Privacy Policy

1. Who we are

Bariva ("the Service", "we") is a web app that builds a personalized supplement plan from your health goals, budget, and blood test results. Privacy questions: aflaloyoav@gmail.com.

2. What we collect

• Account — your email address (sign-in is by one-tap link; there are no passwords).
• Health profile — name, date of birth, sex, weight, height, activity level, diet, and any medical conditions, allergies, and medications you choose to provide.
• Blood test results — marker values you type in or extract from a scan. Parsing happens on your device by default, and the lab file is not uploaded. If a report can't be read on-device, you can choose — with your explicit consent, asked on every scan — to send the file securely for one-time AI extraction. The file is processed transiently, is never stored, and only the values you confirm are saved.
• Plan activity — your chosen supplements, daily check-offs, and the energy/sleep/mood journal if you use it.
• Coach conversations — messages you send to the AI coach and its replies.
• Preferences — language and units.
• App usage — basic usage events (which screens and features are used, and when) and technical error reports, used to improve the app. This is collected by us alone and stored in the same secured database — we do not use tracking cookies or third-party analytics.

3. Sensitive data and consent

Health data is specially protected under Israel's Protection of Privacy Law, 1981. Providing it is voluntary and constitutes consent to process it for the purposes in this policy. You may decline — but without it we cannot personalize a plan for you.

4. How we use it

• Building your plan, safety-filtering against your medications and conditions, and tracking progress.
• Powering the AI features (coach, insights, weekly report) — see section 6.
• Aggregate, anonymous statistics only (e.g., "users taking iron improved ferritin by X on average"), and only when at least 5 distinct users are in the calculation — so no individual can be identified.
• Improving the app — usage events help us understand which features are useful and which need work.

We never sell or rent your data to anyone.

5. Where your data lives

Data is stored in a managed Supabase database (on AWS infrastructure in the Sydney, Australia region), encrypted in transit and at rest, with row-level access controls. The site is served via Vercel. This means your data is stored and processed outside Israel, with providers bound by industry-standard security and privacy commitments.

6. AI sub-processors

• Anthropic (US) — when you use the coach or insights, a summary of your profile, marker values, and chat messages is sent to Anthropic's API to generate the response. If you explicitly consent to the AI scan, the lab-report images are also sent for one-time extraction and are not stored. Under Anthropic's API terms, this data is not used to train models.
• Voyage AI (US) — your question text is sent for similarity search against our internal research library. No identifying details are included.

7. Affiliate links

iHerb and Amazon purchase links carry our affiliate code and we may earn a commission on purchases. As an Amazon Associate we earn from qualifying purchases. This never affects your price or the recommendations — ranking is determined solely by fit to your data.

8. Retention and deletion

Data is kept while your account is active. Deleting your account — from the profile screen in the app — permanently and immediately erases everything: account, profile, all scans, logs, and conversations. No copies are retained. Technical usage events are unlinked from your account at deletion and become fully anonymous.

9. Your rights

Under the Protection of Privacy Law you may access, correct, or delete your data. Most of this is available directly in the app (profile editing, account deletion); for anything else, write to aflaloyoav@gmail.com.

10. Minors

The Service is intended for adults 18+. If we learn we hold a minor's data, we will delete it.

11. Changes

We will update this policy as needed; material changes will be announced in the app. The last-updated date appears at the top.