UCInsights ("the App", "we", "us") is a personal health companion for people living with ulcerative colitis (UC). It helps you log daily symptoms, track medications and doctor visits, explore health trends, chat with an AI assistant, and search peer-reviewed research — all in one place, across all your devices.
This Privacy Policy explains what information UCInsights collects, why we collect it, how it is stored and protected, with whom it may be shared, and the choices you have. By creating an account or using the App you agree to the practices described here.
UCInsights is developed and published by:
org.ucinsight.UCInsightsFor privacy questions, data requests, or account deletion, contact us at the email above. We will respond within 30 days.
To enable cross-device sync and data backup, UCInsights requires an account. When you register, we collect:
| Data | Source | Purpose |
|---|---|---|
| Email address | You provide it, or it comes from Google / Apple Sign In | Account identification, login, password recovery |
| First and last name | You provide it during registration | Personalise the app experience |
| Age (optional) | You provide it during registration | Contextualise health insights |
| Gender | You select it during registration | Contextualise health insights |
| Country (optional) | You provide it during registration | Regional health information |
| Authentication provider token | Google or Apple, when you use those sign-in options | Verify your identity securely without storing your password |
The following data is collected when you log entries in the App. It is stored on your device and synced to your secure cloud account so you can access it across devices:
| Data type | What it contains |
|---|---|
| Daily health log | Overall feeling score, bowel movement count, symptom names and severity, foods eaten, medications taken, stress level, sleep times, water intake, physical activity, free-text notes |
| Medication list | Medication names, doses, schedules, and taken/not-taken records |
| Doctor visits | Visit date, doctor or clinic name, notes from the appointment |
| UC Profile | Diagnosis status, UC type, bowel movement baseline, current medications, lab values if entered (CRP, calprotectin, endoscopy score) |
When you use search or chat features, text you type is sent to external APIs. No health log or personal profile data is ever included in these requests.
| What is sent | To whom | Why |
|---|---|---|
| Search queries and chat messages | AI language model (custom) | Generate responses and summaries |
| Medical keywords | NCBI / PubMed | Retrieve peer-reviewed research |
| Search keywords | Reddit, Inc. | Surface community discussions |
| Standard HTTP request (no personal data) | Google News RSS | Display current UC news |
We do not collect device identifiers, advertising IDs (IDFA/GAID), precise location, crash logs, or behavioral analytics. The App contains no analytics SDKs or advertising frameworks.
UCInsights uses Supabase as its backend cloud provider to store your account and health data. Supabase is an open-source Firebase alternative built on PostgreSQL and hosted on AWS infrastructure.
You may sign in using your email and password, or via a third-party identity provider. When you use a social login, that provider authenticates you and sends a secure token to Supabase — we never see your social account password.
When you tap "Continue with Google", you are redirected to Google's authentication page. Google confirms your identity and returns your email address and a secure token. We store your email; we do not receive or store your Google password, contacts, or any other Google account data.
When you tap "Continue with Apple", Apple authenticates you natively. Apple may provide a real or anonymised email address (your choice). We store whichever email Apple returns. We do not receive your Apple ID password or any other Apple account data.
Your health data is:
UCInsights does not integrate with Apple HealthKit or Google Fit. Your logs within UCInsights are separate from and do not interact with your device's health apps.
The iOS App's PrivacyInfo.xcprivacy manifest declares:
Your health data is retained for as long as your account exists, so it remains available to you across devices. You can delete individual log entries at any time from within the App.
You can request full account and data deletion at any time by emailing info@ucinsights.org with the subject line "Delete My Account". We will permanently delete your account and all associated health data from Supabase within 30 days and confirm by email.
Text sent to our AI model, PubMed, Reddit, and Google News may be retained by those services per their own policies. UCInsights does not control third-party data retention.
Under GDPR you have the right to:
Legal basis for account and health data: contract performance (you signed up for cloud sync). Legal basis for search queries to third parties: your consent when you initiate a search.
California residents have the right to know what personal information is collected, the right to delete it, and the right to opt out of sale. UCInsights does not sell personal information. Contact info@ucinsights.org to exercise your rights.
Users in Turkey are protected under Law No. 6698. You have the right to learn whether your data is processed, request information about it, and request correction or deletion. Contact info@ucinsights.org for any KVKK request.
UCInsights is not directed at children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has created an account, contact info@ucinsights.org and we will delete the account promptly.
While we take commercially reasonable precautions, no system is completely secure. We encourage you to use a strong password and keep your device software up to date.
| Service | Purpose | Data sent |
|---|---|---|
| Supabase | Cloud database & authentication backend | Account info, health data (encrypted) |
| Google Sign-In | Optional social authentication | Email address, auth token |
| Apple Sign In | Optional social authentication | Email address (or anonymised relay), auth token |
| AI language model | Chat and search summaries | Text of your queries only |
| NCBI / PubMed | Research article retrieval | Medical search keywords |
| Community discussions | Search keywords | |
| Google News RSS | UC news headlines | Standard HTTP request, no personal data |
We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will post a notice within the App. Continued use after any update constitutes acceptance of the revised policy.
The current version is always at ucinsights.org/PrivacyPolicy.html.
We respond to all requests within 30 days.