Privacy Policy — Unveiled Weight Loss

This document is a draft for review by counsel before launch. Replace this paragraph with a lawyer-reviewed final version. The text below is a reasonable starting point that reflects the app's actual data practices.

1. Who we are

Unveiled Weight Loss is operated by JNR Pomme LLC(“we”, “us”, “our”). This policy describes how we collect, use, and protect your information when you use the app and related services.

2. What we collect

Unveiled is a chat-first weight tracking app. When you use it, we collect:

Account info — name, email, and Keycloak identity provided when you sign in.
Health data — meals you describe, weight readings, water and activity, menstrual cycle events (if you choose), dietary preferences and allergies, photos you upload of meals.
Conversations — the full text of your chats with the AI coach. Audio you submit via voice input is transcribed to text and the original audio is not retained.
Device sync data — when you connect Health Connect (Android) or HealthKit (iPhone), step counts, weight readings, body composition, and similar metrics flow in automatically.
Family relationships — if you're in a family plan, the link between you and other family members.

3. How we use it

To provide the core service: calorie math, meal logging, coaching responses, progress dashboards.
To improve the AI coach's responses by summarizing past conversations into a per-user memory the coach reads (only your own data, never another user's).
To send transactional emails (sign-in links, billing receipts, critical account notices).
To detect and fix bugs — client-side errors are captured and reviewed by our team for product improvement.

4. How we don't use it

We don't sell your data. Not to advertisers, not to insurers, not to data brokers, not to anyone.
We don't share your data with our AI vendors for training. Our coaching model runs on our own hardware. We use a smaller cloud model as a safety fallback when our infrastructure has a hiccup — that vendor receives the chat message during the fallback request but does not retain it for training (per their API terms).
We don't use your data for advertising. There are no ads in the product.

5. Who sees your data

Your data is visible to you. Family members in the same family see aggregated views (step challenges, shared recipes) but not each other's individual food logs or weight readings.

Our staff can access your account data when investigating a support request or a security incident. Access is logged.

6. Your rights

Access— request a copy of all data we hold about you.
Correct— fix anything that's wrong.
Delete— ask us to delete your account and all associated data. We act on deletion requests within 30 days.
Export— download your data in a portable format.
Withdraw consent— for any data category you previously consented to, you can withdraw that consent.

Email privacy@unveiledsoftware.com to exercise any of these rights.

7. State-specific rights

If you live in Washington, California, Connecticut, or other states with consumer health-data protections, you have additional rights under those laws (Washington My Health My Data Act, California CMIA, etc.). We apply those protections to all users regardless of location.

8. Security

Connections are encrypted in transit (TLS). Data at rest is encrypted on our servers. The AI infrastructure runs on hardware we physically control. We follow standard practices for access control, logging, and patching.

9. Children

The service is not directed at children under 13 and we don't knowingly collect data from them. A family plan owner can add family members aged 13+; those members have their own accounts with the same rights as anyone else.

10. Changes

If we change this policy materially, we'll notify you in-app and by email before the change takes effect.

11. Contact

Questions? Email privacy@unveiledsoftware.com.