Privacy Policy

GutFix is a personal food and symptom tracking app that helps you discover patterns between what you eat and how your gut feels. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it.

In this document, “Gut Fix,” “we,” “our,” and “us” refer to the operator of the Gut Fix app. “You” refers to the user.

Data controller

The data controller responsible for your information is Gut Fix, contactable atgutfix.app@gmail.com.

1. What we collect

Account information

When you create an account we collect:

• Your email address
• A password (stored as a salted hash by our authentication provider; we never see your plaintext password)

Health and wellness information you provide

To make the app useful, we ask you to self-report information about your gut health and eating habits. Under the EU/UK General Data Protection Regulation this is special category personal data (GDPR Article 9), and we process it only with your explicit consent. It may include:

• Self-reported IBS subtype or pattern
• Suspected food triggers, allergies, and dietary conditions
• Foods you consider usually safe
• Meals you log (categories, timing, attributes)
• Symptoms you log (severity scores, when they occurred)
• Daily context such as stress, sleep, or hydration if you record it
• Notes and free-text descriptions you write inside the app
• Safety-screening responses (red-flag questions during onboarding)

Application usage information

• Protocol day, completion state, and timestamps of in-app events necessary to deliver the experience
• Push-notification preferences and your device’s push-notification token (only if you grant permission)

2. What we do not collect

• Your precise location
• Your contacts, photos, microphone, or camera input
• Data from Apple Health, Google Fit, or any other health platform
• Financial information or payment details
• Behavioural advertising identifiers
• Information that identifies you across other apps or websites

GutFix does not contain third-party advertising SDKs and does not sell or rent your information to anyone.

3. How we use information

• To provide the core function of the app: building your personal food map and suggesting meals based on your logs
• To authenticate your account and keep your data synced across devices
• To send you check-in reminders if you have opted into notifications
• To detect issues, prevent abuse, and improve the reliability of the service
• To comply with our legal obligations

We do not use your health information to make automated decisions that produce legal or similarly significant effects about you. The app’s pattern suggestions are informational and not medical advice.

4. Legal bases (GDPR)

If you are in the EU, UK, or another GDPR-aligned region, we rely on the following legal bases:

• Contract (Art. 6(1)(b)): to provide the account and core service you sign up for
• Explicit consent (Art. 6(1)(a) and Art. 9(2)(a)): to process your health and wellness information; you can withdraw consent at any time by deleting your account
• Legitimate interests (Art. 6(1)(f)): to keep the service secure, prevent abuse, and diagnose technical issues — balanced against your privacy
• Legal obligation (Art. 6(1)(c)): when we must retain or disclose information to comply with the law

5. Who we share information with

We share your information only with service providers who process it on our behalf, under written terms requiring confidentiality and security:

• Supabase (Supabase, Inc.) — hosts our database, authentication, and storage. Data is processed in the Supabase region we have provisioned.
• Apple Push Notification service (Apple Inc.) and Firebase Cloud Messaging (Google LLC) — deliver push notifications to your device, if you have enabled them.
• Expo (650 Industries, Inc.) — provides the over-the-air update and notification infrastructure for the app.

We may also disclose information if required by law, court order, or valid governmental request, or to protect the rights, safety, or property of GutFix, our users, or the public.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

6. Where information is stored

Your data is stored on infrastructure operated by Supabase. Depending on the region your account is provisioned in, data may be processed in the European Union, the United Kingdom, or the United States. Where data leaves your home region we rely onStandard Contractual Clauses and equivalent safeguards approved by the European Commission and the UK Information Commissioner’s Office.

7. Data retention & deletion

We keep your information for as long as you maintain an account. You can permanently delete your account and all associated data at any time by:

• Using Settings → Delete account inside the GutFix app, or
• Emailing us at the address below to request full account deletion.

We will action deletion requests within 30 days. Backups containing your data may persist for up to 30 additional days before being purged from rolling backup snapshots. We may retain anonymised analytics and audit records that can no longer reasonably identify you.

8. Your rights

Depending on where you live, you may have the following rights:

• Access a copy of the information we hold about you
• Correct information that is inaccurate or out of date
• Delete your information (“right to erasure”)
• Restrict or object to certain processing
• Port your information to another service (where technically feasible)
• Withdraw consent at any time, without affecting prior lawful processing
• Complain to a supervisory authority. In the UK this is the Information Commissioner’s Office; EU residents can contact their local data protection authority.

To exercise any of these rights, contact us at the email below.

9. California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know the categories and specific pieces of personal information we have collected about you and the purposes of collection
• Right to delete personal information we have collected from you
• Right to correct inaccurate personal information
• Right to opt out of the “sale” or “sharing” of personal information — we do not sell or share your personal information as those terms are defined under the CCPA / CPRA
• Right to limit use of sensitive personal information — we use sensitive personal information (your health data) only to provide the service you signed up for
• Right to non-discrimination for exercising any of the above

We do not knowingly process the personal information of consumers under 16 years of age for sale or sharing. To exercise a California right, email us at the address below.

10. International users

GutFix is available worldwide. If you are located outside the European Union, United Kingdom, or United States, please be aware that information you provide may be transferred to and processed in those regions. By using the app, you consent to this transfer.

Australia: We handle your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You may contact us to access or correct your information, or to make a complaint. If you are not satisfied with our response, you may contact theOffice of the Australian Information Commissioner.

Brazil: If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to access, correct, delete, and port your personal data, and to obtain information about the entities with whom your data has been shared. To exercise these rights, contact us at the email below.

For all other jurisdictions, we apply the highest standard of protection described in this policy regardless of where you are located.

11. Cookies & tracking

The GutFix mobile app does not use cookies. This website does not use cookies or any client-side analytics, tracking pixels, or fingerprinting technologies. There is nothing to accept or decline.

12. Security

We use industry-standard safeguards to protect your information, including transport encryption (HTTPS/TLS) for all network communication, encrypted database storage at rest, salted password hashing, and role-based access control on our backend. No method of electronic storage or transmission is perfectly secure, so we cannot guarantee absolute security, but we work continually to keep your data safe.

13. Children’s privacy

GutFix is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Effective date” above and, for material changes, we will notify you inside the app or by email before the change takes effect.

15. Contact

Questions about this policy, or to exercise any of the rights above, contact us at:

Gut Fix
Email:gutfix.app@gmail.com

GutFix is provided for general wellness purposes only and is not a medical device. It does not diagnose, treat, or replace professional medical advice. If you have urgent concerns about your health, please consult a qualified healthcare professional.