Privacy policy.

1. Who we are

PureBariatric is an educational platform operated by 2800977 Alberta Inc., an Alberta corporation. We publish educational content and free tools for people on the bariatric journey, people using GLP-1 medications, and people focused on long-term metabolic health. PureBariatric is not affiliated with, endorsed by, certified by, or partnered with ASMBS, Obesity Canada, Alberta Health Services, or any clinical, regulatory, or professional organization.

This policy applies to purebariatric.com, the PureBariatric Nutrition Journal web app, and any future PureBariatric mobile applications.

2. What information we collect

Information you give us

• Contact information if you email us, sign up for launch notifications, or contact support — typically your email address and any details you choose to share in your message.
• Tool inputs you type into our calculators (such as weight, height, biological sex, or bariatric procedure) are processed entirely in your browser. We do not transmit these values to our servers or store them on our systems.
• Journal app data (meals, hydration, weight entries, supplements, and every other tracked metric) is stored locally on your device using your browser’s local storage. We do not upload, transmit, or back up this data. If you clear your browser storage or switch devices, this data does not follow you.
• Coach conversations (the messages you send to and receive from our AI Coach) are stored on our servers so Coach can remember the thread of your conversation. See Section 4 below. You can delete your Coach history at any time from the Coach settings menu, and doing so is immediate and permanent.
• Red-flag safety events — if you log a symptom or write something in Coach that our safety system flags as needing urgent attention, we record the fact that a flag was raised (category, date, unresolved/resolved status) on our servers. This is an audit trail we cannot let you delete on your own, for the same reason a clinic keeps incident records. See Section 5 below.
• Subscription status, if you have a paid subscription: your email address, subscription tier (free / Pro), and Stripe customer ID. Payment card details are held by Stripe, not by us.
• Wearable and Apple Health data, if you choose to connect a device: data from Fitbit, Garmin, Oura, Withings, Whoop, or a manually uploaded Apple Health export passes through our servers on its way to Coach. See Section 6 below.
• Coaching intake data, if and when paid coaching services are offered: name, contact information, health goals, relevant medical/bariatric history you choose to share, and any consent forms you complete. This is described in a separate Coaching Privacy Notice provided at intake.

Information collected automatically

• Standard log data: IP address, browser type, device type, pages visited, referring website, and timestamps. Collected by our hosting provider (Netlify) for security and operations.
• Analytics: aggregated usage information via Google Analytics 4 (property G-K5LG6QYC32), including page views, session duration, geographic region (country/region, not precise location), and device category. We use IP anonymization where supported.
• Advertising: if Google AdSense (publisher ID ca-pub-8503575792925724) is shown on a page, Google may use cookies to serve ads. We also use advertising pixels from Reddit (Reddit Pixel ID a2_jic3l68ddmip) and Meta / Facebook (Meta Pixel ID 1040409965318727) to measure the effectiveness of our advertising campaigns and to reach relevant audiences. Where you have consented to advertising cookies, these pixels may collect hashed (SHA-256) identifiers — such as your email address or phone number if you submit a form — that we and the advertising platform use only to match your interaction with a marketing campaign for measurement purposes. Raw email addresses and phone numbers are never sent; the hash is a one-way transformation. All advertising pixels are gated by the cookie banner and by our Consent Mode v2 defaults (all advertising storage is denied until you explicitly consent).

3. What stays on your device vs. what reaches our servers

We designed PureBariatric to keep as much of your data on your device as possible. This table is the single source of truth for what leaves your device:

4. Coach conversations

When you use PureBariatric Coach, the messages you send and the responses you receive are stored on our servers so Coach can maintain the thread of your conversation across sessions.

