Consumer Health Data Privacy Policy

This policy covers consumer health data under Washington's My Health My Data Act, Nevada's consumer health data law and similar state laws. It applies to the FlareCare app and flarecare.io. Our Privacy Policy covers everything else.

Consumer Health Data We Collect

• Your condition, how long you've had symptoms, symptoms, suspected triggers and medications
• Bowel movements, symptoms, meals and drinks, including photos you take of them
• Medications and doses, lab results (including scans of lab reports), sleep and daily check-ins
• Your period and cycle, if you turn period tracking on
• Data from Apple Health, if you connect it, limited to the types you allow
• Messages and photos you send to Ember, our AI assistant
• Answers to the gut check on flarecare.io

Why We Collect It and How We Use It

• To run FlareCare: tracking, your Gut Score, insights, doctor reports, reminders and recipes
• To power AI features you use, such as Ember, food scans and FODMAP checks
• To improve FlareCare and fix problems
• To attach your website gut check answers to your app account when you sign up

In the app, we ask for your consent before saving your health data, when you create your account.

Where It Comes From

From you, when you answer questions and log in the app or on our website, and from Apple Health if you connect it.

Who We Share It With

We share consumer health data only with service providers that process it for us, to run and improve FlareCare:

• Supabase: our database, sign-in and file storage
• OpenRouter, Google, OpenAI and Anthropic: AI features, with data collection turned off
• PostHog: product analytics
• RevenueCat: subscriptions

We never sell consumer health data, and we never send it to advertising partners.

Your Rights

• See what we have and who we've shared it with: Settings, then Export My Data, or email us
• Delete it: Settings, then Delete Account, or email us
• Withdraw your consent: delete your account, or turn off AI processing in Settings, then Privacy

Email privacy@flarecare.io to make a request. We answer within 45 days. If we decline a request, you can appeal by replying to our answer, and we'll respond to the appeal within 45 days. If you're not satisfied, you can contact your state's attorney general.