SymptomIQ Privacy Policy

Last updated: 01/09/2026

This Privacy Policy explains how SymptomIQ collects, uses, stores and protects personal data when you use the SymptomIQ mobile application and related services.

We have tried to keep this policy clear and readable. If you have questions about how your information is used, you can contact us using the details below.

1. Who we are

SymptomIQ is a health and food / drink tracking application designed to help users record the food and drink the consume, symptoms and related information and identify possible patterns over time.

Data Controller:
Mode 1 Analytics

Trading name: SymptomIQ

Address:
35 Oldwood, Oldtown Demesne, Naas, Co. Kildare

Email:
[help@symptomiq.ai]

Website:
[www.symptomiq.ai]

2. Data protection contact

For questions about this Privacy Policy, requests relating to your personal data, or concerns about how your information is handled, contact:

Privacy contact: Brian Leahy Email: brian@symptomiq.ai

3. Information we collect

The information we collect depends on how you use SymptomIQ.

Account information

This may include:

• your name or display name;
• your email address;
• your authentication provider, such as Google or Apple;
• your account or pilot status;
• activation-code and pilot information; and
• information required to maintain your account.

Profile information

You may choose to provide information such as:

• gender;
• age range;
• weight and preferred weight unit;
• primary condition;
• medications; and
• other profile information you choose to add.

Food information

When you log food, we may process information including:

• food names;
• date and time consumed;
• additions, toppings, sides or ingredients;
• optional portion details;
• preparation method, where relevant;
• barcode information;
• ingredient information obtained from product databases or scans;
• notes;
• recurring or scheduled foods; and
• corrections you make to product information.

Symptom and health information

When you log symptoms, we may process information including:

• symptoms you select or describe;
• symptom severity;
• date and time of symptoms;
• stress level;
• notes; and
• other health-related information you choose to record.

Images and scanning

SymptomIQ may allow you to use your device camera to scan barcodes or ingredient labels.

Ingredient recognitition is performed only on-device and images are not uploaded or retained by SymptomIQ.

4. Health information and special category data

Some information recorded in SymptomIQ, including symptoms, medical conditions, medications and information from which information about your health may be inferred, may constitute health data and therefore special category personal data under data protection law.

We recognise that this information is particularly sensitive and should receive additional protection.

SymptomIQ is designed to help you figure out what is causing you pain. It can not do this unless you provide diet and symptom information. Your explicit consent is required in order to process your health data and if you do not give it, the app is no good to you.

Where we rely on your consent, you may withdraw that consent. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Why we use your information

We use personal data where necessary to operate SymptomIQ and provide the features you choose to use.

This may include:

• creating and maintaining your account;
• authenticating you securely;
• recording and displaying your food and symptom history;
• allowing you to edit or review information you have recorded;
• maintaining recurring food schedules;
• identifying possible patterns between foods, ingredients and symptoms;
• generating insights for you;
• responding to support requests;
• maintaining the security and reliability of the service;
• diagnosing technical problems;
• meeting legal and regulatory obligations; and
• improving SymptomIQ.

SymptomIQ is intended to help users observe and record possible patterns. It is not intended to provide a medical diagnosis.

Fully anonymised data may be used for research, aggregate analysis, product-development datasets, or training machine-learning models based on SymptomIQs legitimate interests.

We will never sell data that identifies you

6. Our legal bases for processing

Data protection law requires us to have a lawful basis for processing personal data.

Depending on the processing activity, the legal bases used by SymptomIQ may include:

• performance of a contract — where processing is necessary to provide the SymptomIQ service you requested;
• legal obligation — where we are required to process information to comply with applicable law;
• legitimate interests — where appropriate and where those interests are not overridden by your rights and interests; and
• consent — where we ask you to make a genuine choice about a particular use of your information.

Special category health data also requires a separate condition under Article 9 GDPR.

7. How we use food and symptom information

The core purpose of SymptomIQ is to allow you to keep a record of foods and symptoms and, where sufficient information is available, to help identify possible associations or patterns.

This may involve analysing information such as:

• when a food was consumed;
• food names and ingredients;
• additions and preparation information;
• recurring meals;
• when symptoms occurred;
• symptom type and severity; and
• contextual information such as stress level.

