Privacy Policy — ExoBlue
Last updated: June 30, 2026
ExoBlue (the "App") is published by ExoBlue SAS, 61 avenue Kléber, 75016 Paris ("we"). This policy explains what data we process, why, and your rights. ExoBlue is a mobility and activity tracking app used to control the V-X1 walking-assistance exoskeleton. It is not a medical device and does not provide any diagnosis or therapeutic advice.
1. Data we process
| Category | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Account | Email address, password (encrypted), full name, profile photo (optional) | Create/secure your account, authenticate you | Contract (art. 6.1.b) |
| Activity & mobility | Sessions: duration, steps, distance, average speed, elevation, cadence, stride symmetry, support ratio, mode, environment, device battery level | Show your statistics and progress | Contract (art. 6.1.b) |
| Device & connection | Bluetooth identifier of the paired exoskeleton, real-time telemetry (battery, temperature, speed) | Connect to and control your exoskeleton | Contract (art. 6.1.b) |
| Preferences | Language, units, onboarding settings | Personalize the app (stored locally on device) | Legitimate interest (art. 6.1.f) |
We do not collect GPS location, contacts, or advertising identifiers. No data is used for advertising or cross-app tracking.
2. How data is stored
- Account and sessions: hosted via Supabase (cloud infrastructure), our processor. Communications are encrypted in transit (HTTPS/TLS).
- Real-time telemetry: exchanged directly between your phone and the exoskeleton over Bluetooth, never passing through our servers.
- Preferences and unsynced sessions: stored locally on your device (MMKV). A session recorded offline is synced once the connection returns.
3. Bluetooth
The App uses Bluetooth only to discover, connect to and control your V-X1 exoskeleton. We do not use Bluetooth to locate you or for advertising.
4. Sharing
We do not sell or rent your data. It is shared only with Supabase (our hosting processor) and authorities where legally required.
5. Retention
Data is kept while your account is active. On account deletion it is erased within 30 days, unless a legal retention obligation applies.
6. Your rights
Under the GDPR you have the rights of access, rectification, erasure, portability, restriction and objection. You can delete your account in the app or by writing to support@exoblue.app. You may lodge a complaint with your supervisory authority.
7. Children
ExoBlue is not intended for people under 16 years and we do not knowingly collect their data.
8. Changes
We may update this policy; the "last updated" date reflects the latest version.
9. Contact
support@exoblue.app — ExoBlue SAS, 61 avenue Kléber, 75016 Paris.