ALURE
Your data, your call

PRIVACY POLICY

Effective July 4, 2026

This Privacy Policy explains what Alure (“Alure,” “we,” “us”) collects when you use the Alure mobile app or website, how we use it, and the choices you have. If anything here is unclear, email support@alure.health.

The short version

  • We collect what you put in: profile details, meal photos and their nutrition, symptom journal entries, optional Apple Health data.
  • Meal photos are sent to Google (Gemini) to identify the foods, and those food names are looked up in the USDA FoodData Central nutrition database for the numbers. Nothing else is sent to third party AI providers.
  • Apple Health data is used solely to display your activity inside the app. It is never used for advertising, never sold, never shared with data brokers, and never used for research.
  • You can delete your account from inside the app at any time. Deletion removes your data from our servers and cannot be undone.
  • We don’t sell your personal information.
  • If you join the waitlist on our website, we store your email only to tell you when Alure launches.

What we collect

Waitlist (website)

If you join the waitlist on our website, we collect the email address you submit and the date you joined. We use it only to email you about early access and the Alure launch, and we store it with our database provider, Supabase. We never sell it and never use it for advertising. Email support@alure.health to be removed at any time.

Account information

When you sign in with Apple or Google, we receive an email address and a stable user identifier. We do not receive your social contacts, calendar, or other data from those providers.

Profile you create

Name, age, height, weight, PMOS type, and goals you provide. This information stays tied to your account and is used to personalize your experience inside the app.

Shipping details

During setup we ask for your address, and you can add a phone number later if you like. Alure is free and this is not a billing form. We use your address to localize the app (for example, regional grocery prices in the savings calculator and seasonal food suggestions) and to prefill checkout in the PMOS Labs store if you ever choose to order there. While you type your street address, the text in that field is sent to the Photon geocoding service to offer completions (see providers below). You can edit or remove your shipping details at any time in Profile → Shipping details, and they are deleted with your account.

Meal logs

Photos you capture of meals are stored with your account and used to generate nutrition estimates (calories, macros, micronutrients, and a meal score). The photo and a brief prompt are sent to Google’s Gemini API to identify the foods and portions. The identified food names are then looked up in USDA FoodData Central, a United States government nutrition database, to calculate the macros. The analysis response is stored against the meal record. No user identifier is sent to Google or USDA with the photo.

Symptom journal

Symptoms you log (category, severity, time of day) are stored with your account. We use these entries to generate your personal insights and to surface patterns alongside your meal data.

Apple Health (optional)

If you grant permission, Alure reads the following from Apple HealthKit to show your activity in the app:

  • Body mass (weight)
  • Step count
  • Active energy burned
  • Sleep analysis

When you log a weight inside Alure, we write a body mass sample back to HealthKit so the value appears in the Health app’s history. You can revoke any of these permissions at any time in the Apple Settings app under Privacy & Security → Health.

HealthKit data: Alure does not use Apple HealthKit data for advertising, similar services, or any other data mining purposes other than to provide the experience you see in the app. HealthKit data is never sold, shared with data brokers, or used for research without your explicit opt in (which we do not currently offer).

Device and diagnostic information

The app records anonymous device side rate limit counters (e.g., daily meal scan limit) and may log crash diagnostics. We do not collect precise location.

How we use your information

  • Provide and improve the Alure experience.
  • Generate AI insights from summarized statistics of your last 30 days. Only aggregated metrics are sent to Google’s Gemini for this, never your raw logs or photos.
  • Schedule local meal reminders if you turn them on.
  • Respond when you contact support.
  • Detect and prevent abuse (e.g., rate limits on meal scans).
  • Localize the app to your region, for example grocery prices in the savings calculator and seasonal food suggestions.
  • Sign you into the PMOS Labs store and prefill checkout when you choose to open it from the app.

How we share your information

We do not sell or rent personal information. We share data only with service providers acting on our behalf:

  • Supabase, Inc.: managed PostgreSQL, authentication, and Edge Functions hosting (US East).
  • PowerSync, Inc.: sync engine between the device and our database.
  • United States Department of Agriculture (USDA): FoodData Central, a public nutrition database queried with food names (never photos or identifiers) to retrieve nutrition facts.
  • Apple Inc.: Sign in with Apple; App Store distribution; HealthKit (on device, never leaves your device through us).
  • Google LLC: Gemini API for meal photo analysis and insight generation; Google sign in (if you choose it).
  • Komoot Photon (OpenStreetMap): address autocomplete. As you type in the street address field, that text is sent to the Photon geocoding service to suggest completions. No name, email, or account identifier goes with it.
  • PMOS Labs (pmoslabs.com): our companion store. Only when you tap a store link inside the app, we pass your email, name, and saved shipping details (if any) through a signed one time link so the store can sign you in and prefill checkout. The link expires within minutes and works once. Nothing is shared with the store until you choose to open it, and your health data (meals, symptoms, cycle, Apple Health) is never shared with the store.

Each provider acts on our written instructions and is permitted to use the data only to provide their service to us. We may disclose information if required by law.

Where data is stored

Account and profile data, meals, symptom logs, and weights are stored in encrypted PostgreSQL databases operated by Supabase in AWS US East. On your device, session tokens are stored in the iOS Keychain. Recent data is cached in an encrypted local SQLite database for offline use.

Retention

We retain your data for as long as your account is active. When you delete your account, we delete your profile, meal records, symptom logs, and weights from our active databases. Limited operational backups roll off within 30 days.

Your rights

  • Access & correction: view and edit your profile from the Profile tab.
  • Deletion: Profile → Delete Account removes your data from our servers.
  • Apple Health control: revoke read or write permissions at any time in Apple’s Settings app.
  • Notifications: turn meal reminders on or off in Profile → Settings.

Depending on your jurisdiction (e.g., California, EEA, UK) you may have additional rights to access, correct, port, or restrict processing of your data. Email support@alure.health to exercise those rights.

Children

Alure is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have, we will delete it.

Security

We use TLS for data in transit and encryption at rest with our database provider. No system is perfectly secure, but we take reasonable steps to protect your information.

Changes

If we materially change this Policy, we will update the effective date and, where appropriate, notify you in the app. Continued use after changes means you accept them.

Contact

17258526 Canada Ltd. Questions, requests, or complaints: support@alure.health.