Reflux Radar

Privacy Policy

Last updated: 19 March 2026

Reflux Radar is a personal tracking tool. Your health data belongs to you. We collect only what is needed to run the app, we do not sell or share it for advertising, and you can delete your account and all associated data at any time.

1. Who we are

Reflux Radar is operated by Adam Elston, based in the United Kingdom. For privacy enquiries, contact: adam@fyldelabs.com.

2. What data we collect

We collect only the data needed to provide the app's core functions.

Account data

Email address (used for sign-in and account management)
Authentication tokens managed by Supabase Auth

Health and tracking data

Meal logs: descriptions, timestamps, ingredient breakdowns, and portion estimates
Symptom logs: symptom type, severity, timing, and optional free-text notes
App settings: onset window, diet preferences, medication use (optional, used to personalise AI parsing)

Technical data

Basic app usage data for error diagnosis (no advertising identifiers)
Device type and OS version (used by Expo / EAS for crash reporting only)

We do not collect location data, contacts, camera images (unless you explicitly attach a photo to a meal log), or any data unrelated to the app's core functions.

3. Why we collect it (legal basis)

Your meal and symptom logs are health data — a special category under UK GDPR. We process this data on the basis of your explicit consent, which you provide when you create an account and use the app.

You can withdraw consent at any time by deleting your account. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

4. How your data is used

To generate your personal trigger pattern summaries and trend charts
To create PDF export reports you choose to generate
To provide ingredient-level pH and acidity data via local reference tables
To improve meal parsing using the Anthropic Claude API (your meal description text is sent to the API — see section 6)

Your data is never used for advertising, sold to third parties, or shared with other users.

5. Data storage and security

Reflux Radar uses a local-first architecture. Your logs are stored on your device using SQLite and synced to a secure Supabase database when you are online.

Database: Supabase (PostgreSQL), hosted in the EU
Row-level security is enforced — only your account can access your data
Data is encrypted in transit using TLS
Supabase encrypts data at rest

6. Third-party services

Reflux Radar uses the following third-party services:

Supabase — database, authentication, and storage. Supabase is GDPR-compliant and stores data in the EU. Supabase Privacy Policy.

Anthropic Claude API — used to parse meal descriptions into structured ingredient lists. When you log a meal, your text description is sent to the Anthropic API to extract ingredient information. Anthropic's handling of API data is governed by their privacy policy. Anthropic Privacy Policy.

No advertising networks, analytics platforms, or data brokers are used.

7. Your rights under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

Access: you can request a copy of all data we hold about you
Rectification: you can correct inaccurate data
Erasure: you can request deletion of your account and all associated data via Settings → Account → Delete account, or by emailing us
Data portability: you can export your data as CSV from within the app
Restriction: you can ask us to restrict processing of your data
Objection: you can object to processing based on legitimate interests

To exercise any of these rights, contact us at adam@fyldelabs.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data retention

Your data is retained for as long as your account is active. If you delete your account, all associated data — including meal logs, symptom logs, and settings — is permanently deleted within 30 days.

9. Children

Reflux Radar is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete the account promptly.

10. Changes to this policy

If we make material changes to this policy, we will notify users via the app or by email before the changes take effect. The "last updated" date at the top of this page will always reflect the most recent version.

11. Contact

For any privacy-related questions or requests, contact Adam Elston at adam@fyldelabs.com.