US Privacy Rights

Your US Privacy Rights

Last updated: October 11, 2026

This section supplements our Privacy Policy and applies to residents of the United States, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Washington, Nevada and other states with consumer privacy laws. Intoleris is operated by Publiemoi.ch (sole proprietorship), based in Switzerland (Place du Port 2, 2000 Neuchâtel, Switzerland). Contact: contact@intoleris.com.

1. Cookies and analytics

We use a technical cookie (itl_vid) to count your free analyses, stored for 90 days, and WooCommerce session cookies to manage your cart and orders. With your consent, we also use audience measurement tools: Google Analytics (Google LLC) and Microsoft Clarity (Microsoft Corporation), which use cookies and similar technologies to measure visits, pages viewed, traffic sources and how visitors interact with our pages (Clarity may record anonymized mouse movements, clicks and scrolling). We use this information only to understand and improve the site. You can refuse or withdraw consent at any time via the "Customize" cookie banner, and opt out directly: Google Analytics — https://tools.google.com/dlpage/gaoptout ; Microsoft Clarity — https://privacy.microsoft.com/privacystatement and https://www.microsoft.com/en-us/privacy/privacy-choices. We do not use advertising cookies on this site.

2. Categories of personal information we collect

  • Identifiers: name, email address, account ID, IP address, session identifier.
  • Account and commercial information: preferred language, subscription plan (Essential $4.99/month, Unlimited $19.99), order history. Card and bank details are handled by Stripe and PayPal; we never store them.
  • Consumer health data / sensitive personal information: the intolerances and protocols you select (e.g., histamine, FODMAP, gluten), symptoms and reactions you record, and your food and symptom journal, including entries for household members you add. This information is self-reported and is not a medical diagnosis.
  • Content you submit: scanned barcodes, text entered, photos of dishes or fridge contents (photos are processed on the fly and not stored).
  • Internet and device activity: device type, browser, pages viewed and interactions (via analytics, with consent).
  • Inferences: food compatibility verdicts generated from your profile.

Sources: you directly, your device/browser, and our analytics providers.

3. Purposes

We use personal information to: provide the analyses, journal, recipes and other features you request; manage your account and subscription; send service communications (order confirmations, support); maintain security and prevent fraud; improve our databases, analyses and site (including analytics, with consent); and comply with legal and accounting obligations. We use consumer health data only to provide the features you request, with your consent.

4. Disclosure — no sale, no sharing, no targeted advertising

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising or use it for targeted advertising. We have not done so in the past 12 months. We never sell consumer health data. We disclose personal information only to service providers and processors acting on our behalf under contract: Anthropic and OpenAI (AI analysis of submitted photos/text and recipe generation; under terms that do not permit them to use this data for their own purposes), Stripe and PayPal (payments), our hosting provider Hawk Host (Canada), Google and Microsoft (analytics, with consent), and SynaVie (distribution partner), solely to operate the licensed platform under our partnership agreement. We may also disclose information where required by law.

5. Your rights

Depending on your state of residence, you have the right to:

  • Know / access the personal information we hold about you and how we use and disclose it;
  • Delete your personal information (you can also delete your account from "My Account");
  • Correct inaccurate information;
  • Portability: receive a copy in a portable format (the journal can also be exported as PDF/CSV on eligible plans);
  • Opt out of sale, sharing, targeted advertising and profiling with legal effects (we do none of these);
  • Limit the use of sensitive personal information to what is necessary to provide the service (we already limit it this way);
  • Withdraw consent to the processing of consumer health data at any time;
  • Non-discrimination: we will not deny service, charge different prices or provide a different quality of service because you exercised your rights;
  • Appeal: if we decline your request, you may appeal by replying to our decision or writing to contact@intoleris.com with the subject "Privacy appeal". We will respond within 45 days (60 in Colorado). If your appeal is denied, you may contact your state Attorney General.

6. Consumer health data (Washington My Health My Data Act, Nevada SB 370)

This paragraph serves as our Consumer Health Data Privacy Policy. We collect the consumer health data listed in Section 2 for the purposes in Section 3, from you directly. We collect and share it only with your consent (given when you create your health profile or journal entries) or as necessary to provide the service you request, and share it only with the service providers listed in Section 4. We never sell it. Washington and Nevada residents have the right to confirm whether we collect, share or sell their consumer health data, access it, obtain a list of third parties and affiliates with which it was shared, withdraw consent, and request deletion. We do not use geofencing around health care facilities.

7. How to submit a request and verification

Email contact@intoleris.com with the subject "US privacy request". We will verify your identity by confirming control of the email address linked to your account, and may ask for additional information where needed. We respond within 45 days (extendable once by 45 days where permitted, with notice).

Authorized agents: you may designate an agent to submit a request on your behalf. We will require signed written permission and may ask you to verify your identity directly.

8. Global Privacy Control

We honor Global Privacy Control (GPC) and similar browser opt-out signals as a valid request to opt out of sale/sharing and of non-essential cookies for that browser.

9. Children

Intoleris is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (COPPA). Information about a child entered by a parent or guardian as a household member is controlled by that adult account holder. If you believe a child under 13 has provided us information, contact us and we will delete it. We do not sell or share information of consumers under 16.

10. International transfers

Intoleris is operated from Switzerland. Your information is processed in Switzerland, Canada (our hosting provider, Hawk Host), the EU and the United States (Anthropic, OpenAI, Stripe, PayPal, Google, Microsoft), protected by contractual safeguards such as EU Standard Contractual Clauses and equivalent guarantees recognized under Swiss law.

11. HIPAA

Intoleris is not a healthcare provider, health plan or healthcare clearinghouse, and is not a "covered entity" or "business associate" under HIPAA. Information you provide is protected as described in this policy and applicable state laws. Intoleris is not intended to diagnose, treat, cure or prevent any disease.

12. Retention

Account and journal data: as long as your account is active, then 30 days after deletion. Photos: not retained. Billing data: 10 years (Swiss accounting law). Analytics data: according to the retention settings of Google Analytics and Microsoft Clarity, for no longer than necessary to measure audience.

Powered by CookieAdmin