Privacy Policy

Balloon Gut Health Tracker, Inc. ("Balloon," "we," "us," or "our") provides the Balloon mobile application, websites, and related products and services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Platform.

Information we collect

We collect personal information when you provide it to us, when you use the Platform, and when you choose to connect another service.

Personal information you provide to us

• Account and profile information. Information such as your name, email address, account details, and the profile information and preferences you choose to provide.
• Health and wellness information. Information you choose to record about your digestive health and other health or wellness matters, including information entered through tracking and other Platform features and related notes or images. We refer to information recorded in these features as your "health logs."
• Communications. Survey responses, feedback, support messages, and other content you send to us.
• Subscription and transaction information. Information about your subscription and purchases. Apple and our payment processor handle payment credentials; Balloon does not receive your complete payment-card number.

Personal information we collect automatically

• Device and usage information. Technical information about your device, network, app or browser, approximate location derived from IP address, diagnostic data, notification tokens, and information about how you interact with the Platform. Usage information may be associated with your Balloon account so we can operate and improve the Platform.
• Advertising attribution and conversion information. Limited pseudonymous information about an installation or non-health conversion, as described under "Advertising, attribution, and analytics providers" below.

Information from connected services

If you choose to connect Apple Health, sign in through a third-party account, or otherwise connect another service, we receive information that you authorize that service to provide. You can change a connected service's permissions through that service or your device settings.

De-identified information

We may create aggregated or de-identified information by removing or modifying information that reasonably identifies you. We maintain and use such information in de-identified form and do not attempt to re-identify it except to test whether our de-identification processes are effective or as permitted by law.

How we use information

We use personal information to:

• provide, personalize, maintain, and secure the Platform and its features;
• manage accounts and subscriptions and deliver service messages and enabled notifications;
• respond to support requests and other communications;
• understand feature use, troubleshoot errors, conduct research and development, and improve the Platform;
• send marketing communications where permitted and measure advertising using limited pseudonymous attribution and conversion data;
• prevent fraud, abuse, and security incidents; and
• comply with law and establish, exercise, or defend legal claims.

Apple Health

If you enable Apple Health integration, Balloon may read or write health and activity information you authorize, such as activity, nutrition, mood, or menstrual information. Relevant authorized data may sync to your Balloon account to provide Platform features. Apple Health access is optional, and you can review or revoke it in your device settings.

We do not use Apple Health data for advertising or marketing, sell it, or disclose it to advertising platforms or data brokers.

How we disclose information

We disclose personal information only as described below. Service providers process information on our behalf only as needed to perform their services.

• Platform operations. Providers that support hosting, storage, diagnostics, security, customer support, communications, payments, and other Platform operations process the information reasonably necessary to perform those functions. This may include health logs where they are stored in the Platform or where you choose to include them in a support request.
• Optional and connected features. Providers supporting an optional feature, including AI-assisted features and connected health or device services, process the information you submit or authorize as needed to provide that feature.
• Advertising, attribution, and analytics providers. We use AppsFlyer, Meta, Apple Search Ads, and Firebase to measure whether advertising results in an app installation, registration, login, trial, or subscription. Depending on your device settings and consent choices, these providers may receive limited pseudonymous attribution and conversion data, such as an advertising or installation identifier, IP address, device and app information, campaign information, and conversion events. We do not send these providers your health logs or information about activity recorded in your health logs. We do not use health logs to create advertising audiences or personalize advertisements.
• Legal, safety, and corporate transactions. We may disclose information when reasonably necessary to comply with law or legal process, protect rights and safety, investigate abuse or fraud, or evaluate or complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.
• At your direction. We disclose information when you ask us to, consent to the disclosure, or use a feature that makes the disclosure reasonably clear.

Consumer health data notice

Some privacy laws define "consumer health data" more broadly than traditional medical records. Depending on where you live, the health and wellness information you provide, related profile or connected-service information, and insights derived from that information may be consumer health data.

• Categories and sources. The consumer health data we collect may include the health and wellness, profile, connected-service, and derived information described above. We collect it from you, from your use of the Platform, and from services you choose to connect.
• Why we collect and use it. We use consumer health data to provide and personalize Platform features, maintain and secure the Platform, provide support, and comply with law.
• Categories of recipients and data disclosed. Health logs and related profile or connected-service information may be processed by providers supporting Platform operations, optional features, and connected services, but only as reasonably necessary to perform those functions. Legal, safety, and corporate-transaction recipients may receive relevant information where described above. We may also disclose information at your direction.
• No sale or advertising disclosure. We do not sell consumer health data. We do not disclose health logs or other consumer health data to AppsFlyer, Meta, Apple Search Ads, Firebase, other advertising platforms, or data brokers.
• Your choices and rights. Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of consumer health data and to withdraw consent for certain collection or sharing. You may change connected-service permissions in your device settings and submit a request at legal@balloonguthealth.com. You may appeal our decision on a request by replying to that decision and asking for an appeal.

Advertising choices; sale and sharing

We do not sell personal information for money. Some privacy laws may treat the disclosure of device, advertising, or attribution information for cross-context behavioral advertising as a "sale" or "sharing." You can limit tracking through your iOS App Tracking Transparency choice, device privacy settings, and any privacy controls we make available. You may unsubscribe from marketing email using the link in the message.

Retention

We retain personal information for as long as reasonably necessary to provide the Platform, maintain your account, fulfill the purposes described in this policy, comply with legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods depend on the type of information, why we collected it, the length of our relationship, and applicable legal requirements. We may retain de-identified information where permitted by law.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure. If you believe your account or personal information has been compromised, contact us promptly at legal@balloonguthealth.com.

Your privacy rights

Depending on where you live, you may have rights to know about, access, correct, delete, restrict, or obtain a portable copy of personal information; withdraw consent; opt out of certain targeted advertising, sale, or sharing; and appeal a decision. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

You can use available Platform controls or contact legal@balloonguthealth.com. We may request information reasonably necessary to verify your identity and authority. Rights are not absolute, and applicable exceptions may apply. An authorized agent may make a request where permitted by law, subject to verification.

Cookies and similar technologies

Our websites and Platform may use cookies, software development kits, pixels, and similar technologies for authentication, preferences, security, performance, analytics, and advertising measurement. Your browser, device settings, and consent choices may let you limit some of these technologies.

International processing

Balloon and its providers may process information in the United States and other countries whose data-protection laws may differ from those where you live. Where required, we use appropriate safeguards for international transfers.

Children

The Platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us so we can review and, where appropriate, delete it.

Changes to this policy

We may update this Privacy Policy to reflect changes to the Platform, our practices, or applicable law. We will update the date above and provide additional notice when required.

Contact us

Questions, concerns, privacy requests, and legal notices may be sent to Balloon Gut Health Tracker, Inc. at legal@balloonguthealth.com.