Cholestie Privacy Policy

Cholestie is operated by ECBC Technologies LLC ("Cholestie," "we," "us," or "our").

Cholestie is designed to help you understand and track cholesterol-related habits, meals, and lab results in a simple way. Because this information can be sensitive, we aim to collect only the information needed to provide the service.

Information We Collect

Account information. We collect your email address to create and authenticate your account using a one-time sign-in code.

Cholesterol and wellness information. You may choose to provide cholesterol lab results such as LDL, HDL, triglycerides, total cholesterol, test dates, and information about why you are using Cholestie.

Meal information. You may enter meal descriptions, take meal photos, choose photos from your device, answer clarification questions about ingredients or cooking methods, and save estimated saturated fat, fiber, and other meal-analysis information.

Meal photos. When you save a photo-based meal, Cholestie stores a resized JPEG copy privately with your account. Meal photos are not publicly accessible.

AI analysis information. Cholestie may generate meal names, estimated nutrient values, clarification questions, confidence information, and educational meal insights.

Usage information. We maintain limited usage information needed to operate the service, such as the number of AI meal analyses used within a day so that we can enforce usage limits.

Feedback. If you use Send Feedback, we collect your feedback category, message, account identifier, platform, and app version. We ask that you not include private medical information in feedback.

Our service providers may also process limited technical information necessary to deliver, secure, and troubleshoot their services, such as timestamps, network information, and security logs.

Cholestie does not require precise location access for its core features and does not require microphone access for meal analysis.

How We Use Your Information

• create and authenticate your account;
• store and display your cholesterol results and progress;
• analyze meals and estimate cholesterol-relevant nutritional information;
• save your meals and private meal photos;
• calculate daily saturated-fat and fiber totals;
• provide clarification questions and educational insights;
• enforce AI usage limits and protect the service from abuse;
• respond to feedback and support requests;
• maintain, troubleshoot, secure, and improve Cholestie; and
• comply with applicable law and protect our users, services, and rights.

We do not use your health information for targeted advertising.

AI Processing

Cholestie uses artificial intelligence to analyze meal descriptions and meal photos.

For typed meals, the meal description may be sent to our AI service provider.

For photo meals, Cholestie creates a resized image copy for analysis. The AI request does not intentionally include your email address, Cholestie user ID, or cholesterol lab results.

AI analysis can be inaccurate. Nutrient values generated by Cholestie are estimates and should not be treated as laboratory measurements or medical conclusions.

We currently use OpenAI to provide meal-analysis functionality. OpenAI states that data submitted through its API is not used to train its models unless the API customer explicitly opts in. Under OpenAI's standard API data controls, certain request and response content may be retained in abuse-monitoring logs for up to 30 days. We configure applicable Responses API requests with storage disabled where supported.

Service Providers

Supabase for account authentication, database hosting, private meal-photo storage, server-side functions, and related infrastructure.

OpenAI for AI meal analysis.

Mailgun for delivery of account authentication emails and one-time sign-in codes.

These providers process information only as necessary to provide services to Cholestie, subject to their own contractual, privacy, and security obligations.

How We Share Information

We do not sell your personal information or consumer health data.

We do not share your health information with advertisers or data brokers.

We may disclose information:

• to service providers that help operate Cholestie;
• when required by law, legal process, or governmental request;
• when reasonably necessary to investigate fraud, abuse, security incidents, or threats to users or the service; or
• in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable privacy requirements.

Data Retention

We generally keep your Cholestie account information, lab results, saved meals, meal photos, and related information while your account remains active.

When you delete your account, Cholestie is designed to remove your active account, saved lab results, saved meals, feedback associated with the account, AI usage records, and private meal photos.

Limited information may remain temporarily in security logs, backups, or systems operated by service providers when required for security, fraud prevention, legal compliance, or normal backup-retention processes.

Account Deletion and Your Choices

You may delete your Cholestie account from: Settings > Delete Account.

Account deletion is intended to permanently remove your Cholestie account and associated data from our active systems.

Depending on where you live, you may also have rights to request access to, correction of, deletion of, or information about personal data we process.

Privacy and data requests may be sent to: [email protected]

We may need to verify your identity before completing certain requests.

Security

We use technical and organizational measures intended to protect your information, including authenticated access, database access controls, private meal-photo storage, server-side AI credentials, and user-specific access policies.

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Children

Cholestie is intended for adults 18 years of age or older.

We do not knowingly collect personal information from children under 18 through Cholestie.

International Use

Cholestie currently uses service providers and infrastructure located primarily in the United States. If you use Cholestie from another country, your information may be transferred to and processed in the United States or other locations where our service providers operate.

Changes to This Policy

We may update this Privacy Policy as Cholestie develops.

If we make material changes, we may provide notice through the app, our website, or another appropriate method.

The "Last Updated" date above will indicate when this Policy was most recently revised.

Contact Us

For privacy questions, data requests, or general support: