Privacy Policy

Version 2026-06-01 · Cohivio

1. What We Collect

We collect information you provide directly: name, email, phone number, date of birth, biological sex, dietary preferences, allergies, intolerances, meal logs, and notes.

2. How We Use It

Your data powers your personal nutrition tracking experience. We do not sell your data. Health data is shared with your care team only when you explicitly consent.

3. Consent & Control

You choose whether to share your health data with a linked dietitian or partner. You can change your sharing preferences at any time in Settings. All consent changes are recorded in an append-only ledger for your protection.

4. Third-Party Services

We use Supabase for authentication and data storage. For grocery-list generation, only dish names (never personal information) are sent to a generative-AI service.

5. Data Retention

Your data is retained as long as your account is active. If you delete your account, all personal data is removed. De-identified audit records (containing only UUIDs with no personal information) may be retained for compliance.

6. Data Export

You can download a complete export of your personal data at any time from your Settings page.

7. Security

We use row-level security, encrypted connections, and server-side-only access to sensitive keys. Service-role credentials are never exposed to the browser.

8. Changes

We may update this policy. Material changes will be communicated via the app with an updated version date.