Privacy

The short version

Selodía is a body-literacy app. To do its job it holds things you tell it about your body, your food, your movement and how you feel. That is health information, and it is treated as such.

It is never sold, never used for advertising, and never shared with anyone except the service providers listed below who are needed to make the app work. You can export everything or delete all of it, from inside the app, at any time.

Who is responsible

Selodía is operated by Selodia Ltd, which is the data controller for everything described here. If you have a question about your data, or want to exercise any of the rights below, email hello@selodia.app.

Selodia Ltd is registered in England and Wales, company number 17435894, registered office 19 Campbell Road, London, E17 6RR. It is registered with the Information Commissioner’s Office as a data controller, reference ZC263754.

If you are not satisfied with how a request is handled, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

What is collected

Only what you give it, or what follows directly from using it. There is no tracking, no advertising identifier, and no third-party analytics.

• Account: your email address, and a password held by our authentication provider as a one-way hash that nobody at Selodía can read.
• The waiting list. If you join, we keep your name, email address and which link brought you here. We use them to tell you when Selodía opens. To be removed, reply to any email from us or write to hello@selodia.app.
• About you: date of birth, biological sex, height, activity level, and the goals you set.
• Body measurements: weight, body fat, muscle mass and metabolic rate where you record them, plus any other measurement you choose to track such as waist or resting heart rate.
• Food and drink: what you log, in your own words, with the nutritional breakdown worked out from it (calories, protein, carbohydrate, fat, and the nutrients that matter most at this stage of life, including calcium, iron and sodium), and any photographs you send.
• Movement: activities, duration and intensity, and, only if you grant the permission, step counts, distance, exercise sessions and the calories your phone estimates you burned, read from your phone’s own health platform (Health Connect on Android, Apple Health on iPhone).
• Health context: conditions, markers and allergies you choose to disclose, and menstrual cycle dates if you record them.
• Where you are with periods: whether you describe yourself as having regular periods, perimenopausal, post-menopausal, or not having periods for another reason, and the reason, if you give one.
• Hormones and medication: whether you use hormonal contraception or HRT, and anything you tell Selodía you take regularly, including prescribed medicine, things bought over the counter, and supplements.
• Sleep: when you slept, for how long, how it felt, and how often you woke.
• How your days feel: the daily ratings you give for things like mood and energy.
• Movement constraints: anything you say you must avoid, including advice a clinician has given you, so it can be kept out of what the app builds for you.
• Your week and your plans: the activities in your week and when you do them, the goals you set, and the skills you are working towards.
• Beta membership: whether you are in the beta, and which version of the beta agreement you accepted and when.
• Feedback: anything you send through the in-app feedback form, together with which screen you were on and which version of the app you were using, so it can be reproduced.
• Documents you show it: if you photograph or upload a letter or a result, for example from a clinic, the pages are sent to be read, and what Selodía understood from them is shown to you. The pages themselves are not stored. What is kept is only what you then agree to keep.
• Operational records: a note of how much of the AI service each conversation used, and timings for the steps inside it, so faults and costs can be traced. These are attached to your account but contain no part of what you said.
• Safety records: if Selodía has raised something with you that it thinks is worth taking to a doctor, a note that it has already been raised, so you are not asked the same thing repeatedly.
• Conversations: everything said in chat, including transcripts of anything spoken by voice.
• Saved material: plans, insights and notes kept in your Almanac, and the app’s own written observations about your readings.
• Device: a notification token if you turn reminders on, so a reminder can reach your phone.
• Error reports: if something fails on your phone, a short technical note of which part of the app failed and the error it gave, so it can be fixed. It is stored with your account.
• Your consent: what you agreed to on the first screen, and when, so there is a record that your health data is only held with your say-so.

Special category data. Health information is special category data under UK GDPR, and several of the things above are squarely within it: your menstrual cycle, where you are with the menopause, the hormones and medication you take, any condition you disclose, and anything a clinician has told you to avoid.

They are held on your explicit consent, given on the first screen, for one purpose: so that an app you asked about your own body can answer from your own record.

On that same screen there is a separate, optional permission: to let de-identified information about how you use Selodía help improve it and understand patterns across people using it. That is a different thing from the consent above, it is recorded separately, and you can change it in Settings at any time. Nothing is done with it today. No such use has been built. If that ever changes, you will be told before it does.

None of this is shared with any insurer, employer or advertiser. None of it is used to make an automated decision about you that has a legal or similarly significant effect: Selodía describes and suggests, and does not gate anything on what it finds. Anthropic, whose model writes the replies, states in its commercial terms that data sent through its API is not used to train its models.

