CellStory Privacy Policy

Overview

CellStory is a wellness application that helps you track metabolic-health trends during GLP-1 maintenance. We collect health-related data only with your explicit consent and use pseudonymized identifiers in our database.

CellStory is not a medical device. It does not diagnose, treat, or prescribe. Always consult a qualified clinician for medical decisions.

What we collect

• Wellness data you choose to sync (for example blood glucose, body mass, and activity) from Apple Health or Health Connect
• Meal photos and inferred nutrition estimates when you log food
• Manual weigh-ins and outcome snapshots you enter in the app
• Granular consent choices recorded in an append-only consent ledger

We do not store your email, name, or phone number in our application database. Authentication is handled by Clerk, our identity provider.

How we protect your data

• Pseudonymized subject identifiers — your account is not linked to health records by email or name in our database
• Glucose values are encrypted before storage
• Region selection at onboarding for data residency alignment
• Least-privilege access for infrastructure and operations

Third-party processors

• Clerk — sign-in and session management (OAuth profile data)
• Neon — PostgreSQL database hosting
• Vercel — API hosting
• PostHog — product analytics (no raw health values or authentication tokens in events)

Your choices

You can grant or revoke consent per data type in the app. Revoking consent stops future collection for that purpose. Contact support for account deletion requests.

Contact

Questions about this policy: privacy@cellstory.app