Effective date: October 9, 2026

This Privacy Policy explains how That Paleo Chick, LLC ("That Paleo Chick," "we," "us," or "our") collects, uses, shares, and protects information about you when you visit thatpaleochick.com (the "Site"), use the That Paleo Chick iOS application (the "App"), subscribe to our emails, buy a membership, or otherwise interact with us (together, the "Services"). It also explains the choices you have.

We are a small company run by a real person, and we try to collect only what we need to run the Services well. Where we ask for something sensitive, such as how your body felt today, we ask first, we keep it encrypted, and you can take it back.

If you use the App's check-ins, journals, or health profile, please also read our separate Consumer Health Data Privacy Policy, which covers that information in more detail. Where the two overlap, that policy governs consumer health data.

1. Who we are and how to reach us

That Paleo Chick, LLC is a Tennessee limited liability company located in Tennessee, United States. That Paleo Chick is the "controller" or "business" responsible for your personal information under the laws described in this Policy.

For any privacy question, or to exercise any of the rights described below, email [email protected]. We answer every message ourselves.

2. Information we collect

2.1 Information you give us

  • Account and membership. Your email address, and a name if you choose to give one, when you create a free or paid member account, subscribe to a newsletter, or buy or receive a gift membership. If you give someone a gift membership, we collect the recipient's email address to deliver it.
  • Payment information. Paid memberships are billed by our payment processor, Stripe. Stripe collects your card details directly under its own privacy policy. We receive and keep a Stripe customer identifier, your subscription status and plan, and the billing history Stripe reports to us. We never see or store your full card number.
  • Messages and comments. The content of messages you send us, and any comments you post on the Site. Comments are public and show the name on your account.
  • Preferences you set in the App or members area. Your dietary preferences, saved recipes and articles, meal plans, meal log, shopping list, recipe ratings, program enrolments, and notification settings.
  • Health and wellness information you choose to record. If you use the App's or Site's guided programs, daily check-in, or health profile, you can record how you felt each day (for example ratings for digestion, energy, bloating, or sleep), symptoms you pick from a checklist, meals and recipes you ate, foods you ate off plan, free-text notes, and a health profile of foods you avoid, allergies or intolerances, and whether you want to track your menstrual cycle. The Services also derive information from those entries, such as which food groups appear in what you logged and whether particular food groups line up with how you rated your symptoms. We treat all of this as sensitive health information. Recording it is optional, the Services work without it, and we ask for your explicit consent before any of it is collected. See Section 7.
  • Devotional journal. If you use the faith features, the reflections, copied passages, and notes you write in your devotional journal. We treat these with the same protections as health information (Section 7), because they are personal.
  • Coach chat messages. If you turn on the optional coach chat, the questions you type. See Section 8.

2.2 Information collected automatically

  • Site usage. When you visit the Site, we and our analytics and advertising partners collect device and usage information: IP address, browser type and language, device type and operating system, referring and exit pages, pages viewed, links and buttons clicked, approximate location derived from your IP address, and the dates and times of visits. This is collected through cookies, pixels, and similar technologies (Section 4).
  • Signup source and location. Our membership platform records how you arrived at the Site when you signed up (for example from a particular post or newsletter) and an approximate location derived from your IP address at that time.
  • Email engagement. When we send you a newsletter, our email provider records whether the message was opened and which links were clicked, so we can see what is useful and what is not. You can block open tracking by turning off remote images in your email client.
  • App usage. The App uses Google Analytics for Firebase to show us how the App is used, so we can fix what is confusing and improve what is useful. It records which screens you open and which features you use (for example, opening a recipe, starting cook mode, checking off a shopping-list item, or opening the day's devotional), along with the App version, device model, operating-system version, language, approximate location derived from your IP address, and a random identifier that Firebase creates for this installation of the App. It never receives your health information, check-ins, journal or devotional entries, coach chat, the text of your searches, your email address, or your member account identifier. Screens that relate to a health need are reported under a generic name that does not say which need. The App does not collect your device's advertising identifier, does not ask permission to track you across other companies' apps or websites, and this information is not used for advertising. You can turn it off at any time in the App under Settings → Share usage analytics; while it is off, the App sends nothing to Google Analytics.
  • Sync activity. Like any internet-connected app, the App's requests to our servers (to load content and sync your data) expose your IP address and device identifiers to our hosting infrastructure. When you sync, we record a device identifier we generate, the device platform, and the time of the last sync, so you can see and remove devices connected to your account.
  • Push notifications. If you allow notifications, Apple issues a push token for your device so we can deliver reminders and updates. You can stop this at any time in iOS Settings.
  • Server and security logs. Our hosting and security providers (Amazon Web Services and Cloudflare) keep standard access and security logs, including IP addresses, that we use to keep the Services running and safe.

