Uric AI
Privacy Policy
Last updated
The short version
- Your gout diary is stored on your iPhone and backed up to our servers in Singapore. Only you, and caregivers you invite, can read it.
- Photos you scan are sent to Google’s Gemini AI, which names the food and estimates portions. Purine values come from the USDA purine database, not from the AI.
- We use Firebase to count feature use and fix crashes. What we send there never includes your uric acid readings, flares, meals, or medications.
- We don’t show ads, sell your data, or track you across other apps and websites.
- To delete your account and everything in it, email help@uric.ai.
1.Who we are
Uric AI is an iPhone app that helps people with gout or high uric acid track what they eat and drink, their flares, lab results and medication, and estimates their daily flare risk. It’s operated by [Legal name of operator], [Registered address] (“we”, “us”). We’re responsible for the personal information described in this policy. Under the Philippine Data Privacy Act of 2012 we’re the personal information controller, and under the EU and UK GDPR we’re the data controller.
This policy covers the Uric AI app and the servers it connects to. When we write “health information” we mean the information about your condition that you enter or scan: meals, drinks, flares, lab results, medication, and your onboarding answers.
2.What we collect
What you tell us during setup
The setup quiz asks about your situation (for example, diagnosed gout or high uric acid), when your last flare was, your latest uric acid level, whether you take gout medication and which one, foods you miss, where you usually eat, your usual water, alcohol and sleep, and your main goal. From your answers we set a daily purine budget, and we save it with your preferred units.
Your diary
- Meals: the dish name, estimated purines in milligrams, and the time you logged it.
- Water and drinks: how much water you drank, and servings of beer, soda, juice or coffee, with times.
- Flares: the affected joint, how bad it was, and when it started.
- Lab results: serum uric acid in mg/dL, the test date, and whether you typed it in or scanned it.
- Medication: the medicine name and the time you marked a dose as taken.
- Daily summary: the risk score, purine total and water total the app calculates for each day.
- Rewards: your coin balance, streak, and the outfits you’ve unlocked for Puri.
Photos and scans
When you scan a plate, a menu or a lab sheet, we receive the photo you take with the camera or pick from your library. The app can see only the photos you pick; it can’t browse your library. We store the photo and the scan result in your account. For details, see Food and lab scanning.
Account information
- Automatic account: the first time you open the app, we create an anonymous account with a random ID so your diary can be backed up. It doesn’t include your name or email address.
- Sign in with Apple: if you choose to save your diary with your Apple ID, Apple gives us a unique identifier for your Apple ID and, if you allow it, your name and email address. You can use Apple’s Hide My Email option, and we then get a private relay address instead of your real one. We use your name to greet you in the app and to show it to people in your Care Circle.
Purchases
Apple handles all payments through the App Store. We never see your card or billing details. Apple tells the app what you bought (the plan, its price and currency, and the transaction dates) so that we can unlock Premium. We also record the purchase as an event in Firebase Analytics.
Usage and crash data
We use Google Firebase Analytics and Firebase Crashlytics. They collect:
- which screens you open, and events such as starting setup, signing in, starting or finishing a scan, logging a meal, water or a flare, unlocking an outfit, opening a reminder, and making a purchase
- short labels describing those events, such as the scan mode or which reminder you opened
- your pseudonymous account ID, so that crashes and events match the right account
- device and app details, such as the device model, iOS version, app version, language, and an approximate country or region based on your IP address
- crash reports and error details when something goes wrong
What these tools never receive: uric acid values, flare details, joints, meal names, purine totals, medication names, or photos. We don’t use Apple’s advertising identifier, and we don’t ask for permission to track you.
Data that stays on your iPhone
Reminders for water, medication and meals are scheduled and delivered on your iPhone by iOS; we don’t send them from a server. The app also saves a copy of your diary on your iPhone. iOS encrypts that copy and keeps it unreadable while your iPhone is locked.
What we don’t collect
Uric AI doesn’t access your location, contacts, microphone or Apple Health data.
3.How we use it
- To run the app: to show and back up your diary, calculate your purine budget and daily risk score, analyse your scans, schedule reminders, and power the Care Circle.
- To keep your data in sync: to restore your diary when you sign in with Apple on a new iPhone.
- To process purchases: to confirm and restore your subscription or lifetime purchase.
- To fix and improve the app: to find crashes, see which features people use, and understand where setup or scanning goes wrong.
- To keep things secure: to prevent abuse of the scanning service and to protect accounts.
- To meet legal obligations: to respond to lawful requests and enforce our terms.
We don’t use your information for advertising, and we don’t sell it or rent it to anyone.
Risk scores, purine estimates and scan results are automated estimates to help you keep track. They aren’t medical advice, and they don’t replace your doctor.
Legal bases
If you’re in the Philippines, the EEA or the UK, we rely on these legal bases:
- Consent for health information. You give consent when you choose to enter or scan it, and you can withdraw it at any time by deleting the entries or your account.
- Contract for running your account, syncing your diary and processing purchases.
- Legitimate interests for analytics, crash reporting and security. These tools don’t receive your health information.
- Legal obligation when a law requires us to keep or disclose information.
