Privacy Policy

Last updated: May 12, 2026

Gastric IQ ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web and mobile application (the "Service").

1. Information We Collect

We collect information you provide directly, including:

• Account information – name and email address when you sign up.
• Health data – meals, GLP-1 injection records, weight logs, symptoms, and daily check-ins you enter into the app.
• Device information – device type, operating system, and push notification tokens for sending you alerts.
• Usage data – product analytics events (PostHog) and crash/error reports (Sentry) to improve the Service and fix bugs. These are processed with anonymised identifiers and do not include your health log content.

2. How We Use Your Information

• Provide and personalise the Service, including computing your gastric load and GLP-1 pharmacokinetics.
• Send push notifications you have opted into.
• Generate AI-powered insights based on your logged data.
• Process payments and manage your subscription.
• Improve and debug the Service via aggregated, anonymised analytics.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Railway. We use industry-standard encryption in transit (TLS) and at rest. Access to production data is restricted to authorised personnel only.

4. Sharing of Information

We do not sell your personal data. We may share data with:

• Service providers – Clerk (authentication), Stripe (payments), Railway (hosting), Vercel (web hosting), Expo (mobile push notifications), OpenAI / Google (AI insights — only the data you explicitly submit for insight generation, and solely to fulfil that request), PostHog (product analytics — anonymised usage events), Sentry (crash and error reporting — device/OS metadata and stack traces; does not include health data).
• Legal requirements – if required by law or to protect our rights.

5. Health Data

Gastric IQ is a personal wellness tracker and is not a medical device or healthcare provider. Your health entries are used only to power the features you use within the app. We do not share identifiable health data with third parties for advertising or research purposes.

On Android, if you grant permission, Gastric IQ may read weight and body composition records from Android Health Connect. This data is used only to populate your in-app logs and is not shared with third parties for advertising or research.

6. Your Rights

You may at any time:

• Request a copy of the data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent for optional data processing.

You can delete your account and all associated data directly from the app settings (Settings → Delete Account) or by visiting our Account & Data Deletion page. For email-based requests or if you no longer have app access, contact us at privacy@gastric-iq.com.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your personal data is purged within 30 days, except where retention is required by law.

8. Cookies and Tracking

The web app uses session cookies for authentication. We use PostHog for product analytics (event-level, anonymised) and Vercel Analytics for aggregated site statistics. Crash and error data is collected via Sentry.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@gastric-iq.com.