2.3 Information from other sources

  • Affiliate and advertising partners tell us, in aggregate, how links and ads performed. We do not receive your identity or purchase details from Amazon or any retailer.
  • Apple provides us with anonymised App Store statistics and, if you contact Apple about a purchase or the App, the information needed to respond.

We do not buy personal information from data brokers, and we do not combine browsing data with your health information.

3. How we use information

We use personal information to:

  • provide, maintain, secure, and improve the Services, including syncing your saved data between the App and the Site;
  • create and manage your account, process your membership payments, and deliver member-only content;
  • send newsletters, recipe updates, and account messages, and, where permitted, marketing emails you can opt out of at any time;
  • show you your own wellness history and the patterns within it, if you choose to record it (Section 7);
  • provide the optional coach chat and daily insight, if you turn them on (Section 8);
  • respond to your questions and requests;
  • measure how content, affiliate links, and advertising perform;
  • display advertising on the Site, including personalised advertising where you have allowed it (Section 5);
  • detect, prevent, and respond to fraud, abuse, and security incidents;
  • comply with legal obligations and enforce our Terms of Use.

We do not use your health information, devotional journal, or coach chat messages for advertising, for profiling you for any other purpose, to make decisions with legal or similarly significant effects, or to train artificial-intelligence models.

4. Cookies and similar technologies

We use cookies and similar technologies in these categories:

  • Strictly necessary. Required to run the Site, keep you signed in, and remember your cookie choices.
  • Analytics. Ghost's built-in web analytics (processed through Tinybird) and Google Analytics 4 help us understand traffic and which content is useful. Ghost's analytics honours the browser "Do Not Track" setting and records sessions under a rotating, salted identifier rather than a persistent one. In the App, Google Analytics for Firebase works as described in Section 2.2. It uses no cookies, and you can turn it off in Settings → Share usage analytics.
  • Advertising and marketing. Google AdSense, the Pinterest Tag, and the Meta (Facebook) Pixel measure and, where you have allowed it, personalise advertising and measure conversions.

Your choices. Where required by law we show a cookie banner (provided by CookieYes) that lets you accept or decline non-essential cookies and change your choice at any time. We honour the Global Privacy Control (GPC) browser signal as an opt-out of targeted advertising and of any "sale" or "sharing" of personal information, wherever we receive it. Your browser also lets you block or delete cookies; blocking some cookies may affect how the Site works.

We do not place advertising cookies, and we pause ad requests, on pages you view while signed in as a member. Pages where you enter or read your own health information do not carry advertising.

5. Advertising and your choices

The Site displays ads through Google AdSense. Google and its partners use cookies, including the DoubleClick cookie, to serve ads based on your visits to this and other websites. We also use the Pinterest Tag and Meta Pixel for advertising measurement and audiences. You can control personalised advertising here:

Affiliate links. The Site and App contain affiliate links, including Amazon Associates links routed through our link-management provider, PostTap. When you click one, Amazon and PostTap learn that the click came from us so that a resulting purchase is credited to our account. We do not learn what you bought or who you are. Affiliate links are marked, and a disclosure appears on any page that carries them.

6. How we share information

We do not sell personal information for money, and we never sell, rent, or share health information, devotional journals, or coach chat content for any purpose. We share personal information only as follows:

  • Service providers that process information on our behalf, under contract, only on our instructions: Amazon Web Services (hosting, encrypted storage, encryption keys, backups), Cloudflare (networking, security, content delivery), Stripe (payments), Mailgun (email delivery), Google (Analytics, including Google Analytics for Firebase in the App, and AdSense), Tinybird (analytics processing), CookieYes (consent management), Pinterest and Meta (advertising measurement), PostTap (affiliate links), Apple (App distribution and push notifications), and Anthropic (the optional AI features described in Section 8).
  • Advertising partners, as described in Sections 4 and 5. Some state laws treat the use of advertising cookies and pixels as a "sale" or "sharing" of personal information for cross-context behavioural advertising. You can opt out as described in Section 5. This never involves your health information.
  • Affiliate programs, as described in Section 5.
  • Legal and safety. When we believe disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of That Paleo Chick, our members, or others. If we are compelled to disclose health information, we will tell you unless the law prohibits it.
  • Business transfers. In connection with a merger, acquisition, financing, reorganisation, or sale of assets. Any successor will be bound by this Policy with respect to information collected under it.
  • With your direction. For example, when you share a recipe or export your data.

