Privacy policy

Last updated October 24, 2026.

What we collect

Your phone number and/or email (to sign you in), the entries you log (substance, quantity, time, notes, optional photos of labels), optional notes about yourself that you choose to add on the Account page, your questions and the answers, and basic technical data (IP address, browser type, timestamps) for security and rate limiting. Searches made without signing in are not tied to a person.

How we use it

To run the service for you: computing your clocks, reading labels from your photos, answering your questions, and sending you sign-in codes.

Aggregated and de-identified data

We may aggregate and de-identify data from the service (for example, which substances people log, in what quantities, at what times of day, and in what combinations) and use, license or sell that de-identified data for research, product development and commercial purposes. De-identified data cannot reasonably be linked back to you: it never includes your name, phone number, email, IP address, photos, free-text notes or questions, and we do not attempt to re-identify it and contractually prohibit recipients from doing so. Your identifiable personal data is not sold or shared with advertisers or data brokers.

Who sees it

Processors that help run the service, each bound by their own terms: Cloudflare (hosting and photo storage), Supabase (database, encrypted at rest), Anthropic (the model that reads labels and answers questions; it is sent the text of your entries and the photo you upload, not your name or number), Telnyx and Sendblue (text messages) and Resend (email) for sign-in codes, and ScrapeCreators (public X search; it receives only the substance name, never anything about you).

Retention and deletion

Your data stays until you delete it. You can edit or delete any entry at any time and download everything from the Account page. You can delete your account and all of its data yourself at any time from the Account page; deletion is immediate and permanent. Sign-in codes expire in 10 minutes; sessions last 180 days unless you sign out.

Security

Connections are encrypted (HTTPS), data is encrypted at rest, sign-in codes and session tokens are stored hashed, and database rows are reachable only by the service itself. No system is perfectly secure; tell us at contact@inyoursystem.ai if you find a problem.

Children

The service is for adults 18 and over; we do not knowingly collect data from children.

Changes and contact

We will post changes here with a new date. Questions: contact@inyoursystem.ai.