Privacy Policy

This pre-launch website collects only marketing form information that visitors choose to submit, such as email, role, platform interest, organization, and contact context. Marketing forms should not collect sensitive health details.

Website forms

Waitlist submissions are handled with consent text versioning and a mock double opt-in flow until an approved email/CRM provider is configured.

Analytics

The site is designed for cookieless, privacy-safe analytics with generic event names. Email addresses, names, notes, and health details must not be sent as analytics properties.

Product preview

Product visuals are concept previews. Planned product data controls include optional data sources, AI consent, deletion, and no screen-content capture.

Food photos: on-device analysis and third-party egress

Analysis performed on your device sends no photo, image bytes, OCR text, or any other payload derived from the image to a third party. Sending a photo, or a minimized derivative of it, to a named third-party vendor for analysis is a separate act that requires your stored consent, and declining that consent does not disable analysis that runs on your device.

No food-photo analysis provider is enabled today, on the device or in the cloud, so no photo is analysed by either route. The four states — first-party server analysis, consented vendor analysis, declined vendor analysis, no provider available — are described on the privacy page.

Peak-privacy cloud AI

The planned peak-privacy tier routes consented cloud AI calls — carrying only derived-only, minimized content — to a configured zero-retention, no-training provider endpoint governed by a data-processing agreement (DPA) under which the provider stores nothing and never trains on the data. Symptovue records metadata such as model, latency, estimated tokens, and cost for those calls, but does not retain prompt or response content in its own logs.

This claim depends on completed provider contracting, configuration review, and counsel approval before production launch, including a signed data-processing agreement (DPA).