Privacy Policy

Introduction

Holystic Health (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at holystichealth.app and use our services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our website. By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last updated” date at the top of this page. You are encouraged to review this Privacy Policy periodically to stay informed of updates.

The Holystic Health Mobile App

In addition to this website, we offer the Holystic Health mobile app, which turns the ingredients you already have into healthy meal ideas. This section describes how the app handles your information. In the app we do not sell your data, show ads, or use third-party advertising or analytics trackers.

Using the app without an account

You can use the app as a guest, without providing your email or creating an account. In guest mode, your preferences, saved recipes, and shopping list are stored only on your device.

Information the app collects

• Email address — only if you choose to save your profile. We use it solely to sign you in (via a one-time link or 6-digit code), never for marketing.
• Your preferences — the communication tone, dietary style, health intention, and any “foods to avoid” you enter, so the app can tailor meal suggestions.
• Saved recipes and shopping list — the meals you save and items you add.
• Basic usage events — for example, that a meal was generated or a recipe was saved, along with a session identifier and whether you are a guest. This does not include the content of your meals.
• Approximate technical data — your device’s IP address is used transiently to prevent abuse and enforce fair-usage limits.

Photos of your ingredients

When you photograph your fridge or pantry, the image is sent securely to our AI processing provider to identify the food items in it. The photo is not stored — it is processed to return a list of ingredients and then discarded. We keep only the resulting ingredient names for your session.

App service providers

• Supabase — database, authentication, and secure backend functions.
• Anthropic — the AI that identifies ingredients from your photos and generates meal suggestions. Photos and ingredient text are sent for processing, are not stored by us, and are not used to train models.
• Resend — delivers your sign-in emails.

Deleting your app data

You can permanently delete your account and associated data at any time from within the app (Profile & Settings). This removes your profile, saved recipes, and shopping list from our systems. Guest data lives only on your device and is removed when you delete the app.

Health information

Meal suggestions are offered as general inspiration and are not medical or nutritional advice. Any dietary preferences or “foods to avoid” you enter are used only to tailor suggestions; the app cannot guarantee a meal is free of a given ingredient, so always check ingredients yourself.

Information We Collect

Information You Provide Directly

We may collect personal information that you voluntarily provide when you:

• Contact us through our contact form or by email
• Sign up to receive updates or newsletters
• Create an account or register for our services (when available)
• Respond to surveys or questionnaires
• Communicate with us in any other way

The personal information we collect may include your name, email address, and any other information you choose to provide, such as health goals or preferences you share with us.

Automatically Collected Information

When you visit our website, certain information is automatically collected by our servers and third-party analytics services. This may include:

• Your IP address and approximate geographic location (country, region, or city)
• Browser type and version
• Operating system and device type
• Pages visited, time spent on each page, and referral URLs
• Date and time of your visit
• Other diagnostic and performance data

Cookies and Tracking Technologies

Our website may use cookies, web beacons, and similar tracking technologies to enhance your experience and help us understand how our site is used. You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our website.

We may use the following types of cookies:

• Essential cookies: Required for the website to function properly
• Analytics cookies: Help us understand how visitors interact with our website (e.g., Cloudflare Web Analytics)
• Preference cookies: Remember your settings and preferences

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Send you updates, newsletters, or other communications you have requested
• Improve and optimize our website and services
• Understand how visitors use our website through analytics
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations
• Fulfill any other purpose with your consent

We will not use your personal information for purposes other than those described in this Privacy Policy without your prior consent.

How We Share Your Information

We do not sell, trade, or otherwise transfer your personal information to outside parties for their marketing purposes. We may share your information in the following limited circumstances:

• Service providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting our business, subject to confidentiality agreements. These may include email service providers, hosting providers, and analytics tools.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Protection of rights: We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, investigate fraud, or respond to a government request.
• Business transfers: If Holystic Health is involved in a merger, acquisition, or asset sale, your personal information may be transferred as a business asset. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
• With your consent: We may share your information with third parties for any other purpose with your explicit consent.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your personal information, we will securely delete or anonymize it.

Contact form submissions and email correspondence are generally retained for up to 3 years, unless you request deletion earlier.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information (“right to be forgotten”)
• Portability: Request a machine-readable copy of your personal information
• Objection: Object to certain processing of your personal information
• Restriction: Request that we restrict processing of your personal information
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at our email address. We will respond to your request within 30 days.

If you are located in the European Economic Area (EEA) or United Kingdom and believe we have not addressed your privacy concerns satisfactorily, you have the right to lodge a complaint with your local data protection authority.

Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, alteration, and disclosure. Our website is delivered over HTTPS with TLS encryption. We use Cloudflare’s infrastructure, which provides additional security layers.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You provide your personal information at your own risk.

Third-Party Websites and Services

Our website may contain links to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

Children’s Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at our email address and we will take steps to delete such information.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your California privacy rights, contact us at our email address.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your country of residence. By using our services, you consent to the transfer of your information to these countries. We take appropriate steps to ensure that your personal information receives an adequate level of protection wherever it is processed.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Last updated” date. For material changes, we may also provide additional notice, such as sending an email notification if we have your email address.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or your personal information, please contact us:

• Email: our email address
• Website: holystichealth.app/contact