Sanometra Privacy Policy

Effective: July 30, 2026
Last updated: September 17, 2026

1. Operator and contact

Sanometra is operated by Aleatrick.

• Contact: [email protected]
• Support: https://aleatrick.com/support/

2. Information handled by Sanometra

Sanometra lets you record supplement names, brands, purposes, ingredient notes, inventory, prices, purchase dates, intake history, subjective effect notes, stop reasons, daily routines, timing rules, supplement-use periods, laboratory and health-check measurements, reference ranges, and your own observation links between supplements and measurements.

Laboratory and health-check information is sensitive health information. Sanometra minimizes its use and does not use it for advertising or behavioral profiling.

3. Purposes

The app processes information to organize and display your supplement routine, inventory, cost, timing, subjective notes, history, user-entered reference ranges, public health-check reference markers, and trends over time.

Sanometra does not diagnose, treat, prevent disease, provide medical advice, or recommend a dosage. A relationship you create between a supplement and a measurement is an observation note, not evidence of effect, safety, or causation. Reference-range and chart displays are mechanical presentations of the values you enter.

4. Local storage and external transmission

Supplement records, routines, intake and effect logs, health-check and laboratory values, CSV contents, selected images, reports, and backup contents are normally processed and stored only on your device. They are not transmitted to an Aleatrick server, an advertising service, or RevenueCat.

The current release does not provide automatic iCloud or CloudKit synchronization for health-related records. If this changes, we will update the app, this policy, and the App Store privacy disclosures before enabling it.

Device backups are separate from the backup files you export in Sanometra. Depending on your iOS and computer backup settings, the app's locally stored data may be included in an iCloud or computer backup.

4.1 Barcode product lookup

Only when you explicitly start a product lookup, Sanometra sends the public product identifier (GTIN) to the NIH Dietary Supplement Label Database and Open Food Facts. If these sources and the on-device product catalog have no candidate, the same GTIN is also sent to UPCitemdb. No saved supplement records, intake or effect logs, routines, laboratory values, or images are sent to these databases.

The receiving services also receive connection information such as your IP address and may process it outside your country. Results are input candidates; the fields you confirm saving and the source information described in section 7.2, including the original candidate you selected, are recorded locally, with source information kept separate from your edits. Sanometra keeps its own temporary candidate cache in memory. The iOS networking system may also cache product lookup responses on the device. The API's next permitted request time is saved in local settings.

Service privacy notices: NIH, Open Food Facts, UPCitemdb. Sanometra does not send subscriber information or health records to these product databases.

5. Purchases and RevenueCat

Apple processes payments for Sanometra Pro. Sanometra uses RevenueCat to retrieve offerings, confirm Pro access, restore purchases, prevent misuse, and understand aggregate subscription performance.

RevenueCat may receive a randomly generated anonymous purchaser identifier, product identifier, purchase and subscription state, expiration, trial, renewal, cancellation and refund events, storefront country and currency, app version, OS version, and device class. Sanometra does not provide RevenueCat with your name, email address, phone number, advertising identifier, supplement records, intake or effect notes, routines, laboratory values, CSV files, images, reports, or backups. The anonymous purchaser identifier is not linked inside Sanometra to your health records.

Apple and RevenueCat may process purchase metadata in countries outside your country. Their own privacy notices and contractual safeguards apply to that processing. RevenueCat's privacy notice is available at https://www.revenuecat.com/privacy/.

6. Notifications

Sanometra requests notification permission only after you turn on the optional daily check-in reminder. The reminder is scheduled locally and uses generic wording. It does not display supplement names, laboratory values, intake status, or health notes. You can turn it off in Sanometra or iOS Settings.

7. CSV, images, PDFs, and product labels

A CSV file you select is parsed on device. Only fields you map, review, and confirm are saved. Unmapped columns and the source CSV are not retained by Sanometra or sent to Aleatrick.

7.1 Health-check images and PDFs

A health-check image you select is analyzed with Apple Vision on device. For a PDF, Sanometra renders the page you select on device and recognizes text in the resulting image. The source image, source PDF, and full text recognized from a health-check report are not retained in your records or sent externally for recognition.

