Privacy Policy

Built Health is a consumer wellness app for nutrition logging, medication and vitamin tracking, reminders, and symptom notes. It is not a medical device, provider portal, payer workflow, or emergency service, and it never provides medical advice, diagnosis, or treatment instructions.

Data we handle

• Account identifiers from our authentication provider (Supabase Auth).
• Meal logs, nutrition observations, resolved nutrition estimates, evidence trails, and conflicts.
• Barcode lookups and Open Food Facts source payloads, stored separately from your corrections.
• Nutrition-label photos, meal photos, and medication-bottle photos only while they are being processed for OCR or identification — they are analyzed and discarded, not stored.
• Progress photos stay on your device by default and are never uploaded. If you turn on progress-photo backup, they are stored in your private account so a new phone can restore them — readable only by you under row-level security, never shared, never analyzed by AI, and deleted when you delete the photo. That is private storage, not end-to-end encryption.
• Recipe photos — the page’s own image for an imported recipe, or a photo you take or add — are downscaled on your device and kept with the recipe. While you have an account session they are also copied to your private Built Health storage (readable only by you under row-level security; private storage, not end-to-end encryption) so a reinstall gets them back. Deleting the recipe deletes the photo on your device and in storage; deleting your account deletes them all.
• Voice input is transcribed on your device or by your device's operating system; we receive the resulting text, not stored audio recordings.
• Medication, vitamin, dose, injection-site, reminder, refill, and symptom records.
• Health diary entries you write, their AI-generated reflections, and a derived diary memory summary.
• Recipes you save and your food preferences (allergies, dislikes, tolerances).
• Subscription tier and entitlement status.

How data is used

• To resolve meals into nutrition estimates with an audit trail.
• To preserve your daily protein and nutrition history.
• To run medication and vitamin schedules, reminders, refill estimates, and personal symptom notes.
• To organize your diary entries into patterns from your own words, questions to bring to your own doctor, and generic reading topics — never medical advice.
• To meter cost-sensitive AI features and prevent abuse.
• To improve reliability, debug errors, and protect the service.

AI processing (Smart features)

Label OCR, meal-photo identification, meal descriptions, recipe import and generation, medication-label reading, “Just say it” commands, exercise form check, health-diary reflections, and reflection read-aloud are Smart features. They run only after you allow Smart features in the app, and you can turn them off any time in Plan & privacy → Smart features. When you use one, the photo or text you submit to it — plus the context it needs, such as the names of medications you track — goes to Built Health's server-side functions and then to OpenAI, which acts as our service provider (processor): it processes the request and returns the result. Under OpenAI's API policy that data is not used to train its models. We ask OpenAI not to store responses where the API supports it (store:false); OpenAI may still retain API data for up to 30 days for abuse monitoring under its API policy. This data is never used for advertising and never sold. API keys stay server-side and are never shipped inside the mobile app. Barcode lookups use Open Food Facts and medication information uses openFDA / DailyMed; neither receives your photos.

Health diary

Diary entries are private to your account. When you save an entry, Built Health processes the text server-side to produce a reflection (patterns from your own words, questions for your own doctor, generic research topics) and to maintain a derived memory summary so the app can remember your history. Reflections are structured and filtered so they never evaluate your medications, doses, or treatment decisions. When you ask a routine question about items you track, a reflection may include general, label-style information (like “commonly taken in the morning, with or without food”) — always deferring to your doctor's or pharmacist's directions, and never dosing amounts or treatment advice. You can delete any entry, or all diary data — deleting removes entries, reflections, and the derived memory.

What we do not do

Retention and deletion

Meal, medication, symptom, diary, and evidence records are kept until you delete them or delete your account. Photos you scan to log food, nutrition labels, or medications are processed and discarded, not retained on our servers. Two kinds of photos are kept, both in your private storage: progress photos you choose to back up (until you delete the photo or your account), and recipe photos (until you delete the recipe or your account).

Security

Your data is stored behind row-level security with owner-only access policies. Cost-control and entitlement records are server-owned; the app can read your limits but cannot raise its own tier or reset usage meters.

Contact

Delete your account any time in the app: Plan & privacy (gear icon on Today) → Account → Delete account. Other privacy requests, or deletion if you can't open the app: privacy@builthealth.com