Insights are intended to highlight possible patterns rather than establish medical causation.

SymptomIQ does not replace advice, diagnosis or treatment from a qualified healthcare professional.

8. Data Sharing with healthcare professionals

You have the option to share your data with your GP or another healthcare professional. You can modify this access via the Preferences in the Profile screen. If you have signed-up to SymptomIQ via your GP or other healthcare professional, your account will be linked to them so you just need to allow access. They can view high level anlaysis on your food and symptom patterns, along with insights. Highly sensitive information such as the names of people who cause you stress, or any notes are NOT available to them.

9. How we keep your information safe

We use technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure or loss.

These measures may include:

• authenticated user accounts;
• access controls;
• database security rules;
• encrypted network connections;
• restricted administrative access;
• secure cloud infrastructure; and
• monitoring and maintenance of the application and its backend services.

No internet or electronic storage system can be guaranteed to be completely secure.

10. Service providers and third parties

We may use trusted service providers to operate parts of SymptomIQ.

Google / Firebase

SymptomIQ uses, or may use, Google Firebase services for functions such as authentication, database storage, cloud storage, backend functions, crash reporting and notifications.

Authentication providers

Where you choose to sign in using a third-party provider such as Google or Apple, that provider processes information in accordance with its own privacy terms and supplies SymptomIQ with the information required to authenticate your account.

11. Where your information is stored and international transfers

SymptomIQ uses cloud services, including Firebase / Google infrastructure on severs based in the European Union

12. How long we keep your information

We will keep personal data only for as long as necessary for the purposes for which it was collected, including providing the SymptomIQ service and meeting legal, security and regulatory requirements.

• Active account data: Retained while the account remains active.
• Food and symptom logs: Retained while the account remains active.
• Deleted-account data: Audit Logs with minimal information are kept for 18 months from account deletion date.
• Support correspondence: 18 Months.

Where information is no longer required, it will be deleted or anonymised where appropriate.

13. Your data protection rights

Depending on the circumstances, you may have rights in relation to your personal data, including the right to:

• request access to personal data we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase personal data where the legal requirements for erasure are met;
• ask us to restrict certain processing;
• object to certain processing;
• receive certain personal data in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a supervisory authority.

These rights are not absolute and may depend on the circumstances and the legal basis for processing.

We may need to verify your identity before acting on a request in order to protect your information.

To exercise a data-protection right, contact [dpo@symptomiq.ai].

14 . Accessing your data

SymptomIQ intends to provide users with appropriate access to their own information via an automated process soon. In the meantime please contact [dpo@symptomiq.ai] if you would like a copy of your information

15. Deleting your account

You can delete your account via the Profile menu on the app, under account information. Deletion is immediate and all your food, symptom and strees logs will be destroyed. You may sign up again using the same login details as before but this will not revert the deletion process, we do not back up deleted information.

16. Notifications

If you enable notifications, SymptomIQ may send notifications about app activity such as reminders or newly available insights.

You can control notification permissions using your device settings.

18. Analytics and crash reporting

No analytics or crash reporting is currently enabled for SymptomIQ but will be implemented in the future in order to allow us to maintain quality control.

19. Automated analysis and insights

SymptomIQ may process information you record in order to generate observations or insights about possible relationships between foods and symptoms.

These outputs are intended to support self-observation and are not medical diagnoses.

20. Children

SymptomIQ is not intended for use by anyone under the age of 16.

21. Making a complaint

If you have concerns about how SymptomIQ uses your personal data, we would appreciate the opportunity to address them.

Contact us at dpo@symptomiq.ai.

You also have the right to lodge a complaint with the Data Protection Commission (Ireland) or, where applicable, another competent supervisory authority.

Data Protection Commission: https://www.dataprotection.ie/

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when SymptomIQ introduces new functionality, we change how information is processed, our service providers change, or legal or regulatory requirements change.

The latest version will be made available within SymptomIQ and/or on our website.

Where a change materially affects how we use personal data, we will provide an appropriate notice where required.

Policy version: 1.0.1
Effective date: 1st September 2026