Hackernoon
- The documents do not say whether your data trains AI.
- Your data is used to target ads at you; you can opt out.
- The documents do not say whether your data is sold or shared.
- The documents do not say who can read your content.
They collect account, device, and optional health data; deletion exists, but training, ads, and legal terms are mostly unstated.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Name, email, phone, usage and device IDs, plus optional step and calorie health data.
Read the exact line
Privacy policy
“Personally identifiable information may include, but is not limited to: Name Email address Phone number Usage Data”
Training
They use it to run the app, contact you, send offers, and improve the service.
Read the exact line
Privacy policy
“We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.”
Sharing
Health data is not sold or shared; other sharing besides transfers is not clearly listed.
Read the exact line
Privacy policy
“We do not use your health data for advertising, nor do we sell or share it with any third parties.”
Kept
They keep data as long as they say they need it; no exact delete-by date is given.
Read the exact line
Privacy policy
“The Company will retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy.”
Controls
You can change or delete some info in account settings, revoke health access, or email them.
Read the exact line
Privacy policy
“You can update, amend, or delete your information at any time by signing into your Account, if you have one, and visiting the account settings section.”
Fine print
Policy changes take effect when posted; there is no terms page covering lawsuits or refunds.
Read the exact line
Privacy policy
“Changes to this Privacy Policy are effective when posted on this page.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Revoke HealthKit or Google Fit access
Your device settings for HealthKit or Google Fit
Delete or edit account information
Sign in and visit the account settings section, or email app.goto.sea@gmail.com
Opt out of news and special offers
Use the opt-out they mention for news and special offers communications
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They collect health and exercise information, not just a username.
Read the exact line
Privacy policy
“We may collect and process your exercise and health data to improve your experience, help you calculate calories burned more accurately, and support your health goals.”
For example, your step count from Apple Health can be stored on their servers.
Your data can be used for marketing analysis and promotions, not only to run the calorie app.
Read the exact line
Privacy policy
“we may use your information for data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and evaluating and improving our Service, products, services, marketing, and your experience.”
For example, they might study how often you open the app to decide what offers to send.
They can email or message you about offers unless you opt out.
Read the exact line
Privacy policy
“To provide you with news, special offers, and general information about other goods, services, and events that we offer, similar to those that you have already purchased or inquired about unless you opt not to receive such information.”
For example, after you buy a plan they may keep sending product emails until you say stop.
If the company is sold, your personal data can go with the sale.
Read the exact line
Privacy policy
“we may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.”
For example, a new owner could get your email and usage history.
New rules can start as soon as they post them; you are told to check the page yourself.
Read the exact line
Privacy policy
“Changes to this Privacy Policy are effective when posted on this page.”
For example, they could add a new use of your data without emailing you first.
They promise not to sell HealthKit or Google Fit data or use it for ads.
Read the exact line
Privacy policy
“We do not use your health data for advertising, nor do we sell or share it with any third parties.”
For example, your calorie burn numbers should not be sold to an ad network.
You can turn off health-data access on your phone and they say they will stop collecting it.
Read the exact line
Privacy policy
“You can manage or revoke HealthKit or Google Fit access at any time in your device settings. Once revoked, we will no longer collect your health data.”
For example, turning off HealthKit for Cal AI should stop new step data from leaving your phone.
You can try to delete account info in settings, but they do not say when it is fully gone.
Read the exact line
Privacy policy
“You can update, amend, or delete your information at any time by signing into your Account, if you have one, and visiting the account settings section.”
For example, you might delete your profile in the app and still not know if backups remain.
They set a 13+ rule but only say they do not knowingly collect kids’ data.
Read the exact line
Privacy policy
“Our Service is not intended for anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13.”
For example, a 12-year-old could still sign up if they type an older age.
Health data may live on their cloud, not only on your phone.
Read the exact line
Privacy policy
“Your health data is stored only on your device or on our secure cloud servers, and is used solely to provide the core service.”
For example, calories from Google Fit can sit on their servers, not just locally.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
How we got here · grade D · score 38/100 · 15 of 15 policy answers backed by a verified quote · 9 not stated
What does the app collect beyond what it needs to work?
They collect name, email, phone, usage logs, IP, device IDs, and optional HealthKit or Google Fit step and calorie data.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use data for promotional campaigns and offers, and say you can opt not to receive those messages.
Do they sell or share your data, and can you opt out?
Not stated in the documents.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete some info in account settings or by contacting them, but they give no deadline for when it is erased.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They mention secure cloud servers and reasonable steps for transfers, but no audit or bug-bounty program.
Is there a real age gate, and are teens protected?
The service is not intended for anyone under 13; they do not describe age checks beyond that statement.
Will they tell you when the rules change, and is the policy specific?
The policy is dated July 15, 2025; changes take effect when posted on the page.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 1,403 words at a college level (Flesch reading ease 45.4).
