What happens to what you write

What you type. Your symptom ratings, the foods and supplements you tick, sleep, stress, movement, bowel notes, and anything you write in the optional note box.

Your account, if you make one. An email address, a password stored only as a hash, and a first name if you give one.

A little technical data. A session cookie, and a cookie holding a random token if you log without an account. To limit abuse, your IP address is stored only as a salted one-way hash, which cannot be turned back into the address.

Payment, if you buy the report. Handled entirely by Stripe. Your card details never reach this site. This site records that a payment happened, its amount, and the email Stripe returns for the receipt.

To show your own entries back to you, and to work out the patterns in the report. Nothing else.

Your notes box is never read by the report engine, by any automated analysis, or by a person, unless you ask for support and quote it yourself.

Your data is not sold. It is not used to train anything. It is not combined with data from anywhere else.

Only the services needed to run the site, and only the part each one needs:

The web host (the country the server sits in must be named here before launch). If that is outside Canada, the information is subject to the laws of that country while it is there.

Stripe, for payment, which receives your email and card details directly and never passes the card details to this site.

No advertising networks. No analytics that identify you. No third party receives your health entries.

If you log without an account, your entries are tied to a cookie on your browser and to nothing that names you. If you never come back, an empty log is deleted after 7 days, and a log with entries after 90 days. Clearing your cookies means that log is gone and cannot be recovered.

If you have an account, your entries are kept until you delete them or delete the account.

A purchase record is kept for as long as tax law requires, even after an account is deleted. It holds the fact of the sale, not your health entries.

You can ask for a copy of everything held about you, ask for a correction, or ask for it all to be deleted. Deleting the account deletes every entry with it. The purchase record is anonymised rather than destroyed, for the reason above.

You can withdraw consent for the weekly email at any time, and that has no effect on the tracker.

A contact address must be published here before launch.

The accountable person must be named here before launch, as Canadian federal privacy law requires.

If something goes wrong with your information, you will be told, and so will the regulator where the law requires it.