• What we store: the text of each message, the timestamp, and (for long conversations) a rolling summary of older turns that Coach uses to remember earlier context. We do not store voice or images unless you explicitly attach them.
• Where we store it: Supabase (a Postgres-based backend), hosted in the US-West (Oregon) region. Row-level security ensures only you can read your own conversations. Because this is a US-based data centre, your information leaves Canada; see Section 13 (Provincial and international notes) for what that means for your rights.
• How we use it: only to run Coach for you. We do not read Coach conversations manually. We do not use Coach conversations to train third-party AI models. Coach responses are generated by Anthropic’s Claude API. Under Anthropic’s current commercial terms, inputs and outputs may be retained by Anthropic for up to 30 days for abuse monitoring and are not used to train their models. Anthropic’s data retention policy applies to that step and is independent of our own storage of your conversation history.
• How long we keep it: until you delete it. Coach conversations do not age out automatically.
• How to delete it: open the Coach interface, tap the settings menu (gear icon), and choose Delete my Coach history. Deletion is immediate and permanent — we do not keep backup copies. You can also email privacy@purebariatric.com to request a full deletion.

5. Red-flag safety events

PureBariatric Coach and the journal include safety guardrails. If you describe a symptom pattern or write something that our safety layer identifies as needing urgent medical attention (for example, signs of a bowel obstruction, severe dehydration, or an eating-disorder-adjacent pattern), Coach will show you an escalation message and we will record the event on our servers.

• What we store: the flag category (e.g. “symptoms”, “mental_health”), the source (journal entry or Coach chat), the raw text of what triggered the flag, and whether the flag has been marked resolved.
• Why we cannot let you delete these directly: the same reason a clinic keeps an incident log. Red-flag events exist so that if you later want to share your safety history with a care provider — or if you ever raise a concern that we mishandled a warning — there is an auditable record of what happened and when. Letting the user delete their own safety history would defeat the point of having one.
• What you can do: you can mark a flag as resolved (and add a note). You can request the full deletion of your account — including red-flag events — by emailing privacy@purebariatric.com. We respond within 30 days.
• What we do NOT do: we do not send red-flag events to your care team, insurer, employer, or anyone else. You control what you share. Red-flag events are visible only to you (and to us for the purpose of running the audit trail).

6. Wearable and Apple Health data

If you choose to connect a wearable (Fitbit, Garmin, Oura, Withings, Whoop, Google Fit, or others), or if you upload an Apple Health export from your iPhone, that data reaches our servers so Coach can reason about it.

• How the connection works: we use a service called Terra (tryterra.co) that aggregates connections to dozens of wearables through a single integration. When you connect a device, you authorize the device provider (Fitbit, Garmin, etc.) to share data with PureBariatric via Terra. You can revoke this at any time from the device settings screen inside PureBariatric or from the device provider’s own settings.
• Apple Health specifically: because Apple does not permit direct HealthKit access from a web app, connecting Apple Health requires you to export your Health data from the iPhone Health app (Profile → Export All Health Data) and upload the resulting .zip file to PureBariatric. We parse the file to extract weight, steps, sleep, and heart-rate metrics for use in Coach.
• What we store from wearable/Apple Health data: nothing permanent. Data passes through our servers, Coach uses it in the current conversation and any longitudinal analysis you request, and the raw values are discarded. Apple Health .zip uploads are deleted within 24 hours of upload.
• What we do NOT do: we do not send your wearable data to advertisers, insurers, employers, or third parties. We do not use it to train AI models. We do not enrich a profile of you across sessions.
• Provider privacy policies: the wearable providers you connect (Fitbit, Garmin, Oura, Withings, Whoop, Google Fit, etc.) have their own privacy policies governing how they collect and use your data. Read their policies before you connect them.

7. How we use information

• To operate and improve the website and educational tools
• To respond to your inquiries and provide support
• To send launch announcements or product updates you have explicitly subscribed to
• To monitor site performance, detect abuse, and protect site security
• To meet our legal and regulatory obligations

We do not use personal information for automated decision-making that produces legal or similarly significant effects about you.

