Legal
Privacy Policy
Last updated: 3 October 2026
This Privacy Policy covers two apps developed and operated by GutDiaries s.r.o., based in Prague, Czechia (IČO: 22456864). GutDiaries is an AI-assisted food and symptom tracking app for GERD, LPR and IBS. GutCalm offers CBT lessons, thought records, check-ins, breathing exercises and gut-directed hypnotherapy audio for IBS.
We are committed to protecting your privacy. This policy explains how we collect, use and protect your information, and how you can control it. Each section applies to both apps unless it names one.
1. Information Collection
We collect personal information that you give us directly, and some information about how you use the apps.
GutDiaries
- Personal details: such as your name and email address.
- Health information: details about your food intake, symptoms and other health-related information.
- Lifestyle information: information about your lifestyle that may affect your GERD, LPR or IBS symptoms.
- Usage and diagnostic data: how you use the app, crash reports and app performance data.
GutCalm
- Account details: your email address, first name, timezone and language.
- Health information: your onboarding answers about symptoms, triggers and tests; IBS-SSS symptom-severity scores; check-ins (mood, stress, gut and symptoms); and thought records (situations, thoughts, feelings and distress ratings).
- App use: lessons you complete, breathing sessions and guided-audio listens.
- Device-only data: unfinished drafts and display preferences stay on your phone. We do not receive them.
2. Use of Information
We use your information to:
- Provide and improve the apps: personalise your experience based on the data you provide.
- Run the GutCalm program: personalise your program and show you your progress.
- Keep the apps working well (GutDiaries): understand how the app is used and fix crashes and performance problems.
- Research: improve our services and better understand GERD, LPR and IBS. For research we use only aggregated, anonymised data that cannot identify you. This applies to both apps.
Legal basis
We process your health information only with your explicit consent (GDPR Article 9(2)(a)). In GutCalm, we ask for this consent before onboarding. You can withdraw your consent at any time. We process your account details because we need them to provide the service you signed up for (performance of a contract). In GutDiaries, we process usage and diagnostic data on the basis of our legitimate interest in keeping the app reliable and improving it.
3. Data Sharing
We do not sell your personal information. We do not share it with third parties for their own marketing. We use a small number of service providers (processors) to run the apps. They process data only on our behalf and only for the purposes below.
- Supabase (both apps): database, sign-in and storage. Supabase is SOC 2 compliant.
- Google Gemini (GutDiaries): content you submit to AI-assisted features, such as a meal description or photo, is sent to Google Gemini to process your request.
- Google Gemini (GutCalm): used only if you turn on Suggestions in a thought record. The words of that entry are sent to write a suggestion. Your name and email are not sent. Nothing is kept after the reply, except an anonymous ID we use to count daily limits. This is processed in the United States (us-central1).
- Cloudflare Turnstile (GutCalm): checks that you are not a bot when you sign in.
- Google Fonts (GutCalm): the app currently downloads its fonts from Google when it runs. This shares your device's IP address with Google.
- Firebase Crashlytics and Firebase Performance Monitoring (GutDiaries): Google services that collect crash reports and app performance diagnostics.
- PostHog (GutDiaries): product analytics that show us how the app is used.
- RevenueCat (GutDiaries): manages subscriptions and purchases. Payment itself is handled by the Apple App Store or Google Play.
4. Data Storage and Security
Your data for both apps is stored in the United States. When your data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses, or on the EU-US Data Privacy Framework where the provider is certified under it.
We protect your data with security measures including:
- Row-level security (RLS), so that each user can only access their own data.
- Encryption in transit (TLS) for all data exchanged between the apps and our servers.
5. User Rights
Under the GDPR, you have the right to:
- Access, correct and delete your personal data.
- Restrict processing and receive your data in a portable format.
- Object to processing.
- Withdraw your consent at any time. This does not affect processing that happened before you withdrew it.
- Complain to the Czech data protection authority, Úřad pro ochranu osobních údajů (ÚOOÚ), at uoou.gov.cz.
6. Exercising Your Rights
You can exercise any of your rights by contacting us through our contact page. We respond to requests in a timely manner.
Deleting your account
- GutCalm: in the app, go to You → Settings → Delete account. If you no longer have the app, contact us and we will delete it for you.
- GutDiaries: use our account deletion page and sign in with your registered email and password. You can also delete individual journal entries in the app (see how), or contact us.
Withdrawing consent
You can withdraw your consent at any time by deleting your account, or by contacting us through our contact page.
7. Cookies and Tracking Technologies
Our website
Our website uses cookies. You can change your cookie consent, and view the cookie declaration, at any time through the privacy icon at the bottom left. These cookies are mainly used for analytics and to improve our advertising performance. You are free to opt out and reject them.
Our apps
- Neither app uses advertising tracking.
- GutCalm does not use any analytics or tracking.
- GutDiaries uses the analytics and crash-reporting services described in section 3.
8. Data Retention
We keep your personal information for as long as we need it to provide our services.
- GutDiaries: if you delete your account, your data is removed.
- GutCalm: if you delete your account, your data is removed. We keep only your email address, the date you joined and the date you deleted your account, as a record of your request.
- GutCalm: unfinished onboarding sessions that never became an account are deleted automatically after 14 days.
9. Children's Privacy
GutDiaries and GutCalm are for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will delete it as quickly as possible.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will update the date at the top of this page and, in some cases, give you more prominent notice. In GutCalm, a material change may ask you to agree to the policy again in the app.
11. Contact Us
If you have any questions about this Privacy Policy, please use our contact page.