Privacy Notice

Functional Gut RN ("we") runs Functional Life Companion. We are the data controller for the personal data described here: we decide why and how it is used.

What we collect and why

• Account details — name, email, login details, and birth year if you add it. Used to create your account, sign you in and personalise the app (contract).
• Health and life entries — anything you log: meals, glucose, medications, symptoms, bowel movements and photos, sleep, weight, cycle, labs, reports, journal and more. Used only to provide the Service to you and sync it across your devices (contract, and your explicit consent for health data, which you can withdraw by deleting entries or your account).
• Connected devices — if you choose to connect a glucose monitor such as Dexcom, the readings it shares with us (your consent).
• AI requests — the questions, voice recordings and meal photos you send to the AI features, plus a short summary of your recent entries so the assistant can answer. Used to produce the answer or meal draft (contract).
• Plan details — which plan you have and its status, so we can unlock Plus (contract).
• Technical and usage data — device, browser, pages visited and errors. Used to keep the app secure and working and to improve it (legitimate interests).
• Messages you send us — to answer support questions (legitimate interests).

We do not sell your data or use your health entries for advertising.

Legal basis for processing

We process personal data on these legal bases: contract (to provide the app you signed up for), consent (for wellness entries you choose to log and for optional connected devices — you can withdraw it any time by deleting entries or your account), legitimate interests (keeping the app secure, fixing errors and improving it), and legal obligation (keeping records the law requires).

Who we share it with

• Service providers who host and run the app for us: Lovable (hosting, database, sign-in, file storage and the AI features — AI requests are passed to the AI model providers it uses to create answers). If you sign in with Google or Apple, that provider confirms who you are.
• Food and medicine lookups — when you search, your search words or barcode are sent to USDA FoodData Central, Open Food Facts or the US National Library of Medicine. Your identity is not sent.
• Stripe (including Link), for selling Plus, managing subscriptions, payments, tax and invoices. Stripe collects your payment details directly under its own privacy policy.
• Dexcom, only if you choose to connect it.
• Professional advisers such as lawyers and accountants, when needed.
• Authorities, where the law requires it.

Site analytics

Our published site uses Lovable's built-in visitor analytics. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify you. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. These are recorded for every visitor. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

Your device's storage

The app keeps you signed in and saves entries made offline in your browser's local storage until they sync. We don't use advertising or tracking cookies. Stripe's checkout may set its own cookies needed to process a payment.

Data retention

We keep your account and entries only while your account is open and they are needed to provide the app. When you delete entries or ask us to close your account, we delete or anonymise that data, except where we must keep limited records (for example, purchase records) by law.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, restrict or object to how we use it, and withdraw consent. You can export your data any time in the app (Gut tools → Export) and edit or delete entries yourself. You can also complain to your local data protection authority. We respond to requests within one month.

International transfers

Our service providers may process data outside your country, including in the United States. Where required, we rely on safeguards such as standard contractual clauses.

Security

We use technical and organisational measures to protect your data, including encrypted connections, sign-in so only you can see your entries, private storage for photos and reports with short-lived links, and limited access.

Changes

We may update this notice and will show the new date at the top.