8. Legal basis for processing

Depending on your location, the legal basis for processing your information is one or more of:

• Your consent — for analytics cookies, advertising cookies, and email subscriptions
• Performance of a contract — if you become a coaching client
• Legitimate interests — operating, securing, and improving the site (balanced against your privacy rights)
• Legal obligation — responding to lawful requests or meeting regulatory duties

9. Who we share information with

We do not sell personal information. We share limited information only with:

• Hosting and infrastructure providers: Netlify (web hosting, US), Cloudflare (edge network, global), Supabase (Coach conversations, red-flag events, subscription records — hosted in the US-West / Oregon region)
• AI providers: Anthropic (Claude API) for Coach message generation — under Anthropic’s current commercial terms, inputs and outputs may be retained by Anthropic for up to 30 days for abuse monitoring and are not used to train their models. OpenAI (GPT-4o vision) for food-photo scanning, when you use the scan feature.
• Wearable device aggregators: Terra (tryterra.co), when you connect a wearable device. Terra’s privacy policy governs how they process device data.
• Analytics providers: Google Analytics 4 (Google LLC)
• Advertising providers: Google AdSense (Google LLC), Reddit Inc. (via the Reddit Pixel and Reddit Conversions API), and Meta Platforms Inc. (via the Meta Pixel) — only where applicable and only if you have consented to non-essential cookies. These providers may receive hashed identifiers as described in Section 2.
• Email and communication tools: limited to delivering the messages you have requested
• Payment processors: Stripe, when paid products or coaching services are offered (Stripe’s privacy policy governs payment data)
• Legal and regulatory authorities: where required by Canadian law or a valid legal process

10. Cookies and analytics

PureBariatric uses two categories of cookies and similar technologies:

• Strictly necessary: required for the site to function (such as remembering your dark-mode preference). These do not require consent.
• Analytics and advertising (non-essential): used to understand site usage (Google Analytics 4, deployed via Google Tag Manager container GTM-57GHBTT2) and, where applicable, serve and measure advertising (Google AdSense, Reddit Pixel, Meta Pixel). These require your consent in the European Economic Area, the United Kingdom, Quebec, and other jurisdictions that require it. You can accept, reject, or change your preferences at any time using our cookie banner.

You can also block or delete cookies via your browser settings, install a tracking-prevention browser extension, or use Google’s opt-out tools at tools.google.com/dlpage/gaoptout.

11. How long we keep information

• Email correspondence: retained for up to 24 months after the last contact, unless a longer period is required by law.
• Launch-notification subscriptions: until you unsubscribe.
• Analytics data: per Google Analytics retention settings (default 14 months).
• Tool inputs and Journal data: stored only on your device. You control retention by clearing your browser storage at any time.
• Coach conversations: retained until you delete them from the Coach settings menu. We do not age them out automatically.
• Red-flag safety events: retained as an ongoing audit trail. Removed only via full account deletion (email privacy@purebariatric.com).
• Wearable data: not stored. Data is used in the current Coach session and discarded.
• Apple Health .zip uploads: deleted within 24 hours of upload.
• Coaching records: retained as required by professional and regulatory standards. Detailed in the Coaching Privacy Notice provided at intake.

12. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information (subject to legal retention obligations)
• Withdraw consent at any time, where consent is the legal basis
• Object to or restrict certain processing
• Data portability — receive your information in a structured, commonly used, machine-readable format
• File a complaint with a privacy regulator (see Section 18)

Self-service tools: from your account page you can (a) export your data as a JSON file and (b) permanently delete your account and every server-side record we hold about you. Both flows use a single-use link emailed to you; deletion additionally requires an explicit click-through on the linked confirmation page. Deletion refuses if you have a live App Store or Google Play subscription — cancel it in-store first. For anything not covered by the self-service tools (or if you would like your Stripe customer profile removed at our payment processor too), email privacy@purebariatric.com. We respond within 30 days.

13. Provincial and international notes

Alberta residents

We comply with Alberta’s Personal Information Protection Act (PIPA). If applicable, we also comply with the Health Information Act (HIA). Complaints can be made to the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.

