Privacy Policy
IBD Better is a wellness application. It is not diagnostic, it is not a medical device, and it is not a replacement for medical care.
This Privacy Policy explains how Bly-Baret LLC ("IBD Better," "we," "us," or "our") collects, uses, stores, and shares information when you use the IBD Better mobile application and related services (the "Service").
IBD Better is a consumer health tracking app for people managing inflammatory bowel disease (IBD). It is not a hospital, clinic, health plan, or healthcare provider.
1. Scope
This Privacy Policy applies to the IBD Better mobile app and related services. You must be at least 18 years old to use IBD Better. We do not knowingly collect personal information from children under 18.
2. Information We Collect
We collect information you provide directly, including account information such as username, email address, and password; health-related information you choose to log, such as symptom entries, stool logs, food logs, hydration, pain, GI symptoms, medications, notes, and similar diary content; profile information you choose to provide, such as diagnosis details, medication information, or similar context; and messages or content you submit through app features.
We may also collect device and app information, such as device model, operating system version, app version, and basic diagnostic information; authentication and session information; a persistent device identifier used to support trial-account continuity and fraud or abuse prevention; and usage information necessary to operate, secure, and improve the Service.
3. Information We Do Not Intentionally Collect
- Your contacts
- Your precise location
- Your calendar data
- Payment card information
4. How We Use Information
We use information to provide, maintain, and secure the Service; create and manage your account; store and display your logged health history; generate AI-powered summaries, pattern analysis, and similar app features; support trial-account continuity and prevent abuse; respond to support requests and privacy requests; improve product quality, reliability, and safety; develop and improve IBD Better's features and algorithms using aggregated, de-identified data that cannot be traced back to you; comply with legal obligations; and enforce our Terms.
5. Legal Bases And Consent
By using IBD Better and submitting information through the Service, you direct us to process the information needed to provide the features you request. Where required by applicable law, we rely on your consent for collection and processing of consumer health data beyond what is strictly necessary to provide the requested product or service. You may withdraw consent by stopping use of the Service and requesting deletion of your account and data at privacy@ibdbetter.com.
6. Sharing
We do not sell your personal health data. We share limited information with the service providers below in order to operate the app:
- OpenAI — processes your health entries to generate AI-assisted summaries, pattern insights, and similar app features. Under our agreement, OpenAI does not use your data to train its own models, and prompt and response data is not retained for training purposes.
- Heroku (Salesforce) — hosts our backend application and database.
- Google (Firebase Crashlytics) — collects crash and error reports so we can fix failures. Crash reporting is active from the moment the app launches. Reports include device and app details, sanitized technical breadcrumbs, and random identifiers (a per-install diagnostics ID and per-request codes) — not your name, email, or account ID. We do not intentionally attach your health entries, notes, photos, or messages to crash reports; app-authored reports pass through redaction controls. Google documents a 90-day retention period for crash traces and associated identifiers. When investigating a problem, a request code may let our team connect a crash report to your account in our own server logs.
- Resend — sends transactional email such as password resets and account notifications.
We may also share information with professional advisors, law enforcement, regulators, or other parties where required by law or necessary to protect rights, safety, or the Service.
If we add or materially change key processors, we will update this Privacy Policy. We do not share your personal health data with advertisers, data brokers, employers, or insurers for their own marketing purposes.
7. Washington Residents (My Health My Data Act)
If you are a Washington State resident, you have additional rights under the Washington My Health My Data Act with respect to your "consumer health data," including the right to confirm whether we collect, share, or sell your consumer health data, to access that data, to withdraw consent to its collection and sharing, and to request deletion. To exercise these rights, email privacy@ibdbetter.com from the email associated with your account. We do not sell consumer health data.
8. Retention And Deletion
We keep personal information for as long as reasonably necessary to provide the Service, maintain your account, comply with law, resolve disputes, and enforce our agreements. If you request account deletion, we will delete or de-identify your personal information within a commercially reasonable period. Our target is to complete verified deletion requests within 30 days.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, authentication controls, and secured backend systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights And Choices
Depending on where you live, you may have rights to request access to personal information we maintain about you; request deletion of your personal information; request export of information you provided to us in a portable format where feasible; withdraw consent for certain processing; and appeal a denial of a privacy request.
To make a request, email privacy@ibdbetter.com from the email associated with your account.
11. Changes
We may update this Privacy Policy from time to time. If we make a material change, we will provide notice by updating the effective date, posting the updated policy, and, where appropriate, providing additional notice in the app or by email.
12. Contact
Bly-Baret LLC / IBD Better
Email: privacy@ibdbetter.com
Website: ibdbetter.com