Draft — pending legal review

Privacy Policy

EpiNutrition stores your email, optional profile preferences and the foods you log. Personal and family diaries are private to your signed-in account and are not displayed to other accounts.

You may voluntarily provide age, physical measurements, activity, pregnancy or breastfeeding status, allergies and health-condition notes. These fields are optional and require your choice to save private personal information. They are not sent to food databases or AI services for personalization. We do not request genetic data or infer diagnoses from food choices.

Family profiles are managed by the account owner, not shared accounts. Nutrition references are educational; clinician instructions entered by you are preserved during target reviews. Accepted target history stores the personal inputs used for that version.

You can clear optional profile information without deleting the diary, remove weight measurements or target history, and delete a family member together with their diary and progress. Clearing current profile fields does not automatically remove older target input snapshots; delete target history to remove those snapshots.

Export includes all family profiles, diaries, progress and target history. You can export your data or permanently delete your account and its private records from Profile.

Lab Insights stores original reports in private storage and keeps reviewed results separate for each profile. Another adult's medical records require the owner's confirmation of explicit permission, including when and how it was obtained; dependent records require parent or guardian authority. Anyone using the same primary login can access authorized records. Permission can be revoked; lab records then become unavailable until authorization is renewed.

AI transcription requires separate explicit consent and sends the report, potentially including visible identifiers, to Lovable AI. Personal profile and diary information are not included in that transcription request. No lab information is shared with advertising services. AI output remains an unverified draft until you check it.

You can download original reports, export authorized result summaries and delete reports and their files. Family or account deletion also removes original lab files. Access controls do not establish compliance with health privacy laws; a deployment-specific regulatory and privacy assessment is required before public release.