Privacy Policy

Last updated: July 24, 2026

Biotica LLC, a Massachusetts limited liability company ("Biotica™," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices. By using Biotica, you agree to this policy.

1. Information We Collect

Account Information

When you register, we collect your email address and, optionally, your name. To calculate your calorie and macro targets, we also collect your date of birth and biological sex; both are required to use the App.

Health and Biometric Data

When you connect third-party integrations, we collect and store:

• Sleep data — sleep score, HRV, readiness score, resting heart rate, sleep stages (from Oura Ring)
• Body composition — weight, body fat percentage, and muscle mass (from Withings)
• Android Health Connect data — steps and active calories, nutrition (calories, protein, carbs, fat, and fiber), and workouts (type and duration) from Health Connect, and any data other apps (such as Whoop, Garmin Connect, Peloton, Strava, or MyFitnessPal) have written to Health Connect on your device. Health Connect is an aggregator: connecting it shares with Biotica data that those third-party apps wrote to Health Connect directly, even though Biotica has no direct relationship with those apps. Biotica reads from Health Connect only and never writes back to it.
• Apple Health data (iOS) — workouts (including distance and calories burned) and nutrition (calories, protein, carbs, fat, and fiber) from Apple Health, and any data other apps (such as Whoop, Garmin, Peloton, or Strava) have written to Apple Health on your device. Apple Health is an aggregator: connecting it shares with Biotica data that those third-party apps wrote to Apple Health directly, even though Biotica has no direct relationship with those apps. Biotica reads from Apple Health only and never writes back to it.
• Workout data — exercises, sets, reps, weights logged within the App
• Supplement data — supplement names, dosages, frequency, timing schedules, and per-dose adherence records you log manually, as well as on-hand inventory quantities, reorder thresholds, and stock-tracking records if you use the supplement inventory feature
• Progress photos — photos you upload to track your visual progress over time (front, side, and back angles). These are stored privately in your account and are never shared with other users.

App Functionality Telemetry

We record which AI features you use and when (for example, how many coach questions or photo analyses you have used this billing period), so we can enforce your subscription tier's usage limits and monitor the cost of running the AI coach. We do not use a third-party analytics SDK, we do not collect crash reports, and we do not track which screens you view or how long you spend in the App.

Diagnostic Info in Feedback

When you submit feedback or a bug report, we attach your app version, operating system, and platform (iOS or Android) to that submission so we can reproduce and fix the issue. We do not collect this information at any other time, and we do not collect device identifiers or advertising identifiers.

Feedback You Submit

When you send feedback or a bug report through the App, we collect the message you write, along with your app version, operating system, and device platform, so we can respond and fix the issue. Feedback is mirrored into a private issue-tracking system (GitHub) so our team can triage it; that system is not publicly accessible. When you delete your account, we redact your feedback from that system on a best-effort basis; in rare cases a brief window between your submission and your deletion request may mean a message is not fully redacted.

2. How We Use Your Information

We use your information to:

• Provide and operate the Biotica service, including syncing your biometric data
• Generate personalized AI-powered workout programs and performance insights
• Provide AI coaching responses — your biometric data is included in prompts sent to Anthropic's API. See Section 3 for detail on what is sent.
• Provide AI-powered visual analysis of your progress photos, for Pro and Elite subscribers — your selected photos and supporting biometric context are included in prompts sent to Anthropic's API. This requires a separate consent from general AI coaching, and nothing is sent until you agree. See Section 3 for detail on what is sent.
• Track your supplement protocol and correlate it with your biometric trends
• Send transactional emails (account verification, password reset, account activity notifications)
• Send product-update emails — launch announcements and occasional updates about new features, integrations, and improvements. We send these only with your consent, and you can unsubscribe at any time from any email we send. See the Communications section below.
• Improve and debug the App using the diagnostic details you attach to a feedback or bug report
• Comply with legal obligations

We do not sell your personal or health data to third parties. We do not use your health data for advertising purposes.

