Goldyn Privacy Policy

Plain English Summary

Goldyn is a private-alpha health app run by Opengro (Pty) Ltd in South Africa. You add your own health information, and Goldyn helps you organise it, track it over time, and generate AI-assisted summaries and insights.

We do not sell your data. We do not use your data to train AI models. We share data only with the service providers needed to run Goldyn.

You can export your data, update much of it in the app, or request account deletion.

1. Who We Are

Goldyn is operated by Opengro (Pty) Ltd, a company registered in South Africa under registration number 2010/008798/07, with its registered address at 1 Mimosa Avenue, Oudtshoorn, 6625, South Africa.

For privacy purposes, Opengro (Pty) Ltd is the party that decides how and why your personal information is processed.

• Privacy contact: privacy@opengro.com
• Information Officer (POPIA): privacy@opengro.com

2. The Data We Collect

We collect the information needed to provide Goldyn, including:

• Account and profile data such as your email address, full name, date of birth, country code, and profile photo if you add one.
• Health and wellness data you enter or upload, such as conditions, medications, supplements, check-ins, blood results, symptoms, meals, exercise, sleep, hydration, skin logs, stool logs, medication logs, and care-team information.
• Chat and AI interaction data, including chat messages, onboarding messages, AI-generated summaries, insights, reflections, research-list items, and learn-card notes.
• Support-circle data, including supporter invitation details, connection settings, and supporter messages.
• Optional analytics consent records and product-usage events if you opt in to analytics.

3. How We Use Your Data

We use your information to:

1. Run the Goldyn service, including authentication, health logging, reminders, support-circle sharing, and exports.
2. Generate AI-powered summaries, insights, educational chat responses, blood-result extraction, and some meal-parsing features.
3. Send service emails such as sign-in links, onboarding emails, supporter invitations, and account-deletion messages.
4. Run optional analytics if you have expressly opted in.
5. Maintain security, troubleshoot issues, and comply with legal obligations.

We do not sell your personal information. We do not use your health data for advertising.

4. AI Processing and File Handling

• Most AI features use Anthropic.
• Voice transcription, some speech playback, and at least one meal voice-parsing flow use OpenAI.
• We ask for consent to AI processing during onboarding, and some additional features ask for separate consent in context.
• AI outputs can be wrong, incomplete, or unsuitable for your circumstances. Goldyn is not a replacement for a qualified healthcare professional.

Goldyn handles certain files differently depending on the feature:

• Voice recordings used for transcription are deleted after processing.
• Uploaded blood-result PDFs are deleted after extraction succeeds.
• Skin, stool, and medication images are sent to Anthropic for analysis in the request and are not stored as files by Goldyn.
• Hydration is a manual urine-colour check — you select from a palette. No image is captured or uploaded.
• Meal photos, chat images, and profile avatars are stored until you remove them or your account is deleted.

Stored data such as chat messages, logs, summaries, meal photos, chat images, and avatars remain in your account until deletion unless we say otherwise in this policy.

5. Sharing and Service Providers

We share personal information only with providers that help us operate Goldyn:

If you invite someone into your support circle, we also share the information that your chosen access level allows them to see.

6. Cross-Border Transfers

Goldyn is operated from South Africa, and some of our providers process data outside South Africa.

• Core app storage currently sits with providers hosted in the EU.
• AI and email providers may process data in the United States.
• For South African users, we rely on your consent and the need to provide the service when information is transferred across borders.

7. Data Retention

When you request deletion, Goldyn marks your account for deletion and gives you a 30-day window to cancel. After that window, Goldyn runs deletion and removes database records and files from the storage buckets used by the app.

8. Your Choices and Rights

Inside the app, you can:

• Export your data as JSON from Settings > Privacy.
• Manage optional analytics, marketing, and treatment-note consents from Settings > Privacy.
• Request account deletion from Settings > Delete account.

Under POPIA, you may also ask to access, correct, or delete personal information we hold about you, or object to certain processing, by contacting privacy@opengro.com.

9. Security

We use encryption in transit, hosted infrastructure protections, and row-level security in our database. No system is perfectly secure, but we take reasonable technical and organisational steps to protect the information we hold.

10. Children

Goldyn is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently done so, please contact privacy@opengro.com immediately.

11. Changes to This Policy

We may update this policy from time to time. If we make a material change, we will update the version and date above and may also notify you in the app or by email.

12. Contact Us

• Privacy enquiries: privacy@opengro.com
• Data export: Settings > Privacy > Download my data
• Account deletion: Settings > Delete account

South Africa — Information Regulator
Website: inforegulator.org.za | Email: POPIAComplaints@inforegulator.org.za

This policy reflects the Goldyn private alpha as of 20 July 2026 and is intended to describe the product as currently implemented.