Privacy

    Privacy Policy

    Last updated:

    This page is maintained by Club NutriChoix for the GutHealth platform (guthealth.clubnutrichoix.com). It describes our actual practices but does not constitute an independent certification or legal advice.

    1. Who we are

    Club NutriChoix ("we") is a Montréal, Québec, Canada based business. GutHealth is our platform for gut-health assessment and personalized nutrition recommendations.

    2. Data we collect

    • Account: email address, first name (optional), language preference.
    • Health assessment answers: symptoms, habits, goals, dietary preferences.
    • Subscription: Stripe identifiers (customer, subscription) — card numbers never touch our servers.
    • Technical logs: device type, pages viewed, visit timestamps.

    3. How we use your data

    • Generate your personalized plan and recommendations.
    • Provide and bill the service (via Stripe).
    • Send you account-related communications (confirmations, resets, invoices).
    • Improve the product using aggregated, anonymized statistics.

    We do not sell your personal data and do not share it for third-party advertising.

    4. Subprocessors

    • Supabase — database hosting, authentication, serverless functions (data located in the US / Canada).
    • Stripe — payment processing and subscription management (PCI DSS Level 1).
    • Lovable — web-application hosting (build and deploy).
    • Google Analytics 4 — anonymized audience measurement with IP truncation.
    • Lovable AI Gateway — generates recommendations from your assessment answers.

    5. Your rights (Quebec Law 25 & GDPR)

    You have the right to:

    • access your personal data;
    • correct inaccurate data;
    • request deletion;
    • receive a portable copy;
    • withdraw consent at any time.

    To exercise a right, contact our contact page. We respond within 30 days.

    6. Data retention

    We retain your data while your account is active, then for 24 months after closure. Technical logs are kept for up to 12 months. Stripe billing records are retained per Canadian legal requirements (7 years).

    7. Security

    All traffic is served over HTTPS with HSTS. Data access is enforced by PostgreSQL Row-Level Security policies — each user only accesses their own records. Passwords are hashed by Supabase Auth. See our Trust & Security page for more details.

    8. Children

    GutHealth is intended for adults. We do not knowingly collect data from anyone under 16.

    9. Cookies

    See our Cookie Policy for details on the cookies we use.

    10. Changes

    We may update this policy. The "Last updated" date above reflects the current version. Material changes are communicated by email to subscribers.

    11. Contact

    Questions about this policy? Contact us.