7. Health and wellness information

This section applies to the check-ins, symptom checklists, notes, health profile, program records, and devotional journal described in Section 2.1 (together, "Wellness Entries"), and to the information we derive from them.

Consent first. We ask for your explicit, separate agreement before the Services record any Wellness Entry, and separately again before any Wellness Entry is used by an automated language service (Section 8). Each consent is recorded with a version and a date. You can withdraw any of them at any time in the App's Settings or by emailing us; the rest of the Services keep working.

How we store it. Wellness Entries are stored in a database that is encrypted at rest, is not reachable from the public internet, and is separate from the systems that run the Site. The free text you write (notes, meal notes, and off-plan foods) carries an additional layer of encryption, and your check-ins are filed under an internal identifier rather than your email address. We are extending that record-level encryption to every record we hold for you, using a data-encryption key unique to you that is managed by a hardware-backed key-management service (AWS KMS) and never stored on the server that holds the data, and removing email addresses from the database entirely in favour of a keyed one-way hash whose secret is held separately. Logs never contain the content of an entry.

Who can see it. You. Our systems decrypt your records only to show them to you, to sync them between your devices, and, if you have consented, to compute your insights. Access by our staff is limited to what is needed to operate the service and is logged.

What we never do with it. We do not sell it, share it with advertisers, analytics partners, or data brokers, use it to target ads, or use it to train AI models. The advertising and analytics tools on the Site never receive Wellness Entries.

Export and erase. You can get a copy of every record we hold for you, and you can erase all of it, at any time by emailing [email protected]; where the App or the Site offers export and erase controls on your Account screen, you can use those as well. When you erase, we delete every revision of every entry and, for records protected by a per-member key, destroy that key so that any remaining copy, including in backups, is permanently unreadable. Closing your member account has the same effect.

Retention. Because the value of a check-in comes from comparing it over time, we keep Wellness Entries until you delete them or close your account. Entries are stored as a revision history rather than overwritten, so an earlier version of a day can persist after you edit it; erasure removes every revision.

This is not medical care. The Services are a wellness tool. The patterns they show come from your own logs and describe correlations, not causes. They do not diagnose, treat, or give medical advice, and nothing in them replaces a qualified professional. We are not a HIPAA covered entity, and the Services are not subject to HIPAA. The Federal Trade Commission's Health Breach Notification Rule applies to the health records the App holds, and we will notify you and the authorities as that rule and state law require if your health information is ever breached.

Washington, Nevada, Connecticut, and similar laws. Residents of states with consumer health data laws have additional rights described in our Consumer Health Data Privacy Policy, including the right to confirm, access, and delete consumer health data and to withdraw consent, and the right to appeal our decision.

8. Optional AI features (daily insight and coach chat)

Two optional features use an automated language service provided by Anthropic, PBC ("Anthropic"), the maker of Claude. Each is off until you read its terms and separately agree to it, and you can switch either off at any time in Settings. If you do not agree, nothing is sent for that purpose.

Daily insight. If you agree, the Services send Anthropic a short summary of results the App has already calculated so the insight can be phrased in plain English: for example, that digestion averaged lower on days when dairy was logged, your adherence rate, or your streak. Our server checks every summary against a fixed list of permitted fields and rejects anything else. Your notes, the free text you write about meals, your name, and your email address are never sent. If you do not agree, the App words your results itself.

Coach chat. If you separately agree, the questions you type into the chat are sent to Anthropic to write the reply, together with the calculated summary above and a structured summary of your recent check-ins: the dates, the symptoms you ticked, your ratings, and which food groups you ate. Your notes, the free text you write about meals, your name, and your email address are still never sent, and your messages are not linked to your identity when they are sent.

Safety check. Before any chat message is sent, our server checks it against a small, specific set of phrases that suggest a medical emergency, a risk of disordered eating, or a clinical question that needs a qualified professional. If one is found, the message is not sent anywhere; you are shown a fixed message pointing you to appropriate help, and we record only the category of the check, never the text.