British Columbia residents

We comply with BC’s Personal Information Protection Act. Complaints can be made to the Office of the Information and Privacy Commissioner for BC at oipc.bc.ca.

Quebec residents

We comply with Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25. Our Privacy Officer is the Director of 2800977 Alberta Inc., reachable at privacy@purebariatric.com. We do not currently use personal information for automated decision-making that produces a significant effect on you. Complaints can be made to the Commission d’accès à l’information du Québec at cai.gouv.qc.ca.

Other Canadian residents

We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Complaints can be made to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Cross-border data transfers (important for all Canadian residents)

PureBariatric’s Coach conversation database, red-flag safety event log, and subscription records are hosted on Supabase in the US-West (Oregon) region. This means your Coach conversations and any red-flag events are stored on servers physically located in the United States and are subject to US law, including potential access requests from US authorities. We chose a US region because our infrastructure providers do not currently offer a Canadian data centre at a comparable service level. If this matters to you, do not use Coach and do not create an account; the rest of the site (educational content, calculators, journal) works entirely on your device and does not transfer any data to the US. We continue to comply with Canadian privacy law regardless of storage location.

European Economic Area / United Kingdom residents

If you are in the EEA or UK, we process your information under the General Data Protection Regulation (GDPR) or the UK GDPR. The data controller is 2800977 Alberta Inc. We do not currently have an EU/UK representative because we do not target EU/UK residents; if you choose to use our publicly available educational content, your information is processed in Canada and (for Coach) the United States. You may lodge a complaint with your local supervisory authority.

United States residents

PureBariatric is operated from Canada. We do not currently market coaching services to US residents. Educational content is publicly available worldwide. If you are a California resident, you have rights under the CCPA/CPRA equivalent to those described in Section 12.

14. Health information

PureBariatric handles health-relevant information in three ways, each with a different privacy posture:

• Journal data, calculator inputs, and tracked metrics stay on your device. Weight, meals, hydration, supplements, and every other metric you log are stored only in your browser’s local storage. We do not transmit or back up this data. If you clear your browser storage, it is gone.
• Coach conversations reach our servers. If you tell Coach about a symptom, a medication, a surgical procedure, or a mental-health concern, that text is stored on our servers (Supabase, US-West / Oregon) so Coach can maintain the thread of your conversation. You can delete your Coach conversations at any time from the Coach settings menu. See Section 4 for full details.
• Red-flag safety events are recorded as a safety audit trail. If you or Coach flag a symptom pattern needing urgent attention, we record the fact of the flag (category, timestamp, resolved/unresolved) on our servers. This is not deletable directly — it is removable only via full account deletion. See Section 5 for full details.

If we offer paid coaching services in the future, any health information you share during coaching will be governed by a separate Coaching Privacy Notice, provided to you in writing before you enroll, including:

• What categories of health information are collected
• How long records are retained (consistent with the standards of the College of Registered Nurses of Alberta)
• Where records are stored and who can access them
• Your rights of access, correction, and withdrawal

15. Security

We use technical and organizational safeguards appropriate to the sensitivity of the information we hold, including encryption in transit (HTTPS), restricted administrative access, and reputable service providers. No system is completely secure; if we ever experience a privacy breach that creates a real risk of significant harm, we will notify affected individuals and the relevant authorities in accordance with applicable law.

16. Children

PureBariatric is intended for adults age 18 and over. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA). If you believe a child has provided personal information, please contact privacy@purebariatric.com and we will delete it.

17. Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the “Effective date” at the top of the page and, where appropriate, notify subscribers by email. The current version is always available at purebariatric.com/privacy.

18. Contact and complaints

Privacy questions, requests, and complaints:

• Email: privacy@purebariatric.com
• Mailing address: 2800977 Alberta Inc., Alberta, Canada (full address available on request)

If you are not satisfied with our response, you may contact the privacy regulator in your jurisdiction (see Section 9).