Privacy Policy

Terrain Keeper · Last updated September 1, 2026

This Privacy Policy explains how the Terrain mobile application ("Terrain", "the app", "we", "us") collects, uses, and protects your information. Terrain is operated by Loam & Slate LLC. By creating an account and using Terrain, you agree to the practices described below.

1. Information We Collect

We collect only the information needed to provide the app's features:

• Account information: email address, and (if you choose) phone number and name, used to create and secure your account.
• Profile & wellness details: date of birth, gender, height, weight, activity level, and health goals that you enter.
• Health-related entries you create: allergy and sensitivity information (including lab source and test dates you choose to record), supplements and schedules, food and diet logs, symptom logs, body measurements, and water intake.
• Emergency card details: whether you carry an epinephrine auto-injector, its expiration date and where you keep it, optional notes for helpers, and the name and phone number of one emergency contact you choose to enter. Please make sure that person is comfortable being listed. A copy is kept on your device so the card opens without a connection; it is removed when you sign out or delete your account.
• Photos you submit: pictures of products, foods, supplement labels, or lab results that you choose to capture or upload for identification and analysis.
• Wearable & health-app data you choose to connect: if you connect Apple Health, an Oura Ring, or another supported wearable, we import metrics such as steps, active energy, resting heart rate, heart-rate variability, and sleep so the app can display them alongside your logs and patterns. Apple Health data is read only with your explicit permission, is used solely to provide these in-app features, is never used for advertising or marketing, is never sold or shared with third parties for their purposes, and is never stored in iCloud by us. You can disconnect a source at any time in Settings → Connected Apps (for Apple Health, you can also revoke access in the iOS Health app).
• Device & usage data: basic technical information (such as app version and error logs) used to keep the app working reliably.

1a. Our Website and Membership Purchases

If you visit our website (for example the founding-membership page) the following applies in addition to the app practices above:

• Payments: membership payments are processed by Stripe. Stripe receives your email address, billing details, and card information directly; we never see or store card numbers. Stripe's own privacy policy governs its processing. We store your email, the membership status, and Stripe's identifiers for your subscription so the membership can attach to your app account.
• Access codes: if you redeem an access code we store the code, your email, and the resulting membership record.
• Questionnaire answers: the short questionnaire on the membership page (what feels off, suspected foods, whether you have test results) is stored by Loam & Slate LLC only, is never sent to Stripe or to any analytics or advertising service, and is deleted after 60 days if you do not join.
• Website analytics: we use PostHog to count page and step views (for example "offer viewed"). It records step names, your traffic source, and a browser identifier in a cookie or local storage. It does not receive your answers, email, or payment details, and we have disabled automatic capture and session recording.

2. How We Use Your Information

• To provide core features: tracking allergies, supplements, foods, symptoms, and wellness metrics.
• To identify products and analyze photos and food entries (including nutrition and allergen information).
• To personalize your experience, reminders, and insights.
• To maintain security, prevent abuse, and improve reliability.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Third-Party Services

We share information only with service providers that help us run the app, and only as needed to deliver its features:

• Clerk. Authentication and account management (handles your sign-in credentials).
• Railway. Secure cloud hosting and database storage of your account data.
• OpenAI. When you use photo analysis or the in-app assistant, the relevant image or text is sent to OpenAI to generate a result. This content is processed to provide the feature and is not used to advertise to you.
• Food data sources (e.g., USDA FoodData Central and Open Food Facts). These receive only your search terms or scanned barcodes to return product/nutrition information, not your personal account data.

In addition, the app and website use Stripe (membership payments, website only), PostHog (product analytics: event names and non-identifying properties only, never health entries or messages), and Sentry (error reports with request bodies, identifiers, and personal data stripped before sending).

4. Data Storage & Security

Your data is stored on secured cloud infrastructure. We use industry-standard measures including encrypted transport (HTTPS), authenticated access, and security headers. Authentication tokens are stored on your device using the operating system's secure storage. No method of transmission or storage is 100% secure, but we work to protect your information.

5. Your Choices & Rights

• Access & update: you can view and edit your profile and entries in the app at any time.
• Account & data deletion: you can permanently delete your account and all associated data from within the app at Settings → Delete Account. This is immediate and irreversible. You may also email us to request deletion.
• Permissions: camera and photo-library access are optional and used only when you choose a photo feature; you can manage these in your device settings.
• Export: you can download a copy of your logs and allergy profile at any time from Settings → Reports → Export My Data (CSV). The file is created on request and shared through your device; we do not keep a copy.

6. Children's Privacy

Terrain is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through in-app notice.

8. Contact Us

Questions or requests about this policy or your data? Contact us at ryan5denome@gmail.com.