What Anthropic does with it. Anthropic processes what we send under its commercial terms, as our service provider. Under those terms Anthropic may not train its models on our members' content, and we retain all rights to it. Anthropic deletes API inputs and outputs from its systems within 30 days of receipt, unless it is required to keep them longer by law or because its automated systems flag a request as a possible violation of its usage policy.

What we keep. We do not store your chat messages or the coach's replies. Once a reply has been shown to you, we no longer hold it. We keep a count of how many chat turns you have used in the current month, to apply a fair-use limit, and a count of safety messages shown, so we can tell whether they are working. Neither record contains anything you wrote.

What the coach is not. The coach gives general wellness and educational information. It is not medical advice, diagnosis, or treatment, and it will not tell you that you have a condition, advise you on medication, pregnancy, feeding a child, or managing a diagnosed condition, or set calorie or weight targets. It is not for emergencies. It is for people aged 18 and over.

9. The That Paleo Chick App

The App does not require an account: without signing in, your saved recipes, shopping list, meal plans, and any Wellness Entries stay on your device, and deleting the App deletes them. If you sign in, your data is also stored on our servers as described in Section 7 so it is available on your other devices and on the Site's members area. The App retrieves recipes and articles from our public content servers; those requests expose your IP address to our hosting providers like any internet request.

To sign you in, we process the email address you enter and send a one-time code to it. The App contains no advertising software. It uses Google Analytics for Firebase to measure how the App is used, as described in Section 2.2, never with your health information, and you can turn this off in Settings → Share usage analytics. The App does not collect your device's advertising identifier or request permission to track you across other companies' apps or websites. Affiliate "shop this recipe" links open the Amazon app or your browser and are subject to Section 5. The App is distributed through the Apple App Store; Apple collects certain information under its own privacy policy. Memberships are sold on the Site, not through Apple; if we ever offer a purchase through the App Store, Apple's terms would also apply to that purchase.

10. Your privacy rights

We offer the following rights to everyone, wherever you live, and we will not discriminate against you for exercising them:

  • Access. Confirm whether we process your personal information and get a copy of it.
  • Correction. Fix inaccurate information. You can edit most of it yourself in your account.
  • Deletion. Delete your personal information. Deleting your member account removes your Ghost member record, cancels any subscription, and erases your Wellness Entries as described in Section 7.
  • Portability. Receive your data in a portable, machine-readable format (your Wellness Entries export as JSON).
  • Opt out of targeted advertising, "sale" or "sharing" of personal information, and profiling. We do not sell personal information for money; to opt out of advertising cookies use the cookie banner, the GPC signal, or the links in Section 5.
  • Withdraw consent to any processing that rests on consent, including every Wellness Entry consent, at any time.
  • Appeal. If we decline a request, we will tell you why, and you can appeal by replying to our decision. We will respond to the appeal in writing with our reasons. You may also contact your state attorney general.

How to exercise them. Email [email protected] from the address on your account, or use any export, erase, or consent controls offered in the App or on your Account page. We will confirm receipt and respond within 45 days, and we will tell you if we need more time (up to a further 45 days) and why. We may need to verify that a request comes from you, usually by replying to your account email; we will not ask for more than we need. You may use an authorised agent where the law allows, and we may ask the agent for proof of authorisation.

10.1 Tennessee residents

The Tennessee Information Protection Act (TIPA), effective July 1, 2025, applies to businesses that exceed $25 million in annual revenue and that control or process the personal information of at least 175,000 Tennessee consumers (or 25,000 consumers while earning more than half their revenue from selling personal information). That Paleo Chick does not currently meet those thresholds, so TIPA does not impose obligations on us today. We are a Tennessee company, and we extend every right TIPA describes, access, correction, deletion, portability, and the opt-outs above, to all Tennessee residents anyway, and we will follow its procedures if we grow into its scope.

10.2 California residents

The California Consumer Privacy Act (CCPA, as amended by the CPRA) applies to businesses above certain revenue and data-volume thresholds that we do not currently meet. We nevertheless provide this notice voluntarily and honour California requests as if the law applied.

Categories of personal information we collected in the past 12 months, the sources, and the purposes are described in Sections 2 and 3. In CCPA terms they are: identifiers (name, email, IP address, device and account identifiers); customer records (billing information held by Stripe); commercial information (membership and purchase history); internet or network activity (pages viewed, App screens and features used, clicks, email engagement); approximate geolocation (from IP address); audio or visual information (none); inferences (which content you may find useful; and, only if you record them, the wellness patterns derived from your entries); and sensitive personal information (health information you choose to record, and the devotional journal, which may reveal religious beliefs). We use sensitive personal information only to provide the features you asked for, and never to infer characteristics about you for other purposes; you may limit its use by withdrawing consent (Section 7).

