Privacy Policy

Who we are

This Privacy Policy applies to the Hemi mobile application (the “App”) and any related services (together, the “Service”), operated by Hemi (“we,” “us,” or “our”). If you have any questions about this policy or your data, contact us at support@tryhemi.com.

Information we collect

We collect only what the App needs to work. This falls into a few categories:

Account information

When you create an account, we collect your email address. If you sign in with Apple or Google, we receive a unique identifier and, depending on your settings, the email address associated with that account. We do not receive your social account password.

Onboarding profile

During setup you may provide health-context information to make your insights more accurate, including: your first name, age or year of birth, sex, height and weight, the condition(s) you are tracking (for example, anal fissures, hemorrhoids, or constipation), how long you have experienced symptoms, current medications or treatments, and whether you have had related surgery. Providing this is optional and you can edit or remove it later.

Health and symptom logs

The core of the App is the data you choose to log, which may include:

• Bowel movement details (whether one occurred, Bristol stool type, straining, sense of incomplete emptying, size).
• Symptoms such as bleeding and its severity, pain level and timing, itching, and mucus discharge.
• Flare episodes and their duration and severity.
• Treatments you use, such as fiber supplements, stool softeners, topical creams, or sitz baths.

Food and nutrition data

When you log a meal, the App produces a short description and estimated macronutrients (carbohydrates, fat, protein, and fiber). Only this derived, text-based data is saved to your account.

Meal photos — analyzed, never stored

Photos of your meals are never uploaded to our storage, saved to our servers, or retained after processing. When you take a photo to log a meal, the image is sent to our secure server only to be analyzed in the moment. The nutrition estimate is returned, and the image is discarded immediately. We keep only the resulting text data described above.

Subscription information

If you purchase a subscription, the transaction is handled by the Apple App Store or Google Play. We receive your subscription status (for example, active or expired) so we can unlock features, but we never receive or store your full payment card details.

Limited technical information

We may process minimal technical information needed to operate the Service securely, such as authentication tokens and basic error diagnostics. We do not use third-party advertising or cross-app tracking SDKs.

How we use your information

We use your information solely to provide and improve the App:

• To create and secure your account and keep you signed in.
• To store the logs you create and show them back to you.
• To generate estimates, insights, streaks, and the doctor report from your own data.
• To send the optional daily reminder, if you turn it on (off by default).
• To respond to your support requests and fix problems.

AI processing

Two features use artificial intelligence: estimating nutrition from a meal photo, and answering plain-language questions about your own logs. These requests are routed through our secure server, which calls a third-party AI provider (Anthropic). For meal analysis, the image is processed transiently and not stored. For questions about your history, the underlying statistics are computed by our own system, and only the specific results needed to phrase an answer are shared with the AI provider. Data sent for processing is not used to train the provider’s models.

How your data is stored and protected

Your data is stored using Supabase, our hosting and database provider. We apply safeguards including:

• Encryption of data in transit (HTTPS/TLS) and at rest.
• Row-level security so that each account can only ever access its own rows of data.
• An optional biometric app lock (Face ID / Touch ID / fingerprint) you can enable to protect the App on your device.

No method of transmission or storage is completely secure, but we work to protect your information using industry-standard measures.

How we share information

We do not sell your personal information, and we do not share it for advertising. We share data only with service providers who help us run the App, and only to the extent needed:

• Supabase — database, authentication, and hosting.
• Anthropic — AI processing for meal analysis and question answering, as described above.
• Apple and Google — sign-in (if you use it) and subscription billing through their app stores.
• RevenueCat — manages your subscription status. It receives a subscription identifier and purchase state, never your health logs.
• PostHog — product analytics, so we can see which features are used. Events are tied to your account identifier only; we never send the contents of your logs, meals, or chats.
• Sentry — crash and error reporting, so we can fix problems. It receives technical diagnostics such as the error, your app version, and device model.

Reminders are scheduled entirely on your own device. They are not push notifications, nothing is sent to a notification server, and no reminder data leaves your phone.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the Service.

Data retention

We keep your data for as long as your account is active. When you delete your account, your logs and profile are permanently removed from our systems, except where we are required to retain limited records to comply with legal obligations. Meal photos are never retained.

Your rights and choices

You are in control of your data. From within the App you can:

• Access and review everything you have logged.
• Export your data as a JSON or CSV file to keep or take elsewhere.
• Correct or update your profile and past entries.
• Delete your account and all associated data permanently.
• Turn reminders and the biometric lock on or off at any time.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. To exercise any of these rights, use the in-app controls or contact us at support@tryhemi.com.

Children’s privacy

Hemi is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us so we can remove it.

International data transfers

Your information may be processed and stored in countries other than the one in which you live, including where our service providers operate. Where required, we take steps to ensure your data receives an adequate level of protection when transferred.

Not medical advice; not a HIPAA-covered entity

Hemi is a personal wellness and tracking tool. It does not provide medical advice, diagnosis, or treatment, and it is not a substitute for professional care. Hemi is not a HIPAA-covered entity, and use of the App does not create a provider–patient relationship. Always consult a qualified healthcare professional about your health.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of the Service after an update means you accept the revised policy.

Contact us

If you have questions, requests, or concerns about this policy or your data, reach us at support@tryhemi.com.