This Privacy Policy explains how Culprit collects, uses, and shares information when you use the app. By using the app, you consent to the practices described here.
When you open your pattern report, a Supabase Edge Function sends anonymized data to Anthropic's Claude API to draft a one-to-two-sentence plain-language summary of how each tested food group related to your logged symptoms. The prompt contains only: food group names, reintroduction outcome status (confirmed trigger / confirmed safe / inconclusive), reaction-timing window (immediate / delayed / late), and a numeric delta score relative to your baseline. No personally identifying information — no account ID, no email, no display name, no raw symptom rows — is shared with Anthropic. Anthropic's privacy terms apply to this processing. The resulting summary is cached in our database so the same report is not re-generated on repeat views.
The pattern report is shown in the app using qualitative labels only ("Frequently observed before symptoms", "Sometimes observed before symptoms", "Worth watching", "No clear pattern"). Numeric confidence scores and percentages are never shown to you and are not intended as clinical measurements.
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Backend, auth, database, Edge Functions | Account and logs (scoped by row-level security) |
| RevenueCat | Subscription management | Hashed Apple ID, subscription status, product ID |
| Anthropic (Claude) | Qualitative pattern summary for the report | Food group names, outcome status, timing window, anonymized delta score (no identifiers) |
| Apple | Sign in with Apple, in-app purchases | Apple ID identifier, purchase receipt |
We do not sell your data. We do not participate in any ad network.
We retain data while your account is active. You can delete your account at any time from Settings → Delete Account. Upon deletion, associated personal data is deleted or anonymized within 30 days, except records required for legal, tax, or fraud-prevention purposes.
Depending on your jurisdiction (GDPR, CCPA, PIPA, etc.) you may have the right to access, correct, delete, export, object to, restrict processing, or withdraw consent. To exercise any of these rights, email [email protected]. We respond within 30 days.
The app is not directed to children under 16. We do not knowingly collect personal data from children.
Your data may be stored or processed in countries other than your own (e.g., United States for Supabase, RevenueCat, Anthropic). By using the app, you consent to such transfers subject to appropriate safeguards.
The app does not use cookies or advertising trackers. We do not participate in ad networks or cross-app tracking. App Tracking Transparency prompts are not shown because no such tracking occurs.
Material changes will be announced via in-app notice or email at least 7 days before taking effect.
Email: [email protected]. We are the data controller responsible for personal information processed through the app.