Sale and sharing. We do not sell personal information for money. The advertising cookies and pixels described in Sections 4 and 5 may constitute "sharing" of identifiers and internet activity for cross-context behavioural advertising. You can opt out through the cookie banner, the Global Privacy Control signal, or the links in Section 5. We do not sell or share the personal information of anyone we know to be under 16, and we do not sell or share health information at all. App usage analytics is used only to measure and improve the App. It is not used for cross-context behavioural advertising, and it is neither a sale nor a sharing of personal information.

Disclosures for a business purpose. We disclose identifiers, commercial information, and internet activity to the service providers listed in Section 6.

Your California rights. Know, access, delete, correct, port, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination, exercised as described above. California's "Shine the Light" law: we do not share personal information with third parties for their own direct marketing.

10.3 Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Kentucky, Indiana, Rhode Island, and other U.S. states

Most state privacy laws apply only above volume or revenue thresholds that we do not meet. We offer the rights in Section 10, including the right to appeal, to every U.S. resident regardless. Where your state law requires consent for processing sensitive data, we obtain it (Section 7). Where your state recognises the Global Privacy Control, we honour it. Nevada residents may also direct us not to sell their covered information; we do not sell it, and you may confirm that by emailing us.

10.4 Residents of the EEA, United Kingdom, and Switzerland

We operate from and direct the Services at the United States and do not target the EEA, UK, or Switzerland. If the GDPR or UK GDPR nevertheless applies to you, our legal bases are: consent for Wellness Entries, the AI features, marketing emails, and non-essential cookies (which you can withdraw at any time); performance of a contract for accounts, memberships, and sync; legitimate interests in running, securing, and improving the Services and measuring our content; and legal obligation. Health and religious information is processed only with your explicit consent (Article 9(2)(a)). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. Your information is transferred to and processed in the United States; where a transfer mechanism is required, we rely on your explicit consent or on the transfer being necessary for the contract you asked for, and on our providers' standard contractual clauses for onward transfers.

11. Data retention

We keep personal information only as long as necessary for the purposes in this Policy, to comply with legal obligations, resolve disputes, and enforce our agreements, then delete or de-identify it. In particular:

  • Member account records: while your account is active and for up to 90 days after you close it, except billing and tax records, which we keep for 7 years as accounting and tax law requires.
  • Wellness Entries and devotional journal: until you delete them or close your account (Section 7).
  • Coach chat: not stored. Monthly usage counts are kept for 13 months.
  • Newsletter engagement: while you are subscribed and for up to 12 months after you unsubscribe.
  • Website and App analytics: Google Analytics data, including App usage data, is retained for 14 months. Ghost analytics session identifiers rotate daily and are kept only in aggregate.
  • Server and security logs: up to 30 days.
  • Backups: encrypted backups are rotated within 90 days; Wellness Entries protected by a per-member key become unreadable in backups the moment you erase them (Section 7).
  • Support messages: up to 2 years after the conversation ends.

12. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, envelope encryption with separately held keys for Wellness Entries, network isolation of our databases, staff two-factor authentication, least-privilege access, audit logging of key use, and daily encrypted backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the relevant authorities as required by Tennessee law, the laws of your state, and the FTC Health Breach Notification Rule.

13. Children

The Services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18, and we do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). If you believe a child or minor has provided us personal information, email [email protected] and we will delete it promptly.

14. International users

We are based in the United States and our service providers process information in the United States and other countries. If you use the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country. See Section 10.4 for the EEA and UK.

15. Third-party sites and services

The Services link to third-party websites, retailers, social platforms, and advertisers that we do not control. Their privacy practices are governed by their own policies, and we encourage you to read them.

16. Changes to this Policy

We may update this Policy from time to time. When we do, we will change the effective date above. If a change materially affects how we use Wellness Entries or the AI features, we will tell you in the App or by email before it takes effect and, where the law requires, ask for your consent again. Your continued use of the Services after an update means you accept the revised Policy, except where consent is required.

17. Contact us

That Paleo Chick, LLC, a Tennessee limited liability company, Tennessee, United States.

Email: [email protected]

Previous version: September 1, 2026.