Privacy Policy

Last Updated: July 2026

1. Introduction

Dietary Signals ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Metabolic Health Intelligence Platform — designed to deliver personalized pattern awareness for people focused on wellness, athletic performance, or living with prediabetes, type 2 diabetes, or GLP-1 medication support.

2. Information We Collect

We collect several types of information to provide and improve our service:

2.1 Personal Information

• Full name
• Email address
• Password (encrypted)
• Health persona (Wellness, Athletic, Pre-Diabetic, Diabetic, or GLP-1 User)
• A1C level (if provided)
• Age (for age-adjusted protein targets)

2.2 Health Data

• Dietary preferences and restrictions
• Meal history and food choices
• Blood glucose data from Apple HealthKit (CGM devices like Dexcom G7, Abbott Libre 3 Plus)
• Blood glucose readings (manually entered BGM data)
• Login credentials for a directly connected CGM service (Dexcom Share or LibreLinkUp), if you choose to connect one — stored encrypted on your device (iOS Keychain), never on our servers
• GLP-1 medication tracking (injection logs, side effects, dose titration)
• Sleep and stress data (if synced from Apple Health)
• Health goals and targets

2.3 Usage Data

• App features used
• Meal scans and queries
• Search history
• App interactions and preferences

2.4 Device Information

• Device type and model
• Operating system version
• Unique device identifiers
• Mobile network information

2.5 Personalization (Live Outcome Learning)

If you turn on the optional Personalization feature, Dietary Signals records what you chose after a meal insight (went with it, chose something else, or skipped), an optional one-tap note about how you felt, and — only with your separate permission — the change in your glucose reading approximately two hours after a logged meal, read from Apple HealthKit. We use this data to tailor your own insights to your patterns, and in de-identified form (with your identity removed) to refine insights for all users. This data is never sold, never used for advertising, and never used to track you across other companies’ apps or websites, and HealthKit data is never used for marketing in any form. Personalization is off by default; you can turn it off at any time in Settings, revoke Health access in the iOS Health app, and delete the data collected by this feature at any time from within the app. Dietary Signals is a wellness product: it shows patterns in your data, is not a medical record, and does not diagnose, treat, cure, or prevent any condition — please consult your healthcare provider for health decisions.

3. How We Use Your Information

• Deliver personalized pattern awareness based on your health profile and goals
• Analyze metabolic signals, pattern correlations, and Gut-Metabolic Health Score of foods
• Sync and display CGM/BGM data from Apple HealthKit for deeper metabolic pattern insights
• Track GLP-1 medication schedules and provide muscle preservation awareness
• Generate personalized health summaries — based on your logged meals, glucose information, nutrition, and health journey — on-screen, as PDF, or by email, that you can choose to share with your healthcare provider
• Maintain and enhance app functionality
• Send important notifications about your account or app updates
• Respond to your questions and support requests
• Comply with legal obligations and protect against fraud

4. AI-Powered Features

Dietary Signals provides intelligent features, including interactive metabolic insight, to help users better understand their metabolic patterns and build lasting clarity.

4.1 Information We Process

When you use these features, we may process:

• The content of messages you submit
• Technical metadata associated with your interaction (such as timestamps or session identifiers)

We use this information to:

• Generate responses
• Operate, maintain, and improve our services
• Monitor for misuse, abuse, or security issues

4.2 Third-Party AI Processing

Metabolic intelligence interactions may be processed by third-party service providers acting on our behalf. These providers process data solely to deliver the requested functionality and are subject to contractual and technical safeguards.

4.3 Data Protection & Safeguards

We implement technical and organizational measures designed to protect information processed through our services, including AI-powered features. These measures are intended to prevent unauthorized access, misuse, and excessive or abusive activity.

4.4 Health Disclaimer

Metabolic insights and suggestions are provided for informational and educational purposes only and are not a substitute for professional medical advice, diagnosis, or treatment.

5. Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using SSL/TLS protocols
• Passwords are hashed and never stored in plain text
• Data is stored securely using Supabase (PostgreSQL database)
• Access to personal data is restricted to authorized personnel only
• Regular security audits and updates

6. Data Sharing

We do not sell your personal data to third parties.

We may share your data with:

• Supabase: Backend infrastructure and database hosting
• Third-party AI service providers: Meal signal analysis (meal photos and descriptions only, no personal identifiers)
• Apple HealthKit: We read glucose data from HealthKit with your explicit permission. We do not write data back to HealthKit. We never use Apple HealthKit data for advertising, marketing, or similar purposes, never disclose it to third parties for those purposes, and never use it for cross-app tracking.
• Dexcom Share / LibreLinkUp (Abbott): If you choose to connect a CGM account directly, we use your credentials to retrieve your glucose readings directly from Dexcom or Abbott. Your credentials are stored encrypted on your device (iOS Keychain), are never stored on our servers, and are never shared with anyone else.
• RevenueCat: Processes and manages your subscription. It receives purchase and subscription status tied to an app-specific identifier; it does not receive your health data.
• Sentry: Error monitoring to improve app stability (no personal health data)
• Legal authorities: When required by law or to protect our rights

7. Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and all associated data
• Portability: Receive your data in a structured, machine-readable format
• Withdrawal: Withdraw consent for data processing at any time
• Object: Object to processing of your personal data

8. Data Retention

• Active accounts: Data retained while your account is active
• Deleted accounts: Data permanently deleted within 30 days of account deletion
• Legal requirements: Some data may be retained longer if required by law
• Anonymized data: Usage statistics may be retained in anonymized form

9. Children's Privacy

Dietary Signals is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it removed.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the new Privacy Policy in the app and on this website
• Updating the "Last Updated" date
• Sending an email notification for material changes
• Requiring re-acceptance for significant changes

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

By using Dietary Signals, you acknowledge that you have read and understood this Privacy Policy.