-app events (including subscription events), collected via Singular and Apple's privacy-preserving SKAdNetwork to measure our advertising. We do not present an App Tracking Transparency prompt and do not collect Apple's advertising identifier (IDFA).
  • Approximate location (inferred): We may infer region/country from IP address when requests reach our servers (for security, rate limiting, and compliance). We do not collect precise GPS location.

2.4 Information Collected Before You Create an Account

You can complete onboarding and purchase a subscription before creating an account. During that stage, your onboarding answers and app activity are associated with a device-local anonymous identifier — not your name or email. When you create an account or sign in, that information is linked to your account so your experience and subscription carry over. If you never create an account, the data remains associated only with the anonymous identifier.

3. How We Use Information

We use information to: provide the Service (accounts, sync, logs, calculations, insights); personalize your experience (predictions, recommendations, summaries); operate AI features (food identification and portion estimation, growth insights, and Hite Bot responses); maintain safety and security (fraud and abuse prevention, rate limits, account security); improve the Service (debugging, product analytics, feature development); measure our own advertising (install attribution — never using your health data); respond to support requests; and comply with legal obligations. We do not use your health-related data (profile, logs, photos, predictions) for advertising or sell it to anyone.

4. How AI Features and Photos Are Handled

All AI requests are routed through our secure server-side proxy — your device does not contact AI providers directly, and our API keys and your account identity are not exposed to them.

  • Food scanner: Meal photos are transmitted over encrypted channels, processed in real time to identify foods and estimate portions, and are not retained as stored images. Nutrition figures are sourced from structured databases (such as USDA FoodData Central) where possible.
  • Hite Bot (AI coach): Your messages and a snapshot of your growth profile (such as height, age, and lifestyle inputs) are sent to our AI provider to generate responses.
  • Insights and recommendations: Profile and log data may be processed by AI models to generate weekly insights and recommendations.
  • Providers and training: AI requests are sent to OpenRouter, which forwards them to model providers such as OpenAI. Per our processing arrangements, this data is processed in real time to return results and is not used to train third-party models.
  • Consent: AI processing occurs only after you grant the in-app AI data consent. You can withdraw it anytime in Settings; AI-dependent features will stop working.
  • Limitations: AI can make mistakes. You are responsible for verifying entries and using the Service responsibly, especially if you have dietary restrictions, allergies, or medical conditions.

5. How We Share Information

5.1 Service Providers (Processors)

  • Supabase: Database, authentication, file storage (including avatar photos), and secure server functions.
  • OpenRouter / OpenAI: AI request routing and processing, as described in Section 4.
  • RevenueCat: Subscription management and entitlement status (receives your account identifier and Apple purchase information).
  • Sentry: Crash/error reporting and diagnostics.
  • PostHog: Product and usage analytics.
  • Singular: Mobile install and marketing attribution (device identifiers, install/attribution signals, and subscription/purchase events).

These providers process information on our behalf under contractual obligations to protect it and not use it for their own purposes.

5.2 Advertising and Attribution

We advertise Hite on third-party platforms and use Singular and Apple's SKAdNetwork to measure which campaigns lead to installs and subscriptions. This is measurement of our own advertising — not the sale of personal information and not cross-context behavioral advertising. We do not present an App Tracking Transparency prompt and do not collect the IDFA, and no health, profile, or log data is used for advertising.

We may disclose information if reasonably necessary to: comply with law, regulation, legal process, or enforceable governmental request (where permitted, we will attempt to notify you of legal demands for your data); enforce our Terms of Service; protect the safety, rights, or property of users, Hite, or the public; or detect, prevent, or address fraud, security, or technical issues.

5.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to this policy's commitments. We will notify you of any transfer that materially changes how your data is handled.

5.5 No Sale of Personal Information

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

6. Data Security

We use commercially reasonable safeguards designed to protect information, including encryption in transit (HTTPS/TLS), access controls and authentication, database row-level security so users can only access their own data, secure keychain storage of session tokens on your device, and rate limiting on sensitive endpoints.

However, no method of transmission or storage is 100% secure, and we cannot and do not guarantee absolute security. You are responsible for keeping your credentials confidential and using secure devices. If we become aware of a data breach affecting your personal data, we will notify you and/or the relevant authorities as required by applicable law. To the maximum extent permitted by law, Hite is not liable for unauthorized access, hacking, or data loss beyond our reasonable control, as further described in the Limitation of Liability section of the Terms of Service.

