Data Deletion
The short version
- Everything GutStamp knows about your health is on your phone. Settings has a button that wipes it, immediately, without asking us.
- There is no account to close, because GutStamp has no accounts.
- Your subscription is deliberately not deleted, because it is yours and you paid for it.
- A few records on our servers are not linked to you at all, so they cannot be looked up or deleted individually. They expire on their own within 90 days.
Deleting your data in the app
Open Settings, then Delete all my data, and confirm. This runs immediately on your device and cannot be undone.
It permanently deletes from this device:
- your diary — every meal, symptom, stool and stress entry, with their scores and times;
- your program progress — your phase, your day, any challenge in progress, and your streak;
- your challenge results and your tolerance profile;
- your onboarding quiz answers, your diet mode and any sensitivity toggles you set by hand;
- your scheduled daily check-in reminder, which is cancelled; and
- any analytics events that were captured on your device but not yet sent, which are discarded rather than transmitted. Your anonymous analytics identifier is also reset, so activity after the wipe is not connected to activity before it.
After the wipe the app returns to onboarding, as though you had just installed it.
What deleting your data does not do
It does not cancel your subscription. That is on purpose — wiping your diary should not cost you what you paid for. Your subscription is managed by Apple, stays active, and can still be restored on a new device. To cancel it, turn off auto-renewal in your Apple account settings under Subscriptions; Settings in the app links you there.
It does not remove the record that you are a subscriber. Our server keeps a subscription-status record against your anonymous device identifier so the app knows you have access. It holds no health data and no contact details. It is kept for up to 400 days after it last changed. If you want it removed sooner, see "Asking us to delete something" below — but note that removing it will also remove your access until you restore your purchase.
It does not delete records that are not linked to you. Some things our server stores carry no identifier at all, so there is no way to find "yours" among them:
- The scan cache — the text description of a dish our AI provider produced, and the scored verdict for it. Stored under a key derived from the food content itself, never from any identifier of yours, and shared across everyone who scans the same thing. Expires 90 days after it is written.
- Any food you asked us to add, kept with no identifier for 30 days.
- Anonymous performance samples about how long scans take, which record no identifier of any kind.
It does not delete scan photos, because none were kept. A photo you scan is held in memory only for as long as the scan takes, then discarded. It is never written to any database, file store or backup of ours, so there is nothing to delete.
It does not reach back into our server logs. Our logs record each request, and a small number of lines — a scan refused for having no subscription, or a photo the AI provider could not read — include your anonymous device identifier. These expire under Cloudflare's log retention for our plan.
It does not reach data already sent to our providers. Events already delivered to our analytics, crash-reporting or payments providers before the wipe are held by them under their own retention. Our AI provider receives your scan content during a scan and receives no identifier at all; its own retention is governed by its terms, not by ours. See each provider's own privacy policy for details.
Deleting the app
Deleting GutStamp from your iPhone removes everything in the first list above, because iOS deletes the app's storage with it. It has the same effect on your device as the in-app wipe, but it does not reset your analytics identifier or discard queued events first — so if you want the cleanest result, use Delete all my data in Settings before you delete the app.
Deleting the app does not cancel your subscription either.
There is no account to delete
GutStamp has no accounts, no sign-in and no password. We never collect your name, email address or date of birth, so there is no profile to close and nothing for us to look you up by.
Asking us to delete something
If you want us to delete the subscription-status record described above, or you have any other deletion request, email hello@gutstamp.com or use the form at gutstamp.com/support.
Tell us what you want deleted. If it concerns the subscription record, we will need the anonymous device identifier, and we will tell you how to find it — we have no other way to locate your record, and we would rather ask you for it than hold anything that would let us identify you without asking.
We will acknowledge your request and respond.
Your rights
You can also ask us what personal information we hold about you and ask us to correct it. How to do that, and how to complain to us or to a privacy regulator if you are not satisfied, is set out in our Privacy Policy.