Effective date: October 22, 2026
Health data is also covered by our Consumer Health Data Privacy Policy.
GI Studio ("the App") is committed to protecting your privacy. This policy describes what data we collect, how we use it, and your rights regarding that data.
Health data you enter: Meal logs, bowel movement records, symptom reports, medication tracking, expense logs, and daily check-ins.
Health data you choose to import: If you connect Apple Health, the App reads your resting heart rate, heart rate variability, sleep and weight. If you connect Withings, it imports your weight and sleep data, including heart rate and breathing rate during sleep. If you connect Strava, it imports your activities, such as distance, moving time and heart rate. Nothing is imported from a service you have not connected.
Account information: Email address and authentication provider (Apple, Google, Facebook, or email). We store the minimum required to identify your account.
Device information: We collect your device timezone for accurate timestamp display. We do not collect device identifiers.
Location: If you set a home location, its coordinates are stored only on your phone, and Apple's map service is used to show you its street address. When you log a meal, the App compares your current position with home on your phone and saves only whether you were home or away. Your coordinates are not sent to us.
Usage and crash data: We record app events, such as screens opened, logs saved, error counts and the app version, to understand how the App is performing. A few events name a food or FODMAP group together with a result from your reintroduction. When the App crashes or freezes, iOS gives it a crash report with technical details, such as the device model, the iOS version and where in the App’s code the problem happened, and the App sends that report to us. These events and reports are linked to your account. They do not include your photos or the text you type. You can turn this off in Settings → Privacy → Share usage and crash data. While it is off, the App sends no usage events or crash reports.
Photos: If you attach photos to meal logs, they are stored securely and associated with your account. They are shown back to you and are not shared, with one exception: if you turn on an AI provider in Settings and ask it to analyze a meal, the photo is sent to that provider (see section 5).
We do not use your data for advertising, marketing, or training AI models.
Your data is stored in Supabase (hosted on AWS infrastructure). All data is protected by:
Sensitive credentials (API keys, authentication tokens) are stored in your device's secure Keychain, not in plain text.
We do not sell, rent, or share your personal health data with any third party. Your data may be processed by the following service providers solely to operate the App:
Sharing with your clinician: You can create a PDF report in the App and send it yourself through your phone's share sheet, for example by email or Messages. GI Studio does not send it for you. Once you send it, the recipient keeps their own copy.
Shared lists: If you share a grocery list by link, anyone who has the link can view that list without signing in.
GI Studio is a self-tracking tool and is not a medical device. FODMAP scores, meal-sensitivity estimates, and correlation insights shown in the App are generated by AI and statistical models. They are informational only, not medically validated, and not a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified clinician before changing your diet, medications, or treatment plan based on information in the App.
Your account identity (email, sign-in method, subscription status) is held by Supabase's authentication service. Your health records are stored in separate database tables, linked to your account by an internal ID.
Your health data is kept while your account is active. When you delete an entry in the App:
To delete your account and all of its data, use Settings → Delete Account & Data in the App. This permanently removes your health data, your meal photos and your sign-in. It cannot be undone.
If you share a household meal plan with someone, the App cannot delete your account on its own, because doing so would also remove the other person's plan. Email us and we will handle it.
If you joined as a beta tester, we keep a record of your email address and tester status after deletion. It contains no health data.
To permanently erase individual deleted entries without deleting your account, email bill@gistudio.app. We will tell you when it is done.
You have the right to:
To exercise these rights, use the in-app settings or contact bill@gistudio.app.
In the event of a data breach affecting your personal health data, we will notify affected users via email within 72 hours of discovery, in compliance with the FTC Health Breach Notification Rule. The notification will include: what data was affected, what we are doing to address the breach, and what steps you can take to protect yourself.
GI Studio is not intended for use by children under the age of 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this privacy policy from time to time. Material changes will be communicated through the App or via email. The effective date at the top of this page indicates when the policy was last revised.
For privacy-related questions or data deletion requests, contact us at bill@gistudio.app.