Medication, and the card it is kept on. Your Medications card is only ever written after you have seen it written down: Selodía reads back what it understood and keeps nothing unless you agree to it. That is about the card. The conversation itself is saved as you type it, like every other message, so anything you mention in chat is in your record from the moment you send it. Selodía is not a prescriber: it will not tell you whether a dose is right or suggest you start, stop or change anything. That belongs with your GP or pharmacist.

Your phone’s health platform, and exactly what is read from it. If you grant the permissions, Selodía reads from Health Connect on Android or Apple Health on iPhone: steps, distance, exercise sessions and the calories your phone estimates you burned; sleep; weight, body fat, bone mass, body water and basal metabolic rate; the days of your period; and water you have drunk. Each one is a separate permission you can grant or refuse on its own, and refusing any of them changes nothing else about the app. Every one of them is something you can already record by hand - reading them only saves you typing what your phone already knows.

It is read, never written. Selodía adds nothing to Apple Health or Health Connect and changes nothing in them. It is never used for advertising, never sold, and never shared except with the providers below to make the app work. If you withdraw a permission, the app stops reading that data immediately; what was already read stays in your record until you delete it, like anything else you have logged.

Why it is held

To answer you. Selodía’s whole proposition is noticing patterns in your own data over time, and a pattern needs history. A single day tells nobody anything.

It is not used to build a profile of you for anyone else, and it is not sold. See the next section for who it reaches and why, and the paragraph on special category data above for the one optional permission that is separate from all of this.

Who can see what you write

Other people using Selodía cannot see any of it. The database refuses to return your records to anyone signed in as somebody else, and that is enforced by the database, not by the app asking nicely.

Like any online service, Selodía holds an administrator key to the database, which means your records could technically be read by the people who run it. That would only happen when something is broken and there is no other way to find out why. If it were ever needed to look at a specific person’s data, we would tell that person.

Your password cannot be read by anybody, including us. It is stored as a one-way hash and cannot be turned back.

Who else sees it

A small number of providers, each doing one job. No data is shared with anyone else.

• Supabase stores the database and files, and handles sign-in. Data is held in their London region.
• Anthropic provides Claude, the model behind the conversation. Messages, and food photographs you send, are processed to produce a reply. Anthropic’s commercial terms state that data submitted through their API is not used to train their models.
• ElevenLabs provides speech recognition and the spoken voice, and only when you use voice mode. If you use voice, what you say goes to ElevenLabs to be turned into text. Neither ElevenLabs nor Anthropic uses it to train its AI models. ElevenLabs delete the audio and the transcript after 30 days; separately, their own privacy policy says they will not keep data they generate about your voice for longer than 3 years after your last interaction with them. The training opt-out on this account was switched on on 1 October 2026 and applies from then on; ElevenLabs act as a data processor under their published data processing agreement, which means they may use what they hold only to provide the service to Selodía.
• Vercel runs Selodía’s servers, which pass your data between the app, the database and the providers above. Server logs are kept briefly, to fix faults.
• Google confirms who you are if you choose to sign in with Google. On Android, Google’s Firebase Cloud Messaging delivers reminders, using a device token rather than your data.
• Expo delivers push notifications and app updates. It sees a device token, not your data.

Selodía does not sell data, does not run advertising, and has no affiliate or data-sharing arrangements of any kind.

How long it is kept

Until you delete it. Health information is only useful over time, so nothing expires on its own, but nothing is kept once you ask for it to go.

Deleting your account removes your data from the live database. Encrypted backups roll off on our providers’ own schedules, within 30 days.

What you can do

All of these are yours by law, and the first two are buttons in the app rather than requests you have to make.

• Export everything, in a readable format, from Settings.
• Delete your account and all of its data, from Settings. It is not recoverable afterwards. If you no longer have the app, you can ask by email instead: see selodia.app/delete-account.
• Print or share your Me page. To let your browser open it, a copy is kept for fifteen minutes and then deleted.
• Ask for a copy, a correction, or for processing to stop: email hello@selodia.app.
• Withdraw consent at any time by deleting your account, which is the same thing in practice for an app that exists to hold this information.

A request will be answered within one month.

Children

Selodía is for adults and is not directed at anyone under 18.

Security

Data is encrypted in transit and at rest by our providers. Access to your rows is enforced at the database itself, so one account cannot read another’s data even if the application asked it to.

Photographs and other files are held in private storage and reached only through short-lived links generated for you at the moment you open them.

Changes

If this policy changes in a way that affects what is collected or who sees it, you will be told in the app rather than by a quietly updated page.