Recognized measurements are editable candidates. Even when a page contains several examination dates, only the items, dates, values, units, reference ranges, and notes you review against the report and confirm are saved locally. Review is necessary because text recognition can confuse values, dates, and units.

7.2 Product labels and retained sources

Product labels can be imported from the camera, a selected photo, or text you enter. Image recognition takes place on device; original images are not stored, and images or recognized text are not sent externally for OCR.

When you confirm saving a supplement, Sanometra also saves the imported label's original text, edited text, and translations you applied on your device. The original product candidate you selected, its source, retrieval date, and attribution are retained separately from your own edits. These details let you review the source later and are included in supplement-record backups.

7.3 Translation and Apple Intelligence

When you choose translation, Sanometra uses Apple's translation features for the text you select. Replacing an input with a translation does not remove the separately retained original label when you confirm saving. Check amounts and warnings against the original and the physical product.

In-app translation on iOS18 or later runs on device and may ask you to download Apple's language models. On iOS17.4 through iOS17.x, Sanometra uses the system translation interface. With system translation, selected text may be sent to Apple for processing, including when either of the two translation languages has not been downloaded. See Apple's Translation & Privacy notice for its handling and on-device processing with downloaded languages.

On supported devices, Sanometra's Apple Intelligence label organization and highlights use the on-device model. Sanometra does not send text to an Aleatrick cloud AI service. Original text and manual input remain available when assistance is unavailable.

8. Reports, sharing, and backups

Reports and PDFs are generated on device. When you choose to export or share a report or backup, it is passed to the destination you select through the iOS share sheet or Files interface. The selected destination's privacy practices then apply.

Encrypted backups use AES-256-GCM with a key derived from a passphrase on device. Sanometra does not store or transmit the passphrase and cannot recover an encrypted backup if the passphrase is lost. A legacy unencrypted JSON export may contain health information in plain text and should be handled carefully.

9. App lock and diagnostics

The optional app lock uses Face ID or the device passcode through iOS. Sanometra does not receive biometric templates.

Support diagnostics are shared only when you choose to do so. They include app version, build, bundle identifier, device class, OS version, local-storage mode, data schema version, and backup format version. They do not include your records or notes.

10. Retention, access, correction, deletion, and export

Local records remain until you edit or delete them, use Delete All Data, or remove the app, subject to iOS behavior. You can view, correct, delete, and export records within the app.

Because Aleatrick has no account system or health-record server, Aleatrick cannot inspect, correct, export, or remotely delete records stored only on your device. For privacy requests concerning support correspondence or purchase operations information held by Aleatrick, contact [email protected]. We may request only the information reasonably necessary to verify the request.

11. Children and teenagers

Sanometra is not directed to children under 13, and they may not use it. A person aged 13 through 17 may use Sanometra only after a parent or legal guardian has reviewed and agreed to the Terms of Use and this policy. A higher local age or additional parental-consent requirement applies where required by law.

Sanometra is not offered in the App Store Kids Category and does not create an Aleatrick account containing a user's name, email address, or date of birth.

12. Consumer health data and regional rights

Sanometra does not sell health data and does not use health data for advertising, marketing, or behavioral targeting. A separate U.S. Consumer Health Data Privacy Notice describes categories, sources, use, sharing, sale, and rights that may apply under U.S. state consumer-health laws.

Users in the European Economic Area, United Kingdom, Korea, Taiwan, and other regions may have additional non-waivable rights under local law. This policy does not limit those rights. Contact [email protected] for a request concerning information held by Aleatrick; local on-device controls remain the primary method for records that Aleatrick cannot access.

13. Security and incidents

Sanometra uses iOS data protection, input validation, an optional app lock, and optional encrypted backups. No method is completely secure. If Aleatrick becomes aware of an incident affecting information held by Aleatrick, it will investigate and provide notices required by applicable law. Aleatrick cannot monitor incidents involving only a user's device or a destination the user selected for sharing.

14. Changes

We may update this policy when features, legal requirements, or data practices change. We will update the date above and provide an in-app or App Store notice for material changes. We will request renewed agreement when required.

15. Contact

Contact [email protected] or visit https://aleatrick.com/support/. Do not include supplement names, laboratory values, health notes, or backup passphrases in a support message.