Your data, in plain words.

Who we are

Ferritin is made by Maestri LLC. We decide what happens to the data on this page, and we are responsible for it. Write to hello@ferritin.ai about anything here.

What we keep for your account

An account needs an e-mail address and a password. We keep the address, and the password only as a one-way hash, so nobody can read it back, us included.

Then we keep what you enter and log in the app:

• Your profile: the name you give, how you eat, the times of your day, whether you have coffee, tea, matcha or dairy, whether you track your period, and a due date or your baby's birth date, if you add one.
• Your periods: the days and the flow you log.
• Your meals and drinks: the foods on each plate you log, and when you had coffee, tea or matcha.
• Your supplements: their names, the amount from the label, when you take them and the doses you tick off.
• Your lab results: each value with its unit and date, the lab's name, the rows read from your report, and how the test was taken, such as fasting.
• Your weekly check-ins, and your answers in Why is it stuck?
• The photo of a plate, when you take one.
• The language you use the app in, and your phone's time zone, so dates and times line up with yours.

This is health data. We use it for one thing: to show you your own numbers, estimates and plan. We do not sell it, use it for advertising, or share it with anyone except the services below that run Ferritin for us, unless the law requires us to.

Lab reports and photos

When you add a lab report, the app sends the PDF or the photo to our server to be read. Text in a PDF is read by our own code. A photo or a scanned page may be read by Amazon Textract, a reading service from Amazon Web Services. Google's Gemini model reads the same document a second time, to check the first reading.

The reading comes back to you as a proposal, and you check every value before anything is saved. We keep the results read from the report, not the file itself. The whole page is sent, so if your report shows something you would rather not send, such as your address, crop or cover it first.

When you photograph a plate or a supplement label for Ferritin to read, the photo goes to our server and Gemini reads it. A label photo is not kept. A plate photo is kept with that plate, in private storage at Amazon Web Services that is never public, until you delete the plate or your account.

What stays on your phone

• Light or dark mode, the app lock, the iron reminders, your lesson progress and the sign-in that keeps you logged in are kept on your phone only.
• The app lock uses Face ID, Touch ID or your phone's own unlock. Your phone does the check and tells Ferritin only whether it worked: Ferritin never sees your face or your fingerprint.
• Iron reminders are scheduled on your phone. We send no push notifications.
• The doctor pack is made on your phone, and goes only where you share or save it.
• The demo runs on your phone only, with made-up data. Nothing you do in it is sent to us.
• The app checks updates.ferritin.ai for new versions of itself. That check sends nothing from your account.

E-mail

Account e-mails, such as a code to confirm your address, come from no-reply@ferritin.ai and are sent through Amazon Simple Email Service (SES). We use your account address only for e-mails about your account.

This website

ferritin.ai is hosted by Netlify. Like any web host, Netlify receives your network address and browser details with each visit, and keeps logs of those requests, to serve the site and keep it running.

The site sets no cookies and runs no analytics, ads or trackers, and its fonts are served from the site itself. It remembers one thing in your browser: that you closed or followed the language suggestion, so it does not ask again.

When you join the waitlist, or ask to hear when The Iron Guide opens, we keep your e-mail address with the page's language, which form you used and the date. They are stored with Netlify, our website host, and used only to write to you when the app or the guide opens. To be taken off the list, write to hello@ferritin.ai.

When you buy The Iron Guide, you pay on the checkout page of Stripe, our payment processor: Stripe receives your card and billing details, and we never see your card number. We keep a record of the order: your e-mail address, the page's language, the amount, the date, Stripe's reference for the payment and how many times the download link was used. It is stored on our server with the app's data, used to e-mail you the link, send it again when you ask and handle a refund, and kept as the record of the purchase.

Where it is stored, and who else handles it

Your account lives in the United States. Our server runs at Amazon Web Services in the us-east-1 region (northern Virginia), behind Amazon CloudFront, and our database is MongoDB Atlas in the same region. If you live elsewhere, your data travels there.

These services handle data for us, each only for its own job:

• Amazon Web Services: runs our server, stores plate photos, reads photographed reports (Amazon Textract) and sends account e-mails (Amazon SES).
• MongoDB Atlas: our database.
• Google, through the Gemini API: reads the lab reports, plate photos and supplement labels sent to be read.
• Netlify: hosts this website and keeps the waitlist.

How long we keep it

• Your account and what you log: until you delete them. When you delete something in the app, it is removed from our database.
• A lab report file or a label photo: not kept once it is read.
• A deleted plate photo: an old copy can stay in storage for up to 30 days, then it is gone for good.
• Your place on the waitlist: until you ask us to remove it.

Our server writes short technical logs to stay up and safe, such as which kind of request failed and the account number it came from. They are written to leave out what you log and your results. Like any server, ours sees the network address you connect from, and uses it to slow down repeated attempts, such as many wrong passwords.

Your choices

• Delete everything: in the app, open Me, then Delete account, and confirm with your password. Your account and everything in it are deleted from our database at once. It cannot be undone.
• Get a copy: write to hello@ferritin.ai and we will send you everything in your account as a file.
• Correct it: change your profile and plan in the app, or write to us.
• Ask what we hold about you, or ask us to delete it: write to hello@ferritin.ai.

Write from the e-mail address your account uses, so we know the request is yours. We will never ask for your password.

When this page changes

When Ferritin changes what happens to your data, this page changes the same day, and so does the date at the top.