Privacy Policy

Bowey ("we", "us") is committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights. Because Bowey is a health diary, some of the data you provide is classified as a special category of personal data under GDPR (Article 9) — we take this seriously.

1. Data Controller

Bowey is operated by Farkas Sándor. Contact: asdevsupport@gmail.com

2. Data We Collect

Account data: your email address when you register. If you use Sign in with Apple, Apple may provide either your real email address or a private relay address — we store whichever Apple provides. Health diary entries: the free-text notes you log in the app (food, drinks, bowel movements, symptoms, stress, activity, medication). This is health data under GDPR Article 9 and is processed only with your explicit consent. Parsed events: structured health events extracted from your diary entries by AI (e.g. food type, symptom severity, bowel consistency). AI analysis results: pattern and trigger–symptom connections derived from your entry history. Onboarding answers: your responses to optional setup questions (if any). Usage data: basic app interaction logs collected by Supabase. Push notification token: if you enable daily reminders, a device push token is stored solely to deliver those notifications. This token does not identify you personally and is deleted when you disable reminders or delete your account. Voice recordings: if you use the optional microphone feature to dictate a diary entry, the audio is recorded on-device and sent to OpenAI for transcription via our server-side Edge Function. The audio is immediately discarded after transcription — we never store the audio file. Only the resulting text transcript is saved as a diary entry. Subscription status: if you subscribe to Bowey Pro, Apple passes us a subscription receipt which we verify against Apple's servers. We store only your subscription status and expiry date — we never see or store your payment card details.

3. How We Use Your Data

We use your data solely to provide the Bowey service: • To create and manage your account. • To parse your diary entries into structured health events using AI. • To run a periodic holistic analysis of your entry history to surface trigger–symptom patterns. • To display your personal health timeline and insights within the app. • To send you optional daily reminders if you have enabled them. • To verify and manage your Bowey Pro subscription status. We do not sell your data, use it for advertising, or share it with third parties beyond the processors listed below.

4. Third-Party Processors

Supabase (supabase.com) — authentication, database, and Edge Function hosting. Your data is stored in the eu-central-1 region (Frankfurt, Germany), ensuring it remains within the European Economic Area. OpenAI (openai.com) — AI parsing, transcription, and analysis. When you save a diary entry or when a periodic analysis runs, the relevant text and structured events are sent to OpenAI via our server-side Edge Functions. If you use the microphone feature, audio is sent to OpenAI Whisper for transcription and immediately discarded — only the resulting text is stored. The mobile app never contacts OpenAI directly. Does OpenAI retain your data? Per OpenAI's API Data Usage Policy, API inputs are not used to train models. Data may be retained for up to 30 days for safety monitoring, after which it is permanently deleted. OpenAI Privacy Policy: openai.com/policies/privacy-policy OpenAI API Data Usage Policy: openai.com/policies/api-data-usage-policies Apple Inc. (apple.com) — subscription management and payment processing. When you subscribe to Bowey Pro, Apple handles all payment transactions entirely. We send subscription receipts to Apple's verification API to confirm your subscription status. We receive only confirmation of active/inactive status and expiry date — never your payment card details. Apple Privacy Policy: apple.com/privacy

5. Legal Basis for Processing (GDPR)

We process your ordinary personal data (account data, usage data) on the basis of contract performance — it is necessary to provide the service. We process your health data (diary entries, parsed events, analysis results) on the basis of your explicit consent (GDPR Article 9(2)(a)), which you give when you complete onboarding. You may withdraw this consent at any time by deleting your account.

6. Data Retention

Account data is retained until you delete your account. Diary entries, parsed events, and analysis results are retained until you delete them individually or delete your account. Deleting your account permanently and immediately erases all your data — including all diary entries, events, and analysis results — from our servers. This cascades from the deletion of your authentication record and cannot be undone.

7. Your Rights (GDPR)

If you are in the European Economic Area you have the right to: • Access your personal data • Correct inaccurate data • Request erasure of your data (right to be forgotten) • Withdraw consent to processing health data at any time • Data portability • Lodge a complaint with your local supervisory authority To exercise any of these rights, contact: asdevsupport@gmail.com. You can also delete your account directly from the app settings, which immediately erases all your data.

8. Children

This service is not intended for users under 16 years of age. We do not knowingly collect data from children.

9. Not Medical Advice

Bowey is a personal pattern journal, not a medical device. The insights and pattern suggestions generated by the app are informational only and do not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional about your symptoms.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via an in-app notice before they take effect. For changes that affect how we process your health data, we will request your explicit re-consent before continuing to process that data. Continued use of the app after non-material changes are posted constitutes your acceptance of the updated policy.

11. Contact

For any privacy-related questions, contact us at: asdevsupport@gmail.com