BristoLens Privacy Policy
Effective date: September 29, 2026
Local health diary
Your bowel-movement entries, Bristol types, colours, urgency, comfort ratings, selected factors, notes and timestamps are stored locally on your device. BristoLens does not require an account, does not provide cloud sync, and does not store your photos after an AI scan finishes.
Product analytics
BristoLens uses Mixpanel to understand whether app screens and product features work as intended. We may collect product-interaction events such as app launch, onboarding step completion, selected tab, entry type logged, AI scan start/success/failure, paywall view and purchase result, associated with a random app installation identifier rather than your name or account. We configure Mixpanel without automatic event collection or IP-based geolocation. We do not send your notes, photos, exact log timestamps, selected symptoms or factors, or any health profile to Mixpanel.
Optional written feedback
If you choose Send feedback in Settings, your written message is sent to the ShortsBlink feedback service for product support and improvement. A random app installation identifier accompanies it for security and abuse prevention and can link repeat feedback from the same installation. The message is stored in encrypted audit records that expire after 90 days. The app also sends Mixpanel a feedback-submitted event without the message text. Please avoid including private health details in feedback. No feedback is sent when you close the form without sending.
Optional AI processing
The AI photo scan runs only after you choose or take a photo, review it, tap Analyse, and allow the named transfer. The prepared JPEG is sent over HTTPS to Smart Automation SRL's BristoLens processing proxy and then to OpenAI solely to return a suggested Bristol type, colour, confidence and short appearance note. The proxy processes the request in memory and does not intentionally persist the photo or result. OpenAI is instructed not to store the response for model use; its API systems may retain limited request content in abuse-monitoring logs for up to 30 days unless stronger account-level controls apply. No email address, contact details, diary notes or Mixpanel identifier is included. If you decline, manual entry remains available.
Weekly insights
When you request and allow a weekly insight, the same proxy sends OpenAI aggregate numbers only — days logged, entry count, Bristol-type counts, an internal 0–100 consistency index, and up to three measured factor labels and deltas. Your photos, free-text notes and exact timestamps are never included in this request.
App verification and abuse prevention
Each optional AI request includes Apple's signed AppTransaction value so the proxy can verify that it came from BristoLens. The proxy verifies the app identity, derives a one-way hashed rate-limit identifier, and does not store the signed value. Apple, the proxy host and OpenAI necessarily receive network information such as an IP address while delivering their services. This information is used for security, request delivery and abuse prevention, not cross-app advertising.
Purchases
Subscriptions are processed by Apple through StoreKit. We do not receive or store your payment card details. The app checks your App Store entitlement locally to decide whether premium features are available.
Your choices and deletion
You can edit or delete individual entries in the Log tab, or delete all BristoLens data from Settings after confirmation. Deleting the app also removes its locally stored data from that device, subject to any device backup settings you control. You can manage or cancel subscriptions through your Apple Account.
Children
BristoLens is not directed to children under 13 and does not knowingly collect personal information from children.
Contact
Privacy questions can be sent to Ion Mosnoi at moshnoi2000@gmail.com. Do not include private health information in support messages.