Privacy policy

Without an account

You can use the tracker, food diary, toolkit and lessons without signing in. Everything you enter then stays in your browser or the app's storage on your device. We don't receive it, and it's gone if you clear the app's data. Sage and meal analysis need an account (see below).

The same goes for our web quiz: your answers stay in your browser until you create an account at the end of it.

What we store when you sign in

• Account details from the sign-in provider you choose (Apple, Google or Microsoft): your name, email address (with Apple this may be a private relay address) and an identifier for that provider account. If you create an account with an email and password instead, we store your first name and email; your password is only ever stored as a secure hash.
• Your quiz answers, if you took our web quiz: your symptoms, triggers, goals and routine, and the plan we built from them. We keep your age range, not your date of birth.
• Sign-up details from the quiz: how you heard about us, the ad campaign or link you came from, and whether you asked for reminder emails.
• Your subscription, if you have one: plan, status, price and renewal dates. Card and payment details go straight to Stripe and never reach our servers.
• Health information you log: stool form, pain, bloating, mood, stress and sleep; red-flag symptoms; meals, food notes and their FODMAP analysis; your protocol, diagnostics notes, food-reintroduction results, lesson progress, and your conversations with Sage (text only).
• Usage counts: how many Sage messages and meal analyses you use each day, so we can apply fair-use limits.

We sync this data so it's on all your devices. Meal photo thumbnails, your theme and reminder settings stay on the device and are never uploaded. We don't sell your data.

Measurement (web sign-up pages only)

The Gut & Calm app has no advertising or analytics trackers. Our web quiz and checkout pages use the Meta Pixel to measure our ads and PostHog to see how people move through the sign-up pages, but only if you accept cookies there (and never if your browser sends a Global Privacy Control signal). When you accept, Meta learns that you started the quiz, created an account, started checkout or bought a plan, with a value and currency. When you buy a plan, we also send Meta that event from our server with your email address in hashed form, so it can match it to the ad you saw.

PostHog (hosted in the EU) records which sign-up pages and quiz steps you viewed, your browser, device type and approximate country, and, once you create an account, your account ID (not your email or name). It discards your IP address after looking up the country. Neither Meta nor PostHog receives your answers, symptoms or any other health details. You can change your choice with "Cookie settings" at the bottom of those pages.

Emails

We send account emails you ask for, such as password resets. If you tick the box when you sign up through the quiz, we may also email you about your plan, for example if you didn't finish setting it up. Every one of those emails has an unsubscribe link.

Your health data and your consent

Health information is a special category of personal data (for example under Article 9 of the EU GDPR). We process it only on the basis of the explicit consent you give when you create an account, and only to provide the app's features to you. You can withdraw consent at any time by deleting your account, which deletes the data.

AI features

When you message Sage or ask us to analyze a meal, we send your message, photo or meal description — and, for Sage, relevant context such as your IBS subtype, protocol, recent logs and meals — to a Google Gemini model through Google's Gemini API, which generates the reply. Meal photos are analyzed and then discarded: we don't store them on our servers. Google processes the content on our behalf to produce the response.

Sage and meal analysis give general, educational information. They can be wrong and are not medical advice.

Who helps us run Gut & Calm

• Supabase — account sign-in and the database that stores your synced data.
• Cloudflare — hosting the app and its servers, and storing the guided audio sessions and app downloads.
• Google — the Gemini AI models, and Google sign-in if you use it.
• Apple and Microsoft — sign-in, if you choose them.
• Stripe — payments and subscriptions.
• Resend — sending account and reminder emails.
• Meta — ad measurement on our web sign-up pages, only with your consent (see above).
• PostHog — analytics on our web sign-up pages, in the EU, only with your consent (see above).

They act on our instructions under data-processing terms. Some may process data outside your country; where required, those transfers rely on safeguards such as Standard Contractual Clauses. If the app crashes, a technical error report (the error and the page it happened on, not your logs) may be sent to our hosting provider so we can fix it.

How long we keep it

We keep your synced data while you have an account. When you delete your account, your account and synced data are deleted from our database immediately; copies in our database provider's encrypted backups are overwritten within their backup retention period. Signing out removes your data from that device but keeps it in your account.

Your choices and rights

• See and take your data: export everything as a file from your account page.
• Correct it: edit or delete any entry in the app.
• Delete it: choose Delete account on your account page, or email us.
• Complain: you can contact your local data protection authority.

Security

Data travels over encrypted connections. Each account can only read its own data, which the database enforces with row-level security. Your sign-in session is stored on your device and never included in exported backups.

Children

Gut & Calm is not intended for anyone under 18.

Changes and contact

If we change this policy we'll update the date above and, for significant changes, tell you in the app. Questions or requests: support@gutcalm.si.