Privacy Policy

• Account Information: your name, email address, and password (stored only in hashed form).
• Health Data: blood sugar, blood pressure, weight, and medication records that you voluntarily enter or import via CSV.
• Appointments & Reminders: appointment details, notes, and medication reminder schedules you create.
• Emergency Contacts: contact names, phone numbers, email addresses, doctor details, blood type, allergies, and conditions you choose to store. Sensitive contact fields are masked on screen by default.
• Healthcare Provider Emails: addresses you enter when sending a report to a practitioner.
• Billing Information: subscription plan, status, and billing dates. Payments are processed by Lemon Squeezy; we never receive or store your full card number.
• Technical Data: basic log data (such as IP address, browser type, and timestamps) needed to operate and secure the Service.

• Provide the Service, including dashboards, trends, and metabolic zone indicators.
• Generate AI-powered insights from your health data when you request them.
• Create PDF reports and send reports to healthcare providers only when you ask us to.
• Send service-related emails such as password resets and account notices.
• Manage your free trial and subscription.
• Maintain security, prevent abuse, and comply with legal obligations.

We do not use your health data for advertising, and we do not sell it.

We do not sell, rent, or trade your personal or health data. We share information only as follows:

• At Your Direction: with a healthcare provider or other recipient whose email you enter when sending a report.
• Payment Processor: Lemon Squeezy, which acts as our Merchant of Record and processes subscription payments, taxes, and refunds under its own privacy policy.
• Service Providers: vendors that host our infrastructure, deliver email, generate PDFs, and provide AI processing for insights. They may use your data only to provide services to us.
• Legal & Safety: when required by law, subpoena, or court order, or to protect the rights, property, or safety of Savenno, our users, or others.
• Business Transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We use industry-standard safeguards, including bcrypt password hashing, HTTPS/TLS encryption in transit, restricted database access, and authenticated access to all health data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a breach of unsecured health information occurs, we will notify affected users as required by applicable law, including the FTC Health Breach Notification Rule.

We retain your data while your account exists, including after a subscription ends, so you can continue to access it. You may request deletion of your account and all associated data by emailing [email protected]. We will permanently delete your personal and health data within 30 days, except where we must retain limited records (such as billing records) to meet legal obligations.

• Access & Export: view and export your data at any time through PDF reports and data features.
• Correction: edit or delete individual readings and records within the app.
• Deletion: request deletion of your account and data.
• Withdraw Consent: stop using features such as AI insights or report sharing at any time.

U.S. State Privacy Rights: Depending on your state of residence (for example, California, Colorado, Connecticut, Virginia, or Washington), you may have additional rights to know, access, correct, delete, or obtain a copy of your personal and consumer health data, and to withdraw consent. We do not sell or "share" personal information for cross-context behavioral advertising. To exercise any right, email [email protected]. We will verify your request and respond within the time required by law, and we will not discriminate against you for exercising your rights.

We use only essential cookies to keep you signed in. As a Progressive Web App, Savenno may use local storage and a service worker to cache files for faster loading and offline access. We do not use advertising or third-party tracking cookies.

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us information, contact us and we will delete it.

Savenno is a consumer self-tracking tool and is not a healthcare provider, health plan, or business associate under HIPAA. Information you enter is protected under this Policy and applicable consumer privacy laws rather than HIPAA.

Savenno is operated from, and your data is processed in, the United States. If you access the Service from outside the U.S., you consent to the transfer and processing of your information in the United States.

We may update this Policy from time to time. We will post the revised version on this page with a new "Last updated" date and, for material changes, notify you through the app or by email.

Questions about this Policy or your data? Email [email protected].