7. Data Retention

We retain personal information while your account is active and as needed for security, compliance, and dispute resolution. If you delete your account, we will permanently delete or de-identify the personal data associated with it within 30 days, with encrypted backups purged within 90 days; limited information may be retained longer where required by law or for legitimate security needs (e.g., abuse prevention). Meal photos are processed in real time and not retained as stored images.

8. Your Choices and Rights

Depending on your location, you may have the right to: access your personal information; correct inaccurate information; delete your account and associated data (available in-app under Settings); portability (receive a copy of data you provided); object to or restrict certain processing; and withdraw consent (including AI data consent, in Settings) at any time without affecting prior processing. To exercise these rights, use in-app Settings or contact support@usehite.com. We will verify requests using the email associated with your account, and you may use an authorized agent with proof of authorization. If we decline a request, you may appeal by replying to our decision.

9. Children's Privacy

The Service is intended for users 13 and older, consistent with its App Store age rating and Apple's age-assurance and parental-control features. Users under the age of majority should use the Service with a parent or guardian's consent and guidance. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete the account and associated data. A parent or guardian who believes a child under 13 has used the Service may contact support@usehite.com to request deletion.

Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of a contract (providing the Service you request, managing your account and subscription); your explicit consent (processing of health-related data — such as your growth profile and lifestyle logs, which may be special-category data under Article 9 — and AI data processing); legitimate interests (securing and improving the Service and measuring our own advertising, balanced against your rights); and legal obligation. You may withdraw consent at any time in Settings. You also have the right to lodge a complaint with your local supervisory authority (or the UK Information Commissioner's Office), though we would appreciate the chance to address concerns first at support@usehite.com.

11. Region-Specific Disclosures

11.1 Canada

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws (including Quebec's Law 25). You may request access to or correction of your personal information, withdraw consent (subject to legal or contractual restrictions), and challenge our compliance by contacting support@usehite.com. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (or your provincial privacy regulator).

11.2 California and Other U.S. States

We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes requiring a "limit use" right under the CCPA/CPRA. You may request access, correction, or deletion by contacting support@usehite.com, and you will not be discriminated against for exercising your rights. Residents of other U.S. states with comprehensive privacy laws have similar rights of access, correction, deletion, and portability. Because the Service does not engage in cross-context behavioral advertising or sale, browser Global Privacy Control signals do not apply to it.

11.3 Consumer Health Data (Washington My Health My Data Act and Similar Laws)

Some data we collect — your growth profile, height, sleep, nutrition, and exercise logs, and derived predictions — is "consumer health data" under laws such as the Washington My Health My Data Act and Nevada SB 370. We collect it only with your consent, use it only to provide the Service's features (Sections 2–4), share it only with the processors in Section 5.1, and never sell it or use it for advertising. You have the right to know what consumer health data we collect, to access it, to withdraw consent, and to have it deleted — use Settings or email support@usehite.com. If we deny a request, you may appeal by replying to our decision; if your appeal is denied, you may contact your state Attorney General.

12. International Data Transfers

Our infrastructure (Supabase, powered by Amazon Web Services) and service providers process data in the United States and other countries. Where personal data is transferred internationally from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (and the UK Addendum where applicable); transfers from other jurisdictions are made with safeguards consistent with applicable law.

The Service may reference third-party websites or services (such as App Store subscription management). Your interactions with those third parties are governed by their own policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or on our website (https://usehite.com/privacy) and update the Effective Date above.

15. Contact Us

Novaire Capital Corporation — support@usehite.com

This marketing website does not set cookies or include advertising pixels or client-side analytics scripts. Our hosting provider processes ordinary request information, such as IP address, requested URL, browser information and security logs, to deliver and protect the website. This differs from the mobile app analytics and attribution described above. Following a link to Apple or another external website is subject to that provider’s own policies.

The Data Privacy Policy gives a more focused account of consumer health data, AI processing and your controls. Delete Your Data explains account deletion, resetting logged data, email requests and the retention periods in Section 7. Refund Policy explains why deleting data does not cancel an Apple subscription. These pages supplement this Privacy Policy without reducing your rights.