Privacy Policy

This Privacy Policy explains how the IBS Tracker companion web app (the “Service”) collects, uses, and shares information.

Who we are

The Service is operated by Belletty Digital (Maharashtra, India). Contact: hello@belletty.com.

What we collect

Depending on how you use the Service, we may process:

• Notion OAuth data: an access token issued by Notion after you connect your workspace.
• Workspace metadata: such as workspace name/id and integration/bot id returned by Notion.
• User content from Notion (when you later enable analysis/reporting): meals, symptoms, notes, and related fields stored in your Notion databases/pages.
• Basic technical data: server logs may include IP address, user agent, and timestamps for security and debugging.

How we use your information

• To authenticate you with Notion (OAuth) and connect your workspace.
• To fetch your tracker data from Notion when you request it.
• To generate insights and reports (including “doctor-ready” summaries) when you request them.
• To maintain, secure, and improve the Service.

Session-only storage (current Phase 1)

Currently, the Service is configured to not store your Notion data beyond your session. Your Notion access token and basic workspace info are stored in your session and cleared when you disconnect (or when the session expires). We do not intentionally store your Notion content in a database in this phase.

AI processing (OpenRouter)

If/when you use the analysis features, the Service may send relevant portions of your Notion data (e.g., meal/symptom logs) to AI models via OpenRouter to generate insights and report text. This means your data may be processed by third-party model providers reachable through OpenRouter.

We aim to minimize the data shared to what’s necessary for the requested output. However, AI processing is not the same as a private medical consultation.

Sharing

We may share information:

• With Notion (to complete OAuth and API requests you initiate).
• With OpenRouter and underlying model providers (only when you request AI-generated outputs).
• With service providers (e.g., hosting/reverse proxy) to operate the Service.
• If required by law, legal process, or to protect our rights and users.

Security

We take reasonable measures to protect information, but no method of transmission or storage is 100% secure.

Your choices

• You can disconnect the Notion connection from within the app.
• You can revoke the integration’s access from within Notion.

Changes

We may update this policy from time to time. We will update the “Last updated” date when we do.