Privacy Policy

Effective date: May 30, 2026

DSai ("we", "our", "the app") is operated by ORIDIET (THAILAND) COMPANY LIMITED. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account Information

• Email address and encrypted password (for authentication via Supabase)

Health Data (Apple HealthKit)

• Sleep stages (deep, REM, total duration)
• Heart rate variability (HRV SDNN)
• Resting heart rate

Health data is read with your explicit permission and is used solely to analyze how your supplements may affect your health outcomes. We never sell, share, or use your health data for advertising.

Supplement Data

• Supplements you track (name, dosage, schedule, start/stop dates)

Health Records

• Medical records, test reports, and genetic results you upload (stored locally on your device)
• Photos taken with your camera for supplement identification

Chat Messages

• Conversations with the AI assistant are stored to provide context and continuity

2. How We Use Your Data

• To provide personalized supplement tracking and health analysis
• To generate insights about how supplements may correlate with your health metrics
• To power the AI chat assistant with relevant context
• To send daily supplement reminders (if you enable notifications)

3. Data Storage & Security

• Account and supplement data is stored securely on Supabase (cloud database with row-level security)
• Health records and attachments are stored locally on your device
• All data transmission uses HTTPS encryption
• Authentication sessions are stored securely in the iOS Keychain

4. Third-Party Services

• Supabase — Authentication and cloud database
• Anthropic (Claude) — AI chat assistant
• Open Food Facts — Supplement product search
• Apple HealthKit — Health data access (read-only)

We do not share your personal data with any third party for advertising or marketing purposes.

5. Your Rights

• Access: You can view all your data within the app
• Deletion: You can delete your account and all associated data from Settings
• Portability: Your health data remains in Apple Health and is not locked into our app
• Revoke permissions: You can revoke HealthKit access at any time in iOS Settings

6. Children's Privacy

DSai is not intended for children under 13. We do not knowingly collect data from children.

7. Changes to This Policy

We may update this policy from time to time. Changes will be posted within the app and on our website.