Back
Legal

Privacy Policy

Last updated: June 2026 · Version 2.0

Covers GDPR (EU/UK), PIPEDA (Canada), and CCPA (California)

1. Who We Are

hivibe Inc. operates GutLens at gutlens.hivibe.world. Incorporated in Delaware, USA. Address: 8 The Green, Suite B, Dover, Delaware 19901.

Contact: privacy@hivibe.world

2. Data We Collect

Account data: name, email address, hashed password, OAuth provider identifier.

Analysis data: symptom responses, gut health score, protocol recommendations stored in your account.

Biometric data: camera video processed in real time during your scan. Never stored. Deleted immediately after analysis.

Payment data: processed by Stripe. We store only a payment reference. No card details stored by hivibe Inc.

Usage data: anonymised analytics via PostHog. No personally identifiable information included.

3. How We Use Your Data

To provide the GutLens analysis service, maintain your account, send transactional emails, and improve the platform through anonymised research. We do not sell your personal data.

4. Cookies

Essential cookies for authentication and security only. Analytics cookies set only with your consent. No advertising or tracking cookies. Manage preferences via Cookie Settings in the footer.

5. Data Retention

Account and analysis data retained for duration of account. Biometric data deleted immediately after analysis. Payment records retained 7 years by law. Request deletion at privacy@hivibe.world.

6. International Transfers

Data stored on US servers. All sub-processors covered by Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

Sub-processorPurposeTransfer Mechanism
Vercel Inc.App hostingSCCs
Neon Inc.DatabaseSCCs / DPF
Anthropic PBCAI analysisSCCs
Cloudflare Inc.Storage, CDNSCCs / DPF
Stripe Inc.PaymentsSCCs / DPF
Upstash Inc.Rate limitingSCCs
PostHog Inc.AnalyticsSCCs
Resend Inc.EmailSCCs
MongoDB Inc.Research dataSCCs
For Users in the European Union — GDPR

7. Legal Basis for Processing

Biometric data processed under Article 9(2)(a) explicit consent. Account and payment data under Article 6(1)(b) contract. Analytics under Article 6(1)(a) consent. Security under Article 6(1)(f) legitimate interests.

Your Rights Under GDPR

Right to access (Art.15) · rectification (Art.16) · erasure (Art.17) · restriction (Art.18) · portability (Art.20) · object (Art.21) · withdraw consent · lodge complaint with supervisory authority.

Contact: privacy@hivibe.world. We respond within 30 days.

Automated Decision-Making

GutLens uses AI to generate your gut health protocol under Article 22 GDPR. Output is educational only, not medical diagnosis. Request human review at hi@hivibe.world.

EU supervisory authorities: edpb.europa.eu

For Users in Canada — PIPEDA

8. Canadian Privacy Rights

We comply with PIPEDA and applicable provincial privacy legislation. Privacy Officer: privacy@hivibe.world.

Consent: Explicit consent obtained for biometric data. Withdraw at any time by contacting privacy@hivibe.world.

Access: Request access to your personal information. We respond within 30 days.

Complaints: Contact the Office of the Privacy Commissioner at priv.gc.ca or 1-800-282-1376.

For California Residents — CCPA

9. California Privacy Rights

You have the right to know, access, delete, and opt out of sale of personal information. We do not sell personal information. Contact privacy@hivibe.world to exercise your rights.

10. Contact

privacy@hivibe.world
hivibe Inc., 8 The Green, Suite B, Dover, Delaware 19901, USA