4.Food and lab scanning
When you scan something, the app shrinks the photo and sends it over an encrypted connection to our server, together with the scan mode, your purine budget and your eating region. Our server then:
- sends the photo, the scan mode and your region to Google’s Gemini API. Gemini names the dishes and ingredients and estimates the portion sizes, or reads the uric acid value and date from a lab sheet. Gemini doesn’t receive your account ID, your name, or anything else from your diary.
- looks up every ingredient in our purine database, which is based on the USDA purine database, and calculates the purine total and verdict.
- saves the photo and the result in your account, where only you can read them.
Google processes these requests on our behalf under its terms for paid Gemini API services. Those terms don’t allow Google to use your photos or results to improve its products. Google may keep requests for a short time to detect abuse.
About lab sheets: a lab report often shows more than your uric acid level, such as your name, your doctor, your clinic, and other test results. Everything in the photo is sent and stored, so crop the photo to the uric acid result if you prefer.
5.Who we share it with
We share personal information only with the service providers that run parts of Uric AI for us, and only as needed for that work:
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database, sign-in, photo storage and our scanning server. Hosted in Singapore. | Your account, profile, diary, scan photos and scan results |
| Google (Gemini API) | Identifies the food in scan photos and reads lab sheets | Each scan photo, the scan mode and your eating region |
| Google (Firebase) | Analytics and crash reports | The usage and crash data described in section 2, never health information |
| Apple | Sign in with Apple and App Store payments | What you share with Apple directly, under Apple’s own privacy policy |
We also share information:
- with people you choose, through the Care Circle (see the next section).
- when the law requires it, or when we need to protect the rights, safety or property of our users, the public or Uric AI.
- in a business transfer, such as a merger or sale. Any new owner must protect your information as this policy describes, and we’ll let you know before anything changes.
6.Care Circle
The Care Circle lets a family member or caregiver follow along with your diary. To add someone, give them your invite code; the app never sends it for you. After they join with the code, they can see only what you’ve turned on in Me › Care Circle:
- Diary: your meals, water, drinks, flares, lab results and medication, plus your name and profile.
- Risk: your daily risk score, purine total and water total, plus your name and profile.
- Grocery list: your shared grocery list.
Turn a switch off and caregivers lose access to that category right away. When you join someone else’s circle, they see your name.
7.Where it’s stored
Your account and diary are stored in Singapore. Google may process scan photos and Firebase data in the United States and other countries where it operates. When your information leaves your country, we use contracts with our providers, including standard contractual clauses where they apply, to make sure it gets the same level of protection this policy describes.
8.How long we keep it
- Account, diary, scan photos and scan results: we keep these until you delete them or ask us to delete your account.
- Firebase analytics and crash data: Google deletes this data automatically at the end of the retention period set in our Firebase project.
- On your iPhone: the diary copy on your iPhone is deleted when you sign out (after a final backup) or delete the app.
If you delete the app before saving your diary with Apple, you can’t get back into that anonymous account on a new install. Save with Apple under Me › Account first if you want to keep your history.
We may keep some information for longer when the law requires it, for example purchase records.
9.Your choices and rights
In the app and on your iPhone
- Camera: allow or block camera access in iOS Settings › Uric AI. You can still log meals without scanning.
- Notifications: turn reminders on or off in Me › Notifications or in iOS Settings.
- Care Circle: change what caregivers can see in Me › Care Circle.
- Sign out: sign out in Me › Account. This removes your diary from the iPhone after it’s backed up.
- Sign in with Apple: stop using your Apple ID with Uric AI in iOS Settings › [your name] › Sign-In & Security › Sign in with Apple.
Delete your account
Email help@uric.ai from the address linked to your Apple ID, or tell us the relay address Apple shows for Uric AI. We’ll permanently delete your account, profile, diary, scan photos, scan history and Care Circle within 30 days and confirm when it’s done.
Your rights
Depending on where you live, you may have the right to:
- be told how we process your information, which is what this policy does
- get a copy of your information, including in a portable, machine-readable format
- correct information that’s wrong or incomplete
- have your information deleted or blocked
- object to or restrict some processing, and withdraw your consent
- make a complaint to a data protection authority, such as the National Privacy Commission in the Philippines or the supervisory authority in your EEA country or the UK
To use any of these rights, email help@uric.ai. We’ll reply within 30 days and may need to confirm that the account is yours first.
California residents: you can ask to know, delete or correct the personal information we hold about you. We don’t sell or “share” personal information for cross-context behavioural advertising, and we don’t use sensitive personal information to infer characteristics about you. We won’t treat you differently for using these rights.
10.Security
Uric AI protects your information like this:
- All traffic between the app and our servers is encrypted.
- Database access rules let each account read only its own records, and let caregivers read only the categories you share with them.
- Scan photos are stored in private storage that only your account can open.
- The key for the AI service stays on our server and is never included in the app.
- iOS encrypts the diary copy on your iPhone.
No system is completely secure. If a breach affects your information, we’ll notify you and the relevant authorities as the law requires.
11.Children
Uric AI is made for adults and isn’t intended for anyone under 18. We don’t knowingly collect information from children. If you think a child is using Uric AI, contact us and we’ll delete their account.
12.Changes to this policy
When we update this policy, we change the date at the top of this page. If a change significantly affects how we use your information, we’ll tell you in the app before it takes effect.
13.Contact us
For questions, requests or complaints about your privacy, contact our Data Protection Officer:
- Email: help@uric.ai
- Post: [Legal name of operator], [Registered address]