Privacy Policy

Effective date: May 21, 2026

Hepatica: AI Fatty Liver Companion ("the App") is developed and published by Valerii Loveiko. We take your privacy seriously and are committed to protecting your personal information. This privacy policy explains how the App collects, uses, stores, and protects your data.

Summary: Your lab values, meal photos, lab-report photos, medication and alcohol logs, FibroScan scores, and AI Coach chat history are stored locally on your device. Meal photos, lab-report photos, and Coach messages are sent to secure third-party AI services only after you give per-feature consent, and are not retained by those providers after processing. We do not collect your name or email, we do not use advertising or tracking SDKs, and we do not sell, share, or monetize your personal data.
Educational only: Hepatica is a Health & Fitness wellness companion, not a medical device. The App does not diagnose, treat, cure, or prevent any condition. Always consult your doctor or hepatologist before starting, changing, or stopping any treatment. See the Medical Disclaimer.

1. Information We Collect

1.1 Health and Lab Data You Enter

Hepatica lets you record liver-related health information so you can track it over time. This includes:

All of this is stored exclusively on your device. It is used for trend charts, the multi-lab dashboard, doctor-shareable reports, and to give the AI Coach context. It is never transmitted to any external server.

1.2 Lab-Report Photos

When you use the Lab Interpreter, you may photograph a printed or on-screen blood-panel report so the App can read the values for you. Lab reports can contain personal identifiers (your name, date of birth, a medical-record number).

1.3 Meal Photos (Photo Food Scanner)

When you use the Photo Food Scanner, the App accesses your camera or photo library at your explicit request to capture a meal. These photos are:

The App does not scan your photo library and does not collect EXIF metadata (location, date, camera model) from your photos.

1.4 AI Liver Coach Chat Data

When you use the AI Liver Coach, your messages and the AI's responses are handled as follows:

1.5 Medication and Alcohol Logs

If you log medications (for example Rezdiffra adherence, GLP-1 doses such as Ozempic / Wegovy / Mounjaro, or a Vitamin E protocol) or alcohol intake and a sober streak, this information is:

Hepatica does not prescribe, supply, or modify any medication or dose. The medication log is solely a personal journal of what you are already doing under your own clinician's care.

1.6 Apple Health Data

With your permission, Hepatica can read selected data from Apple Health (for example body mass, HbA1c, steps, active energy). This access is read-only — the App does not write to Apple Health. Data read from Apple Health is used on-device for your dashboard and trends and is never transmitted off the device. You can grant or revoke this access at any time in iOS Settings → Privacy & Security → Health.

1.7 Subscription Information

Hepatica offers optional subscriptions and a one-time purchase managed entirely through Apple's App Store and StoreKit. All payment processing and billing are handled by Apple — we do not collect, process, or store payment information. We use RevenueCat to track subscription status (see §3.4).

1.8 Anonymous Analytics

To understand aggregate App usage and reliability, Hepatica records a small amount of anonymous event data (for example "onboarding completed", "paywall viewed", a subscription event from RevenueCat) in our Supabase backend (see §3.5). These events are tied only to an anonymous, system-generated identifier. They contain no name, no email, no lab values, no photos, and no chat content.

1.9 Information We Do NOT Collect

Hepatica does not collect:

2. How We Use Your Information

The information processed by the App is used exclusively for:

We do not use your data for advertising, profiling, or any purpose unrelated to the core functionality of the App.

3. Third-Party Services

3.1 OpenAI (Lab OCR & Meal Scan — Optional)

When you scan a lab report or a meal, Hepatica uses OpenAI's vision models to read the report or rate the meal. This call only happens when you explicitly request it and after you accept the per-feature consent prompt.

3.2 DeepSeek (AI Liver Coach Text)

Hepatica uses DeepSeek's API to generate AI Coach responses, grounded by our on-device liver knowledge base. When you send a message:

3.3 Cloudflare (API Gateway)

All AI requests are routed through a Cloudflare Worker proxy that forwards traffic to OpenAI and DeepSeek without logging or storing request bodies. The Worker exists solely to keep API keys server-side and to apply rate limiting.

