Privacy Policy

Creating your account uses your email only, and we store no passwords because none exist: you sign in through a link we send you. If you become a member, we store what you type into your daily log. The public voice and text assistant uses ElevenLabs and Google Gemini; the member-area coach uses Anthropic. Below we explain what each service receives and how conversations are handled.

Dr. Leonardo Vergara, MD, based in the United States, responsible for www.saludmetabolico.com and the Zero Sugar Health membership. For anything about privacy, including deleting your account, write to macanudo.leonardo@gmail.com.

Your member account identity: your email address. There are no passwords. You sign in with a single-use link.

Your profile: the language you read in and, if you write one, a goal in your own words.

Your daily log, only if you are a member and only what you type: weight, energy, meals, steps, sleep, mood and — this one matters — blood-glucose and blood-pressure readings you copy from your own device. The site measures nothing. It is not a medical device and we never present those numbers as measured by us.

Your habits for the day: five boxes, done or not done.

Your subscription: the identifier Stripe gives us, the billing status, and the date your paid period ends.

If you use the contact form: the email address and message you write, so we can reply.

Your card. Payment happens on a page hosted by Stripe; your card details never pass through this site and we never see them.

Conversations with the member-area AI coach are not saved in our database. The server sends your message to Anthropic and returns the reply without creating a conversation record in that database. This is distinct from the public ElevenLabs assistant described below and is not a promise about provider retention.

What you write to the coach is sent to Anthropic, the model provider, to produce the reply. It may contain information about your health, because you decide what to write. We do not store it, but it does leave our servers in order to answer you. If you would rather none of that leave, do not use the coach: the rest of the membership works without it.

Before your message reaches the model it passes an automatic screen. If it mentions self-harm, a possible medical emergency or a blood-sugar emergency, the system does not consult the model at all: it replies with fixed text asking you to seek human help. If you mention medication, the coach is instructed never to adjust a dose and to send you to whoever prescribes it.

The public assistant is an ElevenLabs AI that uses Google Gemini to answer questions about the site's published information. It is separate from the member-area coach. It has no access to your member logs, measurements, payments or account, and cannot make bookings, charge you or change your account.

ElevenLabs processes the messages you type and, if you choose to start a call and grant microphone permission in your browser, your audio and its transcription. Conversation text is passed to Google Gemini to generate replies. It may contain personal or health details if you choose to share them. Visiting the page does not activate your microphone; you can read the site without using the assistant.

The agent's ElevenLabs configuration disables voice recording, memory between conversations and file uploads. It schedules deletion of audio, transcripts and personal data with a zero-day retention period. This is scheduled deletion, not instant erasure or Zero Retention Mode (ZRM); providers may process and temporarily store data.

If the ElevenLabs component does not load, a fallback text assistant may appear. When it uses a model, it sends messages to Anthropic. If you request contact with the team and provide your name and an email address or phone number, it can email those details, your interest and a recent conversation excerpt to the team through Resend. It also has no access to your member logs.

You. The database enforces a per-row rule (Row-Level Security) limiting every query to the rows of whoever makes it. This is not an application check: it lives inside PostgreSQL, and it holds even if the application has a bug.

One technical exception: the server uses a privileged key to record who is subscribed when Stripe tells us about a payment. That key lives only on the server and does nothing else.

We do not sell your data. We do not share it with advertisers. We do not use it to train models.

Supabase (database and sign-in, US East region), Vercel (site hosting), Stripe (payments), Resend (emails and contact requests), Anthropic (member coach and fallback text-assistant model), ElevenLabs (public voice and text assistant) and Google (the public assistant's Gemini model). Each is involved in the function listed.

The member database is in the United States. If you use your account from another country, that account's data is stored there. Processing of public-assistant conversations is described in its section above.

The site may use visit analytics and Meta and TikTok advertising pixels to measure campaigns. They are off by default and load only if configured; when they are not, nothing whatsoever is sent. You can block them with your browser's tools without losing any function of the site.

Write to macanudo.leonardo@gmail.com from your account's email address and ask us to delete it. Deleting your user removes, in the same operation, your profile, your subscription record, your entire log and all your habits. No copy is kept “just in case”. The database was built this way from day one.

Deleting your account does not automatically refund the period you have already paid. If you want to stop the billing, cancel first from “Manage my subscription”.

You can ask what we hold about you, correct it, or delete it. Write to us and we will respond. Depending on where you live, the law may give you further rights; exercise them at the same address and we will honour them the same way.

This service is for people over 18. It is not directed at minors and we do not knowingly collect data from minors. If you believe a minor has given us data, write to us and we will delete it.