Privacy Policy
This Privacy Policy explains how RajaPrabha LLC ("Gutman," "we," "us") collects, uses, shares, and protects information when you use the Gutman application and related services (the "Service").
1. Information We Collect
Account information. When you sign up with Continue with Apple or Continue with Google, we receive an identifier and your email address, and (where available) your name. With Sign in with Apple you may choose to hide your email, in which case we receive a private relay address.
Profile information you provide. Optional details you enter, such as gender, age, height, weight, ethnicity, hometown, home country, nutrition goals, and any health conditions you choose to record (for example, diabetes or digestive conditions). Health-condition information is sensitive; you choose whether to provide it, and it is used only to tailor in-app guidance.
Child profiles you create. If you use Profiles to manage nutrition for a child, you provide the child's first name or nickname, date of birth (used to calculate age), and gender, and you log meals, water, and chat for that child. You create and manage these profiles as the child's parent or legal guardian, and you acknowledge that role and provide consent when creating a child profile. The child does not create an account or sign in.
Gutman ID (GID). Each account and profile is assigned a short, randomly generated code (a "GID"). It is not derived from your name, email, or any other personal detail. Its only purpose is to let you invite or share a profile with another parent without revealing your email address.
Meal and usage content. Meals you log by text, photo, or voice; the nutritional breakdowns generated for them; your chat messages with the AI assistant; and your progress over time.
Apple Health (HealthKit) data. If you grant permission, we read certain values from Apple Health (such as biological sex, height, weight, active energy, and blood glucose from a connected CGM) to personalize calculations and to show your measured post-meal glucose response alongside our estimate. We access this data only with your consent, use it solely to provide app features, and do not use Health data for advertising or sell it. You can revoke access at any time in the Health app or iOS Settings.
Device and diagnostic data. Operational metrics and logs (such as feature latency, success/failure of operations, and engagement counts) used to monitor reliability and improve the Service.
On-device only data. Some features are computed and kept only on your device and are not uploaded to us. For example, the Metabolic Age estimate is calculated locally on your device and stored on-device; we do not collect or store it in the cloud.
We do not intentionally collect precise location, contacts, or payment card details. Any subscription purchases are handled by the Apple App Store, not by us.
2. How We Use Information
- Provide core features: meal logging, AI nutritional analysis, coaching, progress analytics, and notifications.
- Authenticate you and keep your data isolated to your account.
- Personalize guidance based on your goals and any health conditions you enter.
- Operate, secure, monitor, debug, and improve the Service.
- Communicate with you about the Service.
- Comply with legal obligations and enforce our Terms.
We do not use your personal content to serve third-party advertising, and we do not sell your personal information.
3. AI Processing
To generate nutritional estimates and coaching, the meal text, images, and relevant context you submit are sent to a third-party AI provider (Google Gemini) through our secured server-side proxy. To personalize coaching and to explain how your targets or estimates were calculated, we also send the active profile's body metrics (age, height, weight, and gender), your current nutrition targets, and the method used to compute them. For a child profile, we send only de-identified age and gender, and never the child's name, date of birth, or GID. We transmit only what is needed to produce a response. Do not submit information you do not want processed by an AI provider. AI output may be inaccurate; see our Terms for important disclaimers.
4. How Information Is Stored and Shared
Hosting. Your data is stored using Amazon Web Services (AWS) in the US West (Oregon, us-west-2) region, with access scoped per user.
Service providers we share with, only to operate the Service:
- Amazon Web Services — authentication (Cognito), API (AppSync), database (DynamoDB), serverless compute (Lambda), and monitoring (CloudWatch).
- Google — federated sign-in and AI processing (Gemini).
- Apple — Sign in with Apple and HealthKit (on your device).
We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer, subject to this Policy. We do not sell personal information.
Sharing a profile you manage. You may share a child profile with another parent or guardian by entering their email address or GID. Before sending, we show that person's display name so you can confirm you have the right recipient. If they accept, they can see that child's meals and water; your AI coaching chat for that child is shared only if you explicitly turn on that option when sharing. Either of you can stop sharing at any time, which removes the other guardian's access. We share this information only to provide the feature you requested.
5. Data Retention
- Chat history: retained for approximately 7 days, then automatically deleted.
- Operational metrics/logs: retained for approximately 30 days, then automatically deleted.
- Meals and profile: retained while your account is active.
- Account deletion: when you delete your account, we schedule deletion with a grace period (currently 30 days). Signing back in during that period cancels deletion. After the grace period, your meal logs, chat history, metrics, profile, and authentication identity are permanently removed. Residual copies may remain briefly in backups or where retention is legally required.
6. Your Rights and Choices
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing.
- Access/update: edit your profile and goals in the app.
- Delete: use "Delete Account" in the app, or contact us.
- Health data: manage or revoke HealthKit permissions in the Health app or iOS Settings.
- Requests: contact us at support@gutman.app. We will respond as required by applicable law. For EEA/UK users, our legal bases include performing our contract with you, your consent (e.g., health data and HealthKit), and our legitimate interests in operating and securing the Service. You may also lodge a complaint with your data protection authority.
7. Security
We use measures such as per-user authorization, encryption in transit, server-side handling of secrets and API keys, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children's Privacy
Gutman does not allow children to create their own accounts, and the Service is not directed to children as independent users. A parent or legal guardian may, however, create and manage a nutrition profile for their own child, including a child under 13, from the parent's own account. When you create a child profile you confirm that you are the child's parent or legal guardian and you consent to our collection and use of that child's information to track their nutrition, consistent with the U.S. Children's Online Privacy Protection Act (COPPA).
For a child profile we collect only what is needed for nutrition tracking: the name or nickname you provide, date of birth (to calculate age), gender, and the meals, water, and chat you log for that child. We do not require a child's contact information, we do not serve advertising, and we do not sell this information. When our AI generates guidance for a child profile, we send only the child's approximate age and gender to the AI provider. We never send the child's name, date of birth, or GID.
As the managing parent or guardian you can review, edit, or delete a child profile and its data at any time in the app, and you can stop sharing it with any other guardian. To ask questions or request deletion, contact us at support@gutman.app. If you believe a child has provided us information outside of a parent-managed profile, contact us and we will delete it.
9. International Users
Your information is processed and stored in the United States. By using the Service, you understand that your information will be transferred to and processed in the United States, which may have different data-protection laws than your country.
10. Changes to This Policy
We may update this Policy. If changes are material, we will provide reasonable notice (for example, in-app or by email). The "Last updated" date reflects the latest revision.
11. Contact
Questions or requests regarding this Policy or your data: support@gutman.app, RajaPrabha LLC, 113th Ct, Redmond, WA 98052.