DRAFT: pending attorney review
Privacy Policy
Last updated: September 30, 2026
This policy explains what Flemming Consulting Group, doing business as Bari ("we") collects when you use Bari, why, who can see it, and how to export or delete it. We never sell your data and we never use it for ads.
What we collect
| What | Why |
|---|---|
| Your email address | To send your sign-in codes and to know which account is yours. |
| That you are 18 or older, and the choices you make on the consent screens | We only serve adults, and we keep a record of what you agreed to and when. |
| Health data you add: medicines (name, strength, form, directions, and what it is for if you choose to say), dose times, dose logs (taken, snoozed, skipped and why), symptoms you log, and saved notes for your doctor | To show your list, your schedule, and your history back to you. You can delete it at any time. |
| Text from a pharmacy label, after your phone removes your name, Rx number, address, phone number, and birth date | To fill in the medicine details for you to check. The photo itself stays on your phone and is deleted from the app right after it is read. |
| Questions you ask the assistant | To answer them. We keep a record of what topics were asked and which sources were used, without your name, to check answer safety. We keep the words of your questions only if you turn on "Save AI chat history" or "Help improve answers". |
| Care contacts you add: their name, mobile number, how you know them, your first name, and a log of texts we sent them (time and type) | To send the missed-dose texts you set up. See our Text Message Terms. |
| Your phone's time zone | To put dose times and quiet hours in your local time. |
| Technical data: IP address and request times in our server logs, kept for a short time | To keep the service running and to stop abuse. Sign-in limits use a scrambled (hashed) form of your email and IP address. |
What we do not collect
- We do not upload your label photos.
- We do not store your name or Rx number from a label.
- We do not collect your contacts list, location, or advertising ID.
Optional choices
These start off. You can change them in Settings at any time.
- Save AI chat history: keep your questions and answers so you can see them later.
- Help improve answers: let us keep the words of your questions, without your name, to find gaps in our answers.
- Text alerts to people you choose: lets us text your care contacts. Each person must reply YES first.
- Research: lets us ask you to join an approved study. Nothing is shared unless you say yes to a specific study.
- News and offers by email: emails about new features. Saying no does not change anything else.
Who we share data with
We share data only with companies that help us run Bari, and only what they need:
- Render hosts our servers and database.
- Resend sends your sign-in code emails.
- Twilio sends texts to care contacts you add. It receives their mobile number and the text.
- The U.S. National Library of Medicine (RxNav) receives medicine names and barcode numbers when you search, never your name or email.
- Anthropic may receive the words of a question if we turn on AI-written answers, to write the answer. It is not told who you are.
Mobile numbers: we do not sell or share mobile phone numbers or text message opt-in consent with anyone for marketing or promotional purposes.
We may share data if the law requires it, for example a valid court order. We will tell you unless the law says we cannot.
How long we keep data
We keep your data until you delete it or delete your account. When you delete your account, we delete your account and health data right away. Our database backups roll off within 7 days. We keep a few records that do not name you: safety records of assistant answers, an audit log of account events, and a scrambled (hashed) form of a care contact's phone number so we can keep honoring their STOP request.
Your choices and rights
- Export: Settings, then Export my data, gives you a copy of everything in your account.
- Delete: see how to delete your account.
- Change your mind: turn optional choices on or off in Settings.
Depending on where you live, you may have more rights under state consumer health data laws. Email us to use them.
Security
Data travels over encrypted connections (HTTPS). Sign-in codes are stored only in scrambled form. Your sign-in stays in your phone's secure storage (the iOS Keychain). No system is perfectly secure. If a breach affects your health data, we will tell you as the law requires.
Children
Bari is only for adults 18 or older.
Changes
If we change this policy in a way that matters, we will ask you to review it again in the app.
Contact
Flemming Consulting Group, doing business as Bari
support@bari-med.com