Privacy Policy

Last updated: May 2026

Overview

MetabolicOS ("the app") is a gout flare risk monitoring tool. We take your health data seriously. This policy explains exactly what we collect, why, and how it's handled.

What We Collect

On your device (stored locally)

• Age range, prior gout flare history, and baseline uric acid level you enter during setup
• Symptom logs and purine intake notes you record
• Hydration logs
• Lab results you enter manually
• Your username (hashed password — we cannot recover it)

From Apple HealthKit (with your permission)

• Heart rate variability (HRV/SDNN)
• Sleep analysis data
• Blood glucose readings
• Active energy burned

From your camera/photo library (with your permission)

Menu images you choose to photograph for the dining co-pilot feature. These are processed for text and not stored beyond the session.

Sent to our servers for risk analysis

Your anonymized health metrics (HRV, sleep score, hydration, symptoms, labs) are sent to our backend to generate your gout flare risk assessment. This data is transmitted over encrypted HTTPS and is not linked to your name or email.

Integration interest (optional)

If you tap "Request" for Oura or WHOOP integration, your in-app username and an anonymous device ID are logged so we can follow up. This is entirely voluntary.

What We Do Not Collect

• Your name, email address, or contact information
• Precise location
• Advertising identifiers
• Browsing history or data from other apps
• Any HealthKit data for advertising or data brokering purposes (prohibited by Apple and this policy)

How Your Data Is Used

Health data collected from HealthKit and your manual entries is used solely to compute your personalized gout flare risk score and generate wellness insights within the app. It is never sold, shared with advertisers, or used for any purpose other than providing the app's core functionality.

Data Storage

• Health and log data is stored locally on your device using Apple's SwiftData framework.
• If you have iCloud enabled, your data syncs across your devices via iCloud (subject to Apple's iCloud privacy policy). You can disable this in your device's iCloud settings.
• Risk assessment requests are processed on our backend server and are not persistently stored after the response is returned.

Third-Party Services

The app uses the following third-party infrastructure:

• Railway (railway.app) — hosts our backend API. Data in transit is encrypted. Railway's privacy policy applies to infrastructure-level processing.
• Apple iCloud — optional sync. Apple's privacy policy applies.
• OpenAI API — used by our backend to assist with menu analysis and lab parsing. Menu text and lab text you submit may be processed by OpenAI. OpenAI does not use API data to train models per their API usage policy.

We do not use any third-party analytics SDKs, advertising SDKs, or crash reporting services.

HealthKit

We access HealthKit data only to provide gout risk insights directly to you. We do not share HealthKit data with third parties except as described above (anonymized metrics sent to our own backend). We do not use HealthKit data for advertising or with data brokers.

Data Deletion

Your local data can be deleted at any time by deleting the app from your device. To request deletion of any server-side records (integration interest logs), email us at support@metabolicos.health and we will remove them within 30 days.

This app is not directed at children under 13 and we do not knowingly collect data from children.

Changes to This Policy

If we make material changes, we will update the "Last updated" date above. Continued use of the app after changes constitutes acceptance.

Contact

Questions about this policy? Email us at support@metabolicos.health