Privacy Policy

Tulsy AI ("Tulsy AI", "we", "us") provides an executive health-intelligence application accessible at tulsyai.app. We are the data controller for personal data processed through the app. Contact: info@tulsyai.com.

To provide the service we process the following categories of personal data:

• Account data: email address, encrypted password, account timestamps.
• Profile data: display name, age band (birth year), hormonal status, cycle dates, supplements list, subscription tier.
• Health logs: sleep hours and quality, energy, mood, stress, workload, exercise, steps, nutrition entries, free-text notes and tags.
• Derived insights: AI-generated scores, forecasts, and recommendations based on the above.
• Technical data: device, browser, locale, error logs (with personal identifiers stripped).

Tulsy AI is for adults aged 18 and over. The service is not directed to minors and we do not knowingly collect data from children.

• Performance of contract — to provide the app you signed up for.
• Explicit consent — for processing data concerning health (Art. 9(2)(a) GDPR). You give consent at signup and can withdraw it at any time by deleting your account.
• Legitimate interests — security, fraud prevention, service improvement (limited to non-health technical data).

• Operate the app, store your logs, generate personalized insights and forecasts.
• Send transactional emails (signup verification, password reset, account changes, optional weekly summary).
• Maintain security, prevent abuse, fix bugs.

We do not sell your personal data. We do not serve third-party advertising. We do not share your health data with marketers or insurers.

• Lovable Cloud — managed cloud backend for database, authentication, edge compute, file storage and email delivery (EU/US data centers).
• Lovable AI Gateway (Google Gemini) — used to generate insights and answer your "Ask AI" questions. Your prompt and a 7-day window of your logs are sent for inference. Inputs are not used to train models.
• Sentry — receives application error reports with personal identifiers stripped.

We retain your data for as long as your account is active. When you delete your account, all logs, insights, profile data and authentication records are permanently erased within 30 days. Backups are rotated within 90 days.

Subject to GDPR, UK GDPR and CCPA, you have the right to access, rectify, port, restrict, object to or erase your personal data. The simplest way to exercise erasure is the "Delete my account" button in Settings. For all other requests, email info@tulsyai.com and we will respond within 30 days.

Where data is transferred outside the UK or EEA (e.g. to US-based sub-processors), we rely on UK IDTA / EU Standard Contractual Clauses.

Data is encrypted in transit (TLS 1.2+) and at rest. Row-level security policies prevent any user from reading another user's data. Access to production systems is restricted and audited.

Tulsy AI is a wellness intelligence tool. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Always consult a qualified clinician for medical concerns. Do not disregard professional medical advice because of anything you read in the app.

We will notify you by email of material changes to this policy. Contact: info@tulsyai.com. See also our Terms of Service.