Consumer Health Data Privacy Notice

Last updated: October 23, 2026

This notice explains how Flemming Consulting Group, LLC, doing business as Bari ("we"), collects, uses, and shares consumer health data in Bari in the United States. It adds to our Privacy Policy. We give everyone the rights in this notice, wherever they live.

Health data we collect

Depending on what you use, we collect:

Medicine names and your medicine list, with strength, form, directions, and what it is for if you choose to say.
Dose times and dose logs (taken, snoozed, skipped and why).
Symptoms you log, notes and questions you save for your doctor (Visit Prep), and Bari Scan results for your own list.
Medicine history: what happened to each medicine on your list and when (added, directions, strength, or dose times changed, reminders turned on or off, stopped, started again), who made the change, and any notes you add.
Supply countdown, if you use it: the number filled, the fill date, the number per dose, and your refill reminder setting.
If you use Bari Clinical, "Notify me when available" requests: the medicine you asked about and when you asked.
Which "Label updated" notices you have opened.
Text read from a medicine label, after your phone removes your name, Rx number, prescriber, address, phone number, and birth date.
Questions you ask about medicines, which can show a health condition or treatment.

Any of this can show a physical or mental health condition, a treatment, or medicine use. It is linked to your Bari account.

Where it comes from

From you: what you type, scan, or choose in the app. The app also matches your entries to public medicine information from the FDA and the National Library of Medicine. That public information alone is not your health data.

Why we use it

To show your medicine list, schedule, dose history, and symptoms back to you.
To show each medicine's history on its page, and the last 90 days of it in Visit Prep.
To show about how many days of a medicine are left, worked out from the number filled, the fill date, the number per dose, and the doses you logged.
To show medicine education and the sources behind it.
To show a notice in the app when the FDA label for a medicine you asked about arrives, and to show which "Label updated" notices are new. These notices are in the app only.
To send reminders and the care contact texts you set up.
To run your account, keep the service secure, answer support requests, and follow the law.

We do not use health data for targeted advertising. We do not sell health data.

Who receives it

We share health data only with service providers that run Bari for us, and only what they need:

Hosting and database: Render.
Email: Resend (your email address and the emails we send you).
Texts to care contacts, when that feature is on: Twilio (their mobile number and the text, which can say a dose was missed).
Medicine lookups: the U.S. National Library of Medicine receives medicine names and barcode numbers, never your name or email. A medicine lookup sends only the medicine name to public medicine databases, never who asked.
AI answers, when turned on: Anthropic, only after you give permission in the app.

Each service provider is bound by a written contract to protect the data, keep it confidential, use it only for our service, and help us delete it. We have no affiliates that receive health data. We may also share data when the law requires it.

Your rights

See it: Settings, then Export my data. You can also ask us for a list of the service providers that received your data.
Take back consent: turn optional choices off in Settings, or delete your health data or account.
Delete it: Settings, then Delete account. We delete your data from our database right away, tell our service providers to delete it, and our backups roll off within 6 months at most.
When you delete a medicine, its history and supply details are deleted with it.
Appeal: if we say no, reply to our answer to ask us to look again. If you still disagree, you can contact your state attorney general.

Email privacy@bari-med.com or write to Flemming Consulting Group, LLC, 17023 Upper Ridge Lane, Humble, TX 77346. We answer within 45 days, or within 90 days if we tell you we need one 45-day extension and why. We do not charge for requests.

Changes

Before we collect a new kind of health data, use it for a new purpose, or share it in a new way, we will update this notice and ask for your consent where the law requires it.