Privacy Policy

Eterna ("we", "us", "the app") is a personal supplement, medication, nutrition and lab tracking application operated at https://remix-your-gems.lovable.app. We are the data controller for the personal data described in this policy. This policy explains exactly what data we collect, why we collect it, who it is shared with, how long we keep it and how you stay in control of it. It applies to the Eterna web app and every feature inside it, including photo scanning, lab report analysis, the AI health assistant and connected fitness services such as Google Fit.

• We collect only the data needed to run the features you use.
• We never sell your data and never use it for advertising or ad profiling.
• Google Fit data is read-only, used only to show your trends and personalise guidance inside the app, and is handled under Google's Limited Use requirements.
• You can disconnect any service, delete individual records or delete your entire account at any time.

• Account data: email address and authentication identifiers.
• Profile data you provide during onboarding: health goal, age, sex, height, weight, activity level, diet preference.
• Photos you upload of supplement bottles, labels, meals and medical or lab reports, plus the values extracted from them.
• Your supplement stack, dose schedule, dose logs and food logs.
• Wearable and fitness data you choose to connect (Google Fit, Whoop, Oura and similar): sleep, activity, recovery, body measurements, heart rate and workouts.
• Messages you send to the in-app AI health assistant.

• To identify supplements and foods from your photos and build your daily schedule.
• To calculate calorie and macro targets and track adherence.
• To flag possible duplicate ingredients, interactions and upper-limit concerns.
• To chart your lab markers over time and show progress.
• To personalise AI answers and recommendations using your own data.

We do not sell your data. We do not use your data for advertising. We do not share your health data with third parties for their own purposes.

If you connect Google Fit, we request read-only access to your activity, sleep, body and (optionally) heart-rate data. This data is used solely to display your health trends inside the app and to personalise your supplement and nutrition guidance.

Eterna's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide or improve the app's user-facing features, comply with applicable law, or as part of a merger or acquisition. We do not use Google user data for advertising, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data is aggregated and anonymised.

You can revoke access at any time from Settings in the app, or from your Google Account permissions page.

Photos, extracted label text, lab values and your profile context are sent to AI model providers to generate identifications, schedules and recommendations. These providers act as processors on our behalf and do not use your data to train their models.

Data is stored in a managed cloud database with row-level security so each account can only read its own records. Uploaded photos and reports are stored in private buckets and served only through short-lived signed links. Third-party access tokens are encrypted at rest.

• fitness.activity.read — steps, active minutes, calories burned and workouts, used to adjust your daily calorie and macro targets and to show activity trends.
• fitness.sleep.read — sleep duration and stages, used to time supplements (for example magnesium or melatonin) and to show sleep trends.
• fitness.body.read — weight and body measurements, used to keep your calorie and protein targets accurate over time.
• fitness.heart_rate.read (optional) — resting and workout heart rate, used to estimate recovery and show cardiovascular trends.

Google Fit data is read-only. We never write data back to your Google account, never use it for advertising or profiling, never sell it, and never share it with third parties for their own purposes.

We share personal data only with service providers who process it on our instructions, under contract, and solely to operate the app:

• Cloud hosting, database, authentication and file storage providers.
• AI model providers that analyse your photos, labels and lab documents.
• Fitness services you explicitly connect, in order to fetch your own data.

We may also disclose data if required by law or to protect the safety and rights of our users. We do not sell personal data or share it for cross-context behavioural advertising.

We process your data on the basis of your consent (health data, connected fitness accounts, AI analysis of your uploads), performance of our contract with you (providing the app and your account), and our legitimate interests (security, abuse prevention and service reliability). You can withdraw consent at any time by disconnecting a service or deleting your data.

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We use only essential cookies and browser local storage to keep you signed in and to remember basic app preferences. We do not use advertising or third-party tracking cookies, and we do not run cross-site analytics profiling.

We keep your data for as long as your account is active. Specific retention: profile and logs until deleted by you; uploaded photos and lab documents until deleted by you; connected-service access tokens until you disconnect that service; chat history until you clear it.

How to delete your data:

• Open Settings and disconnect any connected fitness service — this deletes the stored tokens for it immediately.
• Delete individual stack items, food logs, photos or lab reports from their screens.
• To delete your whole account and all associated data, email hello@eterna.health from your account address. We complete deletion within 30 days, after which data is removed from backups on their normal rotation.

Deleting Google Fit access in the app or at your Google Account permissions page stops any further syncing, and the data we previously synced is deleted with your account or on request.

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to processing, to withdraw consent, and to complain to your local data protection authority. Contact us to exercise any of these rights; we respond within 30 days and never charge for a standard request.

Eterna is not intended for anyone under 16 years of age.

Eterna provides general wellness information, not medical advice, diagnosis or treatment. Always confirm any change to your medication or supplement routine with a qualified doctor or pharmacist.

Questions about this policy or your data? Email hello@eterna.health.