Communications and Marketing Emails

If you join our waitlist or otherwise provide your email address, you are consenting to receive our launch announcement and occasional product-update emails about Biotica features, integrations, and improvements. The lawful basis for this processing is your consent. We use Google Workspace to deliver email from noreply@biotica.app; Google receives your email address for the sole purpose of delivering messages we send. See Google's Privacy Policy. Every marketing or product-update email we send includes an unsubscribe link. You can also opt out at any time by emailing privacy@biotica.app. Unsubscribing does not affect transactional emails related to your account (verification, password reset, account activity).

3. Third-Party Services

Biotica integrates with the following third-party services when you choose to connect them:

• Oura Ring — sleep, HRV, and readiness data via Oura Cloud API. Governed by Oura's Privacy Policy.
• Withings — body composition data via Withings Health API. Governed by Withings' Privacy Policy.
• Android Health Connect — steps, active calories, nutrition, and workout data from Android Health Connect. Health Connect is an aggregator: it may contain data written by other apps on your device, such as Whoop, Garmin Connect, Peloton, Strava, or MyFitnessPal. When you connect Health Connect, Biotica reads whatever data you authorize and syncs it to Biotica's servers; it does not write back to Health Connect, and Biotica does not send any of your data to Google. Governed by Google's Privacy Policy.
• Apple Health (iOS) — workouts and nutrition data from Apple Health via Apple HealthKit, and, in future updates, additional health categories (sleep, heart metrics, body composition). Apple Health is an aggregator: it may contain data written by other apps on your device, such as Whoop, Garmin, Peloton, or Strava. When you connect Apple Health, Biotica reads whatever data you authorize; it does not write back to Apple Health. Governed by Apple's Privacy Policy.

We also use the following infrastructure providers:

• Supabase — database and authentication provider. Data is stored in US-based data centers. See Supabase Privacy Policy.
• RevenueCat — subscription and billing management. See RevenueCat Privacy Policy.
• GitHub — used internally to triage feedback and bug reports you submit through the App. Feedback is mirrored into a private repository visible only to our team. See GitHub's Privacy Statement.
• Expo (EAS Update) — delivers over-the-air app updates. Expo's servers see your device platform and app version when checking for updates; no Biotica account data is sent. See Expo's Privacy Policy.
• Anthropic (Claude API)— powers AI coaching features. When you use the AI coach (including the coaching Q&A and AI workout programming), we send a prompt to Anthropic's API that includes: your sleep score, HRV, readiness score, resting heart rate, body weight, body fat percentage, lean mass, step count, active calories, daily calorie intake and protein intake, supplement names, dosages, adherence records (whether each supplement was taken on each due night), and regimen schedule labels, recent workout history (exercises, sets, reps, weights), and your coaching question along with recent conversation history. Anthropic processes this prompt and returns a response. Anthropic does not use your data to train their models. Per Anthropic's standard API terms, prompts and responses may be retained by Anthropic for up to 30 days for safety monitoring and abuse prevention, after which they are deleted. The text of each AI coach output is stored in your Biotica account as part of your coaching history. We also retain a snapshot of the health data used to generate each coaching output (such as your readiness, sleep, and biometric values at the time of the response) for up to 90 days, so that we can review and improve the quality of AI coaching over time. See Anthropic Privacy Policy.
  
  Photo AI coaching (Pro and Elite).If you use the photo analysis feature, we additionally send to Anthropic: the progress photos you select for that analysis; your weight, body fat percentage, and muscle mass from the last 28 days, if logged; your average daily steps and step goal from recent weeks, if available; your goal, training phase, and height; and, if you ask the coach a question about your photos (Elite only), that question. This feature requires a separate, explicit consent from general AI coaching, shown before your first photo analysis, and nothing is sent until you agree. As with AI coaching text responses, Anthropic does not train its models on this data, and photos and accompanying data may be retained by Anthropic for up to 30 days for safety monitoring and abuse prevention, after which they are deleted; we cannot retrieve or delete them from Anthropic during that window. A short summary of what a photo analysis found may be retained in your Biotica account for up to 150 days so the coach can refer back to it in other conversations, and the analysis text itself may be cached in your account for the life of your account so a comparison you've already viewed can be shown again without re-analyzing your photos. Turning off photo AI consent stops new summaries or cached comparisons from being created going forward; it does not delete or undo anything already generated from earlier photos. The photo AI coach describes what it observes in your photos; it does not diagnose, estimate medical values, or replace professional medical advice.

