Privacy Policy

Effective date: May 25, 2026

Refluxora: AI GERD & LPR Companion ("the App") is developed and published by Valerii Loveiko. We take your privacy seriously and are committed to protecting your personal information. This privacy policy explains how the App collects, uses, stores, and protects your data.

Summary: Your reflux symptoms, RSI scores, meal photos, restaurant menu photos, medication logs, Acid Watcher diet adherence, taper protocols, and AI Coach chat history are stored locally on your device. Meal photos, menu photos, and Coach messages are sent to secure third-party AI services only after you give per-feature consent, and are not retained by those providers after processing. We do not collect your name or email, we do not use advertising or tracking SDKs, and we do not sell, share, or monetize your personal data.
Educational only: Refluxora is a Health & Fitness wellness companion, not a medical device. The App does not diagnose, treat, cure, or prevent GERD, LPR, Barrett's esophagus, or any condition. Always consult your doctor, gastroenterologist, otolaryngologist (ENT), or OB-GYN before starting, changing, or stopping any treatment. See the Medical Disclaimer.

1. Information We Collect

1.1 Reflux & Symptom Data You Enter

Refluxora lets you record reflux-related health information so you can track it over time. This includes:

All of this is stored exclusively on your device. It is used for trend charts, the doctor-shareable PDF (GI / ENT / OB / Primary-care formats), and to give the AI Coach context. It is never transmitted to any external server.

1.2 Meal Photos (Photo Food Scanner)

When you use the Meal Scan, the App accesses your camera or photo library at your explicit request to capture a meal. These photos are:

The App does not scan your photo library and does not collect EXIF metadata (location, date, camera model) from your photos.

1.3 Menu Photos (Menu Pre-Scan)

Refluxora's Menu Pre-Scan lets you photograph a restaurant menu before ordering so the App can rank dishes for your cohort. These photos are:

1.4 AI Reflux Coach Chat Data

When you use the AI Coach, your messages and the AI's responses are handled as follows:

1.5 Medication and Protocol Logs

If you log medications (for example PPI dose, Voquezna trial, H2 blockers, Tums adherence, alginate timing), supplements (DGL, zinc-carnosine, mastic gum, melatonin), or Acid Watcher diet phase progress, this information is:

Refluxora does not prescribe, supply, or modify any medication or dose. The medication log is solely a personal journal of what you are already doing under your own clinician's care.

1.6 Apple Health Data

With your permission, Refluxora can read selected data from Apple Health (for example sleep position and duration, dietary water intake, body mass). This access is read-only — the App does not write to Apple Health. Data read from Apple Health is used on-device for sleep-position + meal-timing correlation and never transmitted off the device. You can grant or revoke this access at any time in iOS Settings → Privacy & Security → Health.

1.7 Subscription Information

Refluxora offers optional subscriptions managed entirely through Apple's App Store and StoreKit. All payment processing and billing are handled by Apple — we do not collect, process, or store payment information. We use RevenueCat to track subscription status (see §3.4).

1.8 Anonymous Analytics

To understand aggregate App usage and reliability, Refluxora records a small amount of anonymous event data (for example "onboarding completed", "paywall viewed", "Menu Pre-Scan completed", a subscription event from RevenueCat) in our Supabase backend (see §3.5). These events are tied only to an anonymous, system-generated identifier. They contain no name, no email, no symptom values, no photos, and no chat content.

1.9 Information We Do NOT Collect

Refluxora does not collect:

2. How We Use Your Information

The information processed by the App is used exclusively for:

We do not use your data for advertising, profiling, or any purpose unrelated to the core functionality of the App.

3. Third-Party Services

3.1 OpenAI (Meal & Menu Vision OCR Fallback — Optional)

When on-device Apple Vision OCR has low confidence reading a meal or menu, Refluxora may use OpenAI's GPT-4o-mini vision model as a fallback. This call only happens when you explicitly request the scan, when local OCR is insufficient, and after you have accepted the per-feature consent prompt.

3.2 DeepSeek (AI Reflux Coach Text)

Refluxora uses DeepSeek V3's API to generate AI Coach responses, grounded by our on-device reflux knowledge base. When you send a message:

3.3 Cloudflare (API Gateway)

All AI requests are routed through a Cloudflare Worker proxy (refluxora-api.veribag.workers.dev) that forwards traffic to OpenAI and DeepSeek without logging or storing request bodies. The Worker exists solely to keep API keys server-side, to apply rate limiting, and to provide IP anonymization between your device and the AI providers.

3.4 RevenueCat (Subscription Management)

Refluxora uses RevenueCat to manage subscription status. RevenueCat receives an anonymous, system-generated user identifier, your subscription status (active, trial, expired), and the product identifier purchased. RevenueCat does not receive your name, email, symptoms, photos, logs, or any personal information. For details, see RevenueCat's Privacy Policy.

