Gutopia Privacy Policy

Effective Date: September 21, 2025
Last Updated: October 6, 2026

1. Summary (Plain English)

• Tracking logs are stored locally - Symptom, food and medication logs are not cloud-synced; optional AI food analysis sends selected content as explained below
• Cloud services support accounts and optional AI - Supabase handles authentication, food-analysis requests and account-linked usage metadata
• No sale or advertising use - We do not sell your data or use it for advertising; optional service processing is described below
• You control backups - iCloud/Google backups are managed by you through your device
• Delete anytime - Remove your account and all local data whenever you want

2. Data Controller

Gutopia Inc. is the controller of personal data we process (including accounts, optional food analysis, usage metadata and support).

Contact: privacy@gutopia.ai

3. Local Tracking and Data We Do Not Collect

The app does not cloud-sync your tracking database. The following remain local unless you choose an export, share content, use an OS backup, or submit selected content for optional food analysis:

• Health logs, symptoms, or metrics
• Medication records
• Food diaries and entries
• Photos stored in the app, except those you select to send for AI food analysis
• Precise location data
• Contacts or calendar data
• Cross-app tracking data
• Third-party advertising data

4. What We Collect and Why

A. Account & Authentication (Cloud)

• Email address or OAuth identifier
• Encrypted and salted password (if email signup)
• Authentication tokens and session identifiers
• Account creation date and last login time
• Account tier status (free/premium)

Purpose: To create and secure your account

B. Optional Food Analysis

When you choose AI nutrition analysis and accept the app's food-analysis consent:

• Your food text description or selected photo is sent through the Supabase gemini-proxy to Google Gemini
• The request uses your signed-in Supabase session and is associated with your account by our backend; it is not an anonymous request
• The analysis result is returned to the app and can be saved with your local food log
• You can decline analysis and enter food information manually

Purpose: To estimate food and nutrition information. AI estimates may be inaccurate.

Third-party processing: Supabase and Google process these requests under their applicable policies. We do not promise that providers retain no request content or operational logs. See the providers' privacy information for their processing and retention practices.

C. API Usage Monitoring

• Usage is linked to your account and can include request type, timestamp, success/failure status, response time, error information and token counts
• Operational metadata can include IP address, user agent and app version
• This monitoring supports usage limits, abuse prevention and service operations; it does not cloud-sync your tracking database

Purpose: Prevent abuse, ensure fair use, manage service costs, and maintain service quality.

D. Security and Operations

• IP address and user agent (processed temporarily at login)
• Error events related to authentication (not health content)

Purpose: Fraud prevention and service integrity

E. Support Communications

• Email address and message content when you contact us
• Kept only as long as needed to resolve your request

Purpose: Customer support

F. Optional Push Notifications

• Device push token (only if you opt in)
• Used only for app reminders, never for marketing

Purpose: Reminder notifications

G. Payments (if applicable)

• Purchase metadata from App Store (product ID, transaction status)
• No credit card numbers are received or stored by us

Purpose: Subscription management

5. Legal Basis for Processing (GDPR/UK GDPR)

• Contract: To create and maintain your account
• Legitimate Interests: Security, fraud prevention, service integrity
• Consent: Optional notifications and sending selected food content for AI analysis

6. On-Device Storage

• Health data is stored locally using device encryption
• OS-level backups (iCloud/Google) are controlled by you
• Data exports and sharing are initiated and controlled by you

7. Data Retention

• Account data: Kept while account is active, deleted upon account deletion
• API usage logs: Retained as needed for abuse prevention and service operations
• Support communications: Retained as needed, then deleted or anonymized
• Security logs: Kept briefly, then deleted or aggregated
• Local health data: Retained until you delete the app or clear data

8. Third-Party Services

We use minimal third-party services:

• Supabase: Authentication, account data, optional food-analysis proxy and account-linked usage records
• Google Gemini: Optional analysis of selected food photos or descriptions. Google Privacy Policy
• Apple/Google: Push notifications
• App Stores: Payment processing

Third-party services have their own terms and privacy policies. Their handling of submitted content and operational data is subject to those policies.

Website Algorithm Lab

The Algorithm Lab generates synthetic data in browser memory and runs its demo models locally. It does not connect to your account, read personal health logs or upload algorithm inputs. The website loads its font from Google Fonts; that presentation request is separate from the local model calculations.

9. Security Measures

We implement:

• Encryption in transit (TLS) for all communications
• Strong password hashing (Argon2/bcrypt)
• Access controls and monitoring
• Regular security updates

Your device security is your responsibility — please use a passcode/biometric lock.

10. Your Rights

You have the right to:

• Access your account data we hold
• Correct inaccurate account data
• Delete your account and authentication data
• Export your local health data (via app features)
• Object to certain processing
• Data portability for data you provided

To exercise rights, contact: privacy@gutopia.ai

California Residents (CPRA)

• We do not sell or share personal information
• No discrimination for exercising privacy rights

EEA/UK Residents

• Right to lodge complaints with supervisory authorities
• Data may be transferred to the US with appropriate safeguards

11. Children's Privacy

• Service not directed to children under 13
• We don't knowingly collect data from children under 13
• Contact us immediately if you believe a child has provided data

12. Data Breach Notification

If a security incident affects your account data, we will notify you and/or regulators as required by law.

13. HealthKit/Google Fit (Future Integration)

• Only access data you explicitly permit
• Never used for advertising or data brokerage
• Processed locally, not uploaded to servers

14. Biometric Authentication

• Face ID/Touch ID data never leaves your device
• Managed entirely by your device's operating system
• We have no access to biometric data

15. International Transfers

Account data may be processed in the United States where our providers operate. We ensure appropriate safeguards are in place.

16. Changes to This Policy

We'll notify you of material changes via:

• Updated "Last Updated" date
• In-app notice or email (if available)

17. Contact Us

Gutopia Inc.
Email: privacy@gutopia.ai

For privacy-related questions or to exercise your rights, please email us with "Privacy Request" in the subject line.

This Privacy Policy forms part of our Terms of Service. By using Gutopia, you acknowledge that you have read and understood this Privacy Policy.