4. Data Storage and Security

Your data is stored in Supabase's PostgreSQL database with row-level security enforced — your data is only accessible to your authenticated account. All data is encrypted in transit (TLS) and at rest. OAuth tokens for third-party integrations are stored in your account record and never shared with other users.

No security system is perfect. We encourage you to use a strong, unique password and enable two-factor authentication where available.

5. Health Data

Biotica treats health and biometric data with the highest level of care. We do not:

• Sell your health data
• Share your health data with insurers, employers, or marketers
• Use your health data to build advertising profiles
• Use your individually identifiable health data to train AI models without your explicit consent

If you connect Apple Health on iOS, the data Biotica reads may include health and fitness data that other apps (such as Whoop, Garmin, Peloton, or Strava) originally wrote to Apple Health. Biotica applies the same protections to that data as it does to all other health data collected through the App. Biotica reads from Apple Health only; it does not write any data back.

Biotica is not a HIPAA-covered entity and does not provide healthcare services. The App is a personal fitness and wellness tool. Please do not use Biotica as a substitute for professional medical care.

6. Data Retention

We retain your data as long as your account is active. If you delete your account, your personal data and biometric records are deleted immediately once you confirm deletion, with no grace period, except where we are required to retain it for legal or compliance reasons. Anonymized, aggregated data that cannot identify you may be retained indefinitely.

7. Your Rights and Choices

You have the right to:

• Access your account data from Biotica's systems — to request a copy, tap Settings → Export My Data in the App, which opens a pre-filled email to privacy@biotica.app. We will fulfill your request by email within 30 days. Subscription and purchase records held by Apple App Store, Google Play, or RevenueCat are available directly from those services through your platform account settings.
• Correct inaccurate data through the App settings
• Delete your account and all associated data (Settings → Delete Account). If you no longer have the App installed, you can also request deletion at biotica.app/delete-account— enter your email, confirm it's really you through a one-time link we send you, then confirm deletion on the page that follows. Deletion executes immediately once you confirm, with no grace period, the same as deleting from within the App.
• Disconnect third-party integrations at any time (Settings → Connected Integrations)
• Manage AI consent — AI coaching and photo AI coaching are controlled independently in Settings; declining or revoking either stops that feature's data from being sent going forward
• Opt out of non-essential communications by updating notification preferences in the App, or unsubscribe from marketing and product-update emails at any time using the unsubscribe link in any email we send or by contacting privacy@biotica.app

California Privacy Rights (CCPA/CPRA)

California residents have rights under the CCPA, as amended by the CPRA, including the right to know what personal information we collect, the right to delete it, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information.

Sensitive personal information.Some information Biotica collects is sensitive personal information (SPI) under the CCPA, including your health and biometric data (Section 1) and, if you track a prescription supplement in the supplement inventory feature, the fact that you take it and your usage pattern (derived from quantity on hand, stock dates, and reorder timing). We use SPI only to provide the features it supports — displaying your health data, generating AI coaching and photo analysis with your separate consent (Section 3), and running inventory tracking and reorder reminders. We do not use SPI to infer new characteristics about you, and we do not sell or share it.

To request that we limit our use of your sensitive personal information, or to exercise any other CCPA right, contact us at privacy@biotica.app. We will respond within 45 days.

8. Children's Privacy

Biotica is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately at privacy@biotica.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the App or on this page with a revised "Last updated" date. Continued use of Biotica after changes take effect constitutes acceptance of the revised policy.

10. Contact

Questions, concerns, or requests related to your privacy? Contact us at privacy@biotica.app, or by mail:

Biotica LLC
82 Wendell Ave, Ste 100
Pittsfield, MA 01201
United States