Privacy Policy
How we collect, use and protect your personal information.
1. Who we are
Dr. Gideon Afolabi Wellness ("we", "us", "our") operates the website revdrgideonafolabi.com and the associated mobile applications distributed on the Apple App Store and Google Play Store ("the Service"). The Service offers educational herbal-wellness information, symptom-to-remedy matching, plant identification and self-screening tools. The Service is provided by McFuntain LLC and reviewed by Rev. Dr. Gideon Afolabi, who holds the Medicinal Plants Certificate, a six-course programme authored by Cornell University’s College of Agriculture and Life Sciences and completed through eCornell. It is a professional-development certificate, not a degree. He is not a licensed physician.
2. Information we collect
We do not run analytics, we do not use crash reporting, and there is no account system, so there is nothing to sign up for and no profile to build. (a) Information you send us: five features send anything off your device because you asked them to, and one request happens automatically on every page: the web fonts. Your browser fetches them from Google (fonts.googleapis.com and fonts.gstatic.com), which means Google receives your IP address and browser details on every page load, whether or not you use any feature. We receive nothing from that request and Google is not given anything about your health, your searches or your answers. The five you choose are: the photo you submit to the Plant Identifier; the name of any medicine you type into the Herb-Drug Interaction Checker; the product or ingredient name you type into the Supplement Label Check; the supplement and medicine names you check in the Supplement Recall Check; and, if you use it, the barcode you scan. Section 3 sets out exactly where each of those goes and which organisation receives it. (b) Automatically: your IP address is visible to Cloudflare, which hosts and serves the site, and to Google, which serves the web fonts described above, and we use it to rate-limit the plant-identification endpoint so nobody can drain it. That counter is keyed on your IP address, holds nothing else, and expires within the hour. It is not written to a profile, not linked to anything you have entered, and not sold. (c) We collect no government identifiers, no financial information, no precise location, no advertising identifiers and no contact details. Everything you enter into the self-screening tools stays in your browser on your device.
3. Sensitive health data
Self-screening tools (Heart Risk Score, Mind Screen, Cycle Tracker, Sleep Apnea Screen, Men's Health Screen, Biological Age, Hydration Calculator, Vitality Test) compute results entirely on your device. Your individual answers are not transmitted to or stored on our servers. Five features send health-related information off your device when you ask them to, and you should know exactly which, and to whom. None of them carries an identifier, an account or a device ID, so none of these requests can be tied back to you by us. (a) The Herb-Drug Interaction Checker sends the name of the medicine you type to the US National Library of Medicine (RxNorm and RxClass), a United States Government service. We send only that name. We do not send which herb you paired it with. (b) The Plant Identifier uploads the photo you choose to PlantNet so it can be identified, and may query Trefle for plant metadata. The photo is not stored by us, and your plant history is saved only in your own browser on this device. (c) The Supplement Label Check sends the product or ingredient name you type to the Dietary Supplement Label Database (DSLD), run by the US National Institutes of Health, to retrieve the published label for it. (d) The Supplement Recall Check sends the supplement and medicine names on your list to openFDA, run by the US Food and Drug Administration, to look for recalls affecting them. This is health information about you, and it is the most sensitive thing the app transmits. (e) If you scan a barcode, the barcode number is sent to Open Food Facts, an independent non-profit product database, to turn it into a product name. Open Food Facts is the only recipient in this list that is not a United States Government body. Nothing sent to any of these services is combined with personally identifying information or used for advertising. Separately, the Migraine Tracker saves your episode log in your own browser storage on this device only; we never receive it, and clearing your browser data deletes it.
4. How we use information
We use the information we collect to: (a) operate, maintain and improve the Service; (b) personalise the result of self-screening tools and Symptom Checker; (c) prevent abuse, fraud and security incidents; (d) comply with legal obligations. We do not sell your personal information. We do not use your personal information for behavioural advertising.
5. Third-party services we rely on
To deliver core features we rely on these third parties. Google Fonts (fonts.googleapis.com, fonts.gstatic.com) serves the typefaces and is contacted automatically on every page load, receiving your IP address and browser details and nothing else. The rest are contacted only when you use the feature named: PlantNet API, which identifies the plant photo you submit; Trefle API, for plant metadata; the US National Library of Medicine (RxNav), a United States Government service which receives the name of any medicine you type into the Herb-Drug Interaction Checker and returns its generic ingredient and drug class; the Dietary Supplement Label Database (DSLD) at the US National Institutes of Health, which receives the product or ingredient name you search in the Supplement Label Check; openFDA at the US Food and Drug Administration, which receives the supplement and medicine names you check for recalls; Open Food Facts, an independent non-profit database