Not HIPAA Compliant
GutSync is not a HIPAA-covered entity and does not claim HIPAA compliance. While we implement reasonable security measures to protect your data, you should not use GutSync as a substitute for HIPAA-compliant health record systems. By using GutSync, you acknowledge and accept this limitation.
Not Medical Advice
GutSync is a health tracking tool, not a medical device. It does not provide diagnoses, treatment recommendations, or medical advice. AI-generated insights are for informational purposes only. Always consult a qualified healthcare professional for medical decisions.
Use at Your Own Risk
You use GutSync entirely at your own risk. We are not responsible for any decisions made based on data or insights provided by the service.
Information We Collect
When you use GutSync, we collect the following types of information:
- Account information — your name and email address, collected through our authentication provider during sign-up
- Health tracking data — meals and food logs, symptoms, bowel movements, mood, sleep, physical activity, medications and supplements, and notes you choose to log
- Conversations and derived records — messages exchanged with GutSync’s automated AI assistant, the conversation history created from them, and structured entries, memories, insights, or cases created at your request
- Uploaded photos — images attached in the app or sent through a connected chat service, if you choose to provide them
- Connected chat account data — when you connect Facebook Messenger, GutSync receives a Page-scoped user identifier from Meta, the text, photo, and postback choices you send to the GutSync Page, and link/activity timestamps. GutSync does not use Facebook Login for account sign-in or request your general Facebook profile.
- Technical and transaction data — basic usage and error information, account access and security events, subscription status, and payment identifiers. We do not store complete payment-card details.
How We Use Your Information
We use the information we collect to:
- Provide the gut health tracking and insights service
- Generate AI-powered analysis and pattern recognition from your logged entries
- Send transactional emails such as receipts and account notifications
- Process subscription payments
- Maintain, improve, and secure the service
- Link a chat identity you explicitly connect to the correct GutSync account and respond to messages you send through that channel
We do not sell your personal information or health data, and we do not use Meta-derived data for advertising.
Messenger and Connected Chat Apps
Messenger is optional and user-initiated. You first sign in to GutSync, choose Settings → Integrations → Messenger → Connect, and then send the one-time link message to the GutSync Facebook Page. GutSync stores only a hash of the short-lived link token; the raw token is not stored in the database.
GutSync’s Messenger replies are automated. Text and optional meal photos you send are handled like messages submitted in the GutSync app: they may be stored in your AI conversation history, processed by an AI provider, and used to create or update structured wellness entries in your linked account. Meta remains the provider of the Messenger channel and retains the original conversation under its own terms and privacy policy.
GutSync is designed for people who voluntarily track their own personal wellness information. It does not facilitate patient-provider conversations, is not intended for providers to submit patient records, and does not diagnose or provide medical advice. GutSync does not send Messenger marketing and does not send a fallback message after Meta reports that the standard messaging window has closed.
Data Retention, Disconnect, and Deletion
GutSync keeps your account data, saved conversations, entries, and attachments while your account remains active. Some in-app controls remove records from active views; the account-deletion process below is the full user-scoped data deletion path. One-time chat-link tokens expire after 15 minutes. Temporary message delivery and processing state is short-lived and expires automatically after no more than 30 days. Operational logs are designed to redact free-text health content, although they may contain account or technical identifiers.
Disconnect Messenger without deleting GutSync
Sign in and choose Settings → Integrations → Messenger → Disconnect. This revokes the active Messenger-to-GutSync link and stops GutSync from using it for future account access or delivery. Disconnecting does not delete entries or conversations already saved in GutSync, does not delete Meta’s copy of the Messenger conversation, and leaves a revoked link record until you delete your GutSync account.
Delete your GutSync account and associated data
- Sign in to GutSync and open Settings.
- Choose Security, then Delete account.
- Type DELETE and confirm the permanent deletion.
Account deletion removes your GutSync identity and starts a background cascade that removes the Messenger Page-scoped link and link tokens, saved chat threads and messages, stored attachments, structured entries, memories, insights, contexts, cases, reminders, and other user-scoped application records. If you cannot sign in, request deletion through the Contact page or email [email protected].
Deleting your GutSync account does not delete messages retained by Meta in Messenger. Stripe may retain transaction and billing records for legal, accounting, fraud-prevention, and dispute purposes. Other processors may retain limited security logs or backup copies under their own retention schedules and legal obligations.
Third-Party Services
GutSync relies on a small set of vetted service providers to operate. Each processes your data only to provide its service to GutSync, under its own privacy policy:
- Meta — Facebook Messenger channel delivery, if you choose to connect Messenger. Meta retains the original Page conversation under its own terms.
- Stripe — payment processing
- Authentication provider — account sign-in, sessions, and identity management
- Cloud infrastructure providers — database, file storage, application hosting, and network delivery and security
- Email delivery provider — transactional email such as receipts and account notifications
- AI model providers — processing of your entries, photos, and conversations to provide automated tracking and insights. GutSync selects the model server-side.
- Web search provider — used when an AI feature you invoke needs external research
A current list of our service providers is available on request at [email protected].
Data Security
We take reasonable measures to protect your information. GutSync uses TLS/HTTPS for data in transit, access controls for production systems, provider and hosting safeguards for stored data, webhook signature verification, and server-side secret management. Logging is configured to redact common credential fields and free-text health-content fields.
However, no method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Your Rights & Data Control
You have the right to:
- Export your data — download all of your health data in CSV or JSON format
- Disconnect or delete your account — follow the public data-deletion instructions at any time
- Request access or correction — contact us to request access to or correction of your personal data
To exercise any of these rights, contact us at [email protected].
Children’s Privacy
GutSync is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.
Cookies & Analytics
We use essential cookies for authentication and session management. These are necessary for the service to function. We may also collect basic analytics data to understand how the service is used and to make improvements. We do not use third-party advertising cookies.
Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify you via email or through an in-app notification. Your continued use of GutSync after changes are posted constitutes acceptance of the updated policy.
Contact
If you have questions about this privacy policy or how we handle your data, reach out at [email protected] or visit our Contact page.