Privacy Policy

1. The short version

Gastro Pal is a private journal for tracking what you eat and drink and how your digestion feels. Your entries are health information, so we treat them that way.

• We never sell your data.
• There are no ads, and no advertising or analytics trackers in the app.
• Only you can see your entries. Other users cannot.
• You can download everything, or delete your account and all of your data, from inside the app.

2. Who we are

Perception Promotions ("we", "us") runs Gastro Pal. You can reach us at info@mygastropal.com.

3. What we collect

We collect what you choose to enter, plus a small amount of technical information needed to keep the app working and secure.

• Account: your email address and password. Your password is stored only as a one-way scrambled value, never as readable text.
• Profile: your name, birthdate and age, sex, gender and pronouns.
• Health and lifestyle details: medications, supplements and birth control you list; allergies and sensitivities; how much coffee, water and alcohol you have; whether you use marijuana; and, if you provide them, menstrual cycle details such as period dates and cycle length.
• Daily logs: meals, drinks, symptoms (including bowel movement details), mood, sleep, physical activity, stress notes, and your answers to period prompts.
• Things we work out from your logs: ingredient tags on foods and drinks, calendars, scores and the patterns shown on the Insights tab.
• Technical information: your IP address and basic device or browser signals are processed by the services listed below when you sign in, create an account or ask for an email. We do not collect your location, contacts, photos or advertising ID.

4. How we use it

We do not use your information for advertising, and we do not use it to profile you for anyone else.

• To run the app: store your entries, show your history and calendar, and work out the patterns on your Insights tab.
• To send emails you ask for, such as sign-up and password-reset codes.
• To protect accounts and the service: stopping automated sign-ups, password guessing and other abuse.
• To meet legal obligations.

5. Who we share it with

We share information only with the service providers that help us run the app, and only what each one needs:

• Supabase: hosts our database and handles sign-in. Your account, profile and entries are stored there.
• Resend: delivers the emails we send you. It receives your email address and the message.
• Cloudflare Turnstile: the "verify you are human" check on sign-in and account pages. It processes your IP address and browser signals.
• Apple and Google: distribute the app through their stores, under their own privacy policies.

6. Other disclosures

We may disclose information if the law requires it, to respond to a valid legal request, or to protect people from harm. If the business is ever sold or merged, your information may transfer to the new owner, and we will tell you first and honor this policy.

We do not sell your information, we do not share it for advertising, and we do not give it to employers, insurers or data brokers.

If you export your data and send the file to someone, that is your choice. Their handling of it is up to them.

7. Where your data is stored

Your data is stored on servers operated by Supabase in Oregon, United States. If you use the app from another country, your information will be sent to and stored in that region.

8. How long we keep it

We keep your information for as long as your account exists. If you delete your account (Profile, then Delete my account), your profile, medications, allergies and every log are permanently deleted.

Copies may remain for a limited time in our providers' backups or logs before they are overwritten, for example email delivery records.

9. Your choices and rights

Depending on where you live (for example California, Washington, the European Union or the United Kingdom), you may have additional rights, such as to access, correct, delete or restrict the use of your information, to object to how it is used, and to complain to a regulator. To use any of these, email info@mygastropal.com. We will reply within the time the law requires.

• See and change your details: the Profile tab.
• Download a copy of everything we hold: Profile, then Download all my data.
• Delete everything: Profile, then Delete my account.
• Withdraw your consent at any time by deleting your account.

10. Consumer health data

Much of what you enter is health information, and in some places it has special legal protection. We collect it only to provide the app to you, and only with your consent, which you give when you agree to this policy at sign-up. We do not sell it or share it for advertising. You can withdraw consent and have it deleted at any time as described above.

11. Keeping your information safe

No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

• It is encrypted while travelling between the app and our servers.
• The database enforces that each person can only read and change their own entries.
• Your sign-in on your phone is kept in the phone's secure storage.
• Files you export are saved temporarily on your phone and removed when you next open the app or sign out.
• Reminders are created on your phone and do not include your health details.

12. Children

Gastro Pal is not for anyone under 18. We do not knowingly collect information from children. If you think a child has created an account, email info@mygastropal.com and we will delete it.

13. Changes to this policy

If we change this policy we will update the date above, and for important changes we will tell you in the app or by email.

14. Contact us

Questions or requests about your privacy: info@mygastropal.com.