Legal
Privacy Policy
Effective July 28, 2026
This policy covers the Ellie website, waitlist, plan-preview quiz, Founding Membership purchase, and, when it launches, the Ellie app (together, the "Services"), operated by Ellie ("we," "us"). We built Ellie for people navigating a sensitive moment. This policy is written to be read, not skimmed past.
The short version: we collect what you give us, we use it to build your plan and run the Services, we never sell your data, we never use your health information for advertising, and you can ask us to delete everything at any time by emailing support@metellusproductions.com.
1. What we collect
On this website
- Email address, when you join the waitlist or become a Founding Member.
- Quiz answers, if you build a plan preview: your situation (for example, whether your insurance coverage ended), which GLP-1 medication you have taken, roughly how much weight you lost and over how long, your estimated monthly cost, and what concerns you most. This is health-related information and we treat all of it as consumer health data (see section 5), whether or not a law requires us to.
- Payment information, if you purchase a Founding Membership. Payment is processed by Stripe; we never see or store your card number. We keep the transaction record (email, amount, date).
In the app (when it launches)
- Profile details you enter: age, height, weight history, goal weight, and your chosen threshold weight.
- Medication logs you enter: which medication, doses, and dates. Ellie records the regimen you and your prescriber chose; it never recommends one.
- Daily logs: weigh-ins, protein and activity entries, food-noise events and their intensity, check-in answers, and items you select in the Inventory (such as changes in sleep, joint pain, or cycle regularity).
- Device and usage data: app version, device type, crash logs, and analytics events that describe how features are used.
2. What we use it for
- Building and personalizing your plan, which is the entire point of the product.
- Running the waitlist and Founding Membership program, including launch emails.
- Improving the Services, using aggregated or de-identified information that does not identify you.
- Support, security, and legal compliance.
What we do not use it for: we do not sell your personal data. We do not share your health information with advertisers or data brokers, and we do not use it to target advertising, ours or anyone else's.
3. Who we share it with
- Service providers that run our infrastructure: hosting (Vercel), database (Supabase), payments (Stripe), and email delivery. Each processes data only to provide its service to us.
- Nobody else, except if required by law, or with your explicit direction (for example, if a future feature lets you export your plan to your prescriber, that sharing happens only when you trigger it).
4. HIPAA
Ellie is not a healthcare provider, health plan, or healthcare clearinghouse, and is not a "covered entity" or "business associate" under the Health Insurance Portability and Accountability Act. The information you provide to Ellie is not "protected health information" under HIPAA. That is a statement about which law applies, not about how carefully we treat your data: we apply the protections in this policy to all of your health-related information regardless.
5. Consumer health data
Some states, including Washington (My Health My Data Act), Nevada, and Connecticut, give specific protections to "consumer health data." Your quiz answers, medication logs, weight entries, and similar information qualify. For all users, in every state, we commit to the following:
- We collect consumer health data only with your consent, which you give by entering it.
- We use it only to provide and improve the Services, as described in section 2.
- We do not sell it, and we do not share it for advertising.
- You may withdraw consent, and request access to or deletion of your consumer health data, at any time (section 7).
- Access to consumer health data inside our team is restricted to what operating the Services requires.
6. Retention
- Waitlist data: kept until launch operations conclude or you unsubscribe, whichever is first.
- Quiz answers: kept so your plan preview can become your real plan at launch; deleted on request at any time.
- App data: kept while your account is active. If you delete your account, personal data is deleted within 30 days, except transaction records we must keep for tax and accounting purposes.
7. Your rights
Email support@metellusproductions.com to access, correct, export, or delete your personal data, or to withdraw consent for consumer health data. We honor these requests for every user, not only where a statute requires it. We will verify the request came from the email on file, respond within 30 days, and you may appeal any refusal by replying to our response.
8. Age
The Services are for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact support@metellusproductions.com and we will delete it.
9. Security
Data in transit is encrypted. Database access is restricted by service-role credentials, and health data tables are not readable by client applications. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires and as plain decency requires, whichever is faster.
10. Changes
If this policy changes materially, we will email the address on file before the change takes effect. The effective date at the top always reflects the current version.
11. Contact
support@metellusproductions.com