Privacy Policy

1. Information we collect

• Account information: your email address, used to sign you in with a magic link.
• Profile details you choose to share: body stats, goals, dietary rules, allergies, cooking skill, and budget sensitivity.
• Things you log: meals, recipes, pantry items, weekly plans, shopping lists, and chat messages with the assistant.
• Receipt photos you upload to stock your pantry automatically.
• Usage data: how many messages, bill scans, and plans you have used this month, so we can enforce free-tier limits fairly.
• Billing information: handled directly by Stripe, our payment processor. We never see or store your full card number.

2. How we use your information

We use your data to run the product you signed up for: answering your food questions, logging meals, tracking your pantry and its expiry dates, generating weekly meal plans, writing your daily briefing, and remembering your preferences so the assistant does not ask the same question twice. We do not use your data for advertising, and we do not sell it to anyone.

3. How AI is involved

Some features send your data to AI models through our AI Gateway (a routing layer we control, not a third-party app): free-text meal descriptions get mapped to foods, receipt photos get read into line items, and weekly plans and daily briefings get written. A few things are true of every one of those calls:

• Nutrition numbers (calories, protein, carbs, fat, and so on) always come from our own food database, never from a model's guess.
• Anything a model parses or generates (a receipt, a free-text meal, an imported recipe) is shown to you to confirm or edit before it is saved.
• We do not use your data to train AI models.
• Every model call is logged with its cost so we can keep the product affordable; that log records what feature was used and how much it cost, not the content of your conversation.

4. Where your data lives

Your data is stored in Supabase (a hosted Postgres database and file storage provider). Every table is protected by row-level security, meaning the database itself enforces that you can only ever read or write your own rows, not another user's. Receipt photos live in a private storage bucket that only you (and our servers, to process them) can access. Data in transit is encrypted (HTTPS/TLS).

5. Who we share data with

We share data only with the processors that make HealthOS work: Supabase (database, auth, storage), the model providers reached through our AI Gateway (to process the requests described above), and Stripe (payments). We do not sell your data, and we do not share it with advertisers or data brokers.

5a. Our privacy pledge

This is a binding commitment, not marketing copy: your receipts are never the product. We do not sell or share your purchase data. You are the customer, not the inventory. Plainly put, we make money when you pay for HealthOS, never by selling what you bought at the grocery store, to anyone, for any reason.

6. Your rights

From Settings, you can export a complete copy of everything HealthOS knows about you as a JSON file, and permanently delete your account and all associated data at any time, no waiting period. If you would rather we do this for you, or you want to correct something you cannot edit yourself, email us at healthos@synopslabs.com.

7. Data retention

We keep your data for as long as your account is active. When you delete your account, your profile, meals, recipes, pantry, receipts, plans, and chat memory are permanently removed. Anonymized cost and usage logs (which model was used, for which feature, and at what cost, with no message content and no link back to you) may be retained for accounting purposes.

8. Children's privacy

HealthOS is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect data from children.

9. Changes to this policy

If we make a material change to this policy, we will update the date at the top of this page and, where appropriate, let you know in-app.

10. Contact us

Questions about this policy or your data? Email healthos@synopslabs.com.