Privacy Policy

EvenKeel Health Companion (“EvenKeel,” “we,” “us,” “our”) is provided by MooneChild Enterprise, LLC. This policy explains how we collect, use, share, and protect your information, including your consumer health data.

MooneChild also makes other products with their own company-wide privacy policy: MooneChild Enterprise Privacy Policy.

• Account information: name, email address, and password.
• Health information you log: glucose, blood pressure, weight, sleep, activity, water intake, meal logs including photos, and medications, prescriptions, and supplements.
• Appointment and reminder data.
• Payment and subscription status through Stripe. We never see or store full card numbers.
• Device, usage, and crash analytics.
• Generated insights: trends, estimated A1C, and — only for users who separately opt in — AI-generated meal analysis from uploaded meal photos.

To operate core tracking, trends, and reminder features; to provide AI meal analysis for opted-in users; to provide support; to maintain, secure, and improve the app; to communicate with you about your account; and to comply with the law.

Named service providers, each under confidentiality obligations:

• Supabase — hosting and database.
• Stripe — payment processing.
• Google Gemini (via the Lovable AI gateway) — AI meal-analysis vendor, used only for users who opt in.

We also disclose information for legal or safety reasons when required by law, and to a successor entity in a merger or acquisition — with notice to you first.

We never sell personal or health data to anyone.

We obtain affirmative opt-in consent through a dedicated screen — never bundled into general terms — separately for:

1. Core health data collection, required to use the app.
2. AI meal photo analysis, optional.
3. Marketing emails, optional.

You can withdraw any of these at any time from Settings > Privacy & Data.

You may:

• Access the data we hold about you.
• Correct inaccurate data.
• Obtain a portable copy.
• Delete your data, including backups, within 6 months.
• Withdraw consent.
• Appeal a denied request.

We respond within 45 days, with one possible 45-day extension. Requests are free up to twice a year. If you are unsatisfied with our response, you may escalate to your state Attorney General.

We use encryption in transit, access controls, and regular security review. If a breach of unsecured health information occurs, we will notify affected users within 60 days as required by the FTC Health Breach Notification Rule, and will also notify the FTC and — if 500 or more residents of a state are affected — the media.

We retain your data while your account is active, plus a limited period afterward for legal and dispute-resolution purposes. Following a deletion request, data — including backups — is deleted within 6 months, except where the law requires longer retention.

EvenKeel is not directed to anyone under 18, and we do not knowingly collect data from children.

Additional rights may apply under Washington’s My Health My Data Act, Nevada’s and Connecticut’s consumer health data laws, and California privacy law. The rights described above are intended to reflect these protections as a baseline for all users, regardless of where you live.

Material changes — especially to what health data we collect or share — trigger a notice and, where required, renewed consent before they take effect.

The simplest way to reach us is by email:

moonechildenterprise@gmail.com
MooneChild Enterprise, LLC

If you need to reach us by mail, email us first and we will provide a postal address for your inquiry.