3.4 RevenueCat (Subscription Management)

Hepatica uses RevenueCat to manage subscription status. RevenueCat receives an anonymous, system-generated user identifier, your subscription status (active, trial, expired), and the product identifier purchased. RevenueCat does not receive your name, email, lab values, photos, logs, or any personal information. For details, see RevenueCat's Privacy Policy.

3.5 Supabase (Anonymous Analytics Backend)

Hepatica uses Supabase to store anonymous usage and subscription events (see §1.8). Each event is tied only to an anonymous identifier and contains no personal health data, photos, or chat content. Supabase acts as our data processor for this limited, anonymous telemetry. For details, see Supabase's Privacy Policy.

3.6 Apple Services

3.7 No Advertising or Third-Party Tracking SDKs

Hepatica does not integrate advertising networks, cross-app tracking SDKs, or third-party behavioral-analytics platforms (Google Analytics, Firebase Analytics, Mixpanel, Amplitude, the Meta SDK, and similar). The App contains no advertisements. The only off-device data flows are the AI processing, RevenueCat, and the anonymous Supabase telemetry described above.

4. Data Storage and Security

4.1 Local Storage

All lab values, FibroScan scores, meal photos, medication and alcohol logs, chat history, symptom notes, and personalization settings are stored locally on your device using Apple's standard storage frameworks, with file protection enabled. This data resides only on your device, is protected by your device's passcode / Face ID / Touch ID and encryption, is not accessible to the developer, and can be deleted at any time from within the App or by deleting the App.

4.2 On-Device Knowledge Base

The liver-health citation corpus ships embedded in the App and is queried entirely on-device. It contains extracts from AASLD, AGA and EASL guidelines, Mayo Clinic patient material, the Rezdiffra (resmetirom) FDA label, and selected PubMed literature on NAFLD/MASLD, alcohol-associated liver disease, and GLP-1 medications. It never leaves your device and is not personalized.

4.3 Network Security

All network communications are encrypted using industry-standard TLS 1.2+/HTTPS. No data is transmitted in plain text. The App enforces Apple's App Transport Security.

4.4 API Key Security

Third-party API credentials are kept server-side on the Cloudflare Worker and are not stored in plain text within the application.

5. Data Retention

6. Your Rights and Choices

6.1 Camera, Photo Library and Health Access

You can revoke the App's camera, photo-library, or Apple Health access at any time through iOS Settings → Hepatica (and iOS Settings → Privacy & Security → Health). Without these permissions you can still use Hepatica as a manual tracker.

6.2 AI Consent

The first AI Coach message, the first lab scan, and the first meal scan each prompt you for explicit, separate consent. You can decline any of them and continue using Hepatica as a manual tracker. You can re-show these prompts from Settings.

6.3 Deleting Your Data

Because your personal data is stored locally on your device, you can delete individual entries within the App, use Settings → Delete all my data to wipe every log at once, or delete all data by uninstalling the App. No request to the developer is necessary — we do not hold your health data on external servers.

6.4 Subscription Management

Manage, cancel, or modify your subscription through iOS Settings → Apple ID → Subscriptions. Cancellation takes effect at the end of the current billing period. Refunds are handled by Apple.

7. Children's Privacy

Hepatica is not directed at children under 12 and is rated 12+ on the App Store. We do not knowingly collect personal information from children. If a parent or guardian is tracking on behalf of a younger family member, the consenting adult enters and reviews all data — no separate account or personal data is collected from the child.

8. International Users and Compliance

Hepatica is available worldwide. We comply with applicable data-protection regulations:

9. Medical Disclaimer

Hepatica is an educational wellness companion, not a medical device. It does not diagnose, treat, cure, or prevent any condition. Lab interpretations, FibroScan tracking, FIB-4 scores, food ratings, and AI Coach answers are educational information and self-reported tracking, not clinical assessments. Always consult your doctor or hepatologist. See the full Medical Disclaimer.

10. Changes to This Policy

We may update this policy to reflect changes in functionality or regulations. Material changes will be indicated by updating the effective date. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this privacy policy or your data:

Medical Disclaimer · Terms of Use · Support