3.5 Supabase (Anonymous Analytics Backend)

Refluxora uses Supabase to store anonymous usage and subscription events (see §1.8). Each event is tied only to an anonymous identifier and contains no personal health data, photos, or chat content. Supabase acts as our data processor for this limited, anonymous telemetry. For details, see Supabase's Privacy Policy.

3.6 Apple Services

3.7 No Advertising or Third-Party Tracking SDKs

Refluxora does not integrate advertising networks, cross-app tracking SDKs, or third-party behavioral-analytics platforms (Google Analytics, Firebase Analytics, Mixpanel, Amplitude, the Meta SDK, and similar). The App contains no advertisements. The only off-device data flows are the AI processing, RevenueCat, and the anonymous Supabase telemetry described above.

4. Data Storage and Security

4.1 Local Storage

All reflux symptoms, RSI scores, meal photos, menu picks, medication logs, taper history, chat history, symptom notes, and personalization settings are stored locally on your device using Apple's standard storage frameworks, with file protection enabled. This data resides only on your device, is protected by your device's passcode / Face ID / Touch ID and encryption, is not accessible to the developer, and can be deleted at any time from within the App or by deleting the App.

4.2 On-Device Knowledge Base

The reflux clinical citation corpus ships embedded in the App (~65MB sqlite-vec database, ~2,400 chunks) and is queried entirely on-device. It contains extracts from the American College of Gastroenterology (ACG 2022 GERD guideline), American Gastroenterological Association (AGA 2024 Best Practice), American Academy of Otolaryngology–Head and Neck Surgery (AAO-HNS LPR position paper), Mayo Clinic and Cleveland Clinic patient material, Dr. Jamie Koufman and Dr. Jonathan Aviv Acid Watcher protocols, the Voquezna (vonoprazan) FDA label, ACOG pregnancy reflux guidance, IFFGD lifestyle material, AGS Beers Criteria for senior polypharmacy, and selected PubMed literature on GERD, LPR, refractory reflux, and PPI taper protocols. It never leaves your device and is not personalized.

4.3 Network Security

All network communications are encrypted using industry-standard TLS 1.2+/HTTPS. No data is transmitted in plain text. The App enforces Apple's App Transport Security.

4.4 API Key Security

Third-party API credentials are kept server-side on the Cloudflare Worker and are not stored in plain text within the application.

5. Data Retention

6. Your Rights and Choices

6.1 Camera, Photo Library and Health Access

You can revoke the App's camera, photo-library, or Apple Health access at any time through iOS Settings → Refluxora (and iOS Settings → Privacy & Security → Health). Without these permissions you can still use Refluxora as a manual tracker.

6.2 AI Consent

The first AI Coach message, the first Meal Scan, and the first Menu Pre-Scan each prompt you for explicit, separate consent. You can decline any of them and continue using Refluxora as a manual tracker. The post-onboarding Disclaimer screen also requires a separate "I consent to AI-assisted insights" checkbox before any AI feature is enabled. You can re-show these prompts from Settings.

6.3 Deleting Your Data

Because your personal data is stored locally on your device, you can delete individual entries within the App, use Settings → Delete all my data to wipe every log at once, or delete all data by uninstalling the App. No request to the developer is necessary — we do not hold your health data on external servers.

6.4 Subscription Management

Manage, cancel, or modify your subscription through iOS Settings → Apple ID → Subscriptions. Cancellation takes effect at the end of the current billing period. Refunds are handled by Apple.

7. Children's Privacy

Refluxora is not directed at children under 12 and is rated 12+ on the App Store. We do not knowingly collect personal information from children. If a parent or guardian is tracking on behalf of a younger family member, the consenting adult enters and reviews all data — no separate account or personal data is collected from the child.

8. International Users and Compliance

Refluxora is available in five launch markets (United States, United Kingdom, Canada, Australia, Germany) and complies with applicable data-protection regulations:

9. Medical Disclaimer

Refluxora is an educational wellness companion, not a medical device. It does not diagnose, treat, cure, or prevent GERD, LPR, Barrett's esophagus, or any condition. Symptom tracking, RSI scores (Reflux Symptom Index — a screening tool, not diagnostic), meal trigger ratings, menu pre-scan rankings, and AI Coach answers are educational information and self-reported tracking, not clinical assessments. Always consult your doctor, gastroenterologist, otolaryngologist, or OB-GYN. See the full Medical Disclaimer.

10. Changes to This Policy

We may update this policy to reflect changes in functionality or regulations. Material changes will be indicated by updating the effective date. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this privacy policy or your data:

Medical Disclaimer · Terms of Use · Support