← Back to Home

Privacy Policy

Effective Date: February 19, 2026

IBS Pal is operated by AKEN LTD, a company registered in the United Kingdom. This Privacy Policy explains how we ("we", "us", or "our") collect, use, and safeguard your information when you use our mobile application.

1. Information We Collect

Personal Information: Your email address when you sign in.
Usage Data: How you use the app (e.g. scan history, feature usage).
Health Data: Information you enter into health features, including symptoms, bowel movements, food logs, medications, mood, stress, and sleep.
Device Info: Device type, operating system, and app version.

2. How We Use Your Information

To provide core app functionality.
To improve our services and user experience.
To communicate important updates or respond to inquiries.

3. Sharing Your Information

We do not sell or share your personal information with third parties except to provide necessary services like Firebase Authentication, RevenueCat, OpenAI (for AI features), and PostHog analytics.

4. Data Security

We take reasonable measures to protect your information using encryption and secure storage through Firebase and other trusted services.

5. Your Choices

You can delete your account and data using the in-app Delete Account button. You can also contact us at support@ibspal.com for support.

6. Children's Privacy

Our app is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe we have collected data about a child under 13, please contact us immediately at support@ibspal.com so we can take appropriate action.

7. Special Category (Health) Data

Some features (such as the symptom journal and personalised trigger profiles) process health-related information which is treated as special category data under UK GDPR. At sign up, users currently agree to our Terms of Service and Privacy Policy. We do not currently use a separate health-data consent checkbox during account creation.

8. Lawful Basis for Processing

Account creation and subscription/billing: performance of a contract and compliance with legal obligations.
Core app functionality (scanning, journaling, personalised recommendations): where health data is involved we rely on consent recorded when users accept our Terms of Service and Privacy Policy at sign up; for non-health usage metrics we rely on our legitimate interests to improve the service, balanced against user privacy.
Analytics and product improvement: legitimate interests (you may opt out where provided) or consent where required. We use PostHog (PostHog, Inc., US) for usage analytics.
Marketing communications: explicit consent.

9. Data Retention

Account and billing records: retained for the duration of the account and for 7 years thereafter for financial and tax compliance.
Usage analytics and logs: retained up to 36 months unless anonymised sooner.
Symptom journals and health-related data: retained until you delete your account. After deletion, we may keep anonymised or aggregated data for research or product improvement for up to 5 years.

10. Your Rights

You have the right to access, rectify, port, erase, restrict or object to processing of your personal data. To exercise these rights, use the in-app settings where available, or contact us at support@ibspal.com. We will respond to requests in accordance with applicable law (generally within one month). For complex requests or where further verification is needed, we may extend this period as permitted by law and will notify you.

11. Supervisory Authority

As a UK-registered company, the Information Commissioner's Office (ICO) is the relevant supervisory authority. If you are unhappy with our response to a data protection request you may complain to the ICO: https://ico.org.uk.

12. Third-Party Processors

We use third-party processors to provide core services. These include (but are not limited to):

Firebase (Authentication, Database, Storage): https://firebase.google.com/support/privacy
RevenueCat (subscription and payment processing): https://www.revenuecat.com/privacy
PostHog (usage analytics): https://posthog.com/privacy
OpenAI (AI-powered journal insights): https://openai.com/policies/privacy

13. International Data Transfers

Your data may be transferred to and processed in the United States by Firebase/Google, OpenAI, RevenueCat, and PostHog. These transfers are carried out under Standard Contractual Clauses (SCCs) approved by the UK ICO under UK GDPR Chapter V.

14. Medical Disclaimer

IBS Pal does not provide medical advice. The content provided in this app is for informational purposes only and is not intended as a substitute for advice from a healthcare professional. Always consult a doctor or qualified health provider with any questions you may have regarding a medical condition. Never disregard or delay seeking professional medical advice based on information provided by this app.

15. Changes to This Policy

We may update this policy occasionally. Updates will be posted on this page with a new effective date. For material changes, we will provide clear notice and, where required, seek fresh consent.

16. Contact Us

If you have questions about this Privacy Policy, contact our data protection contact:

AKEN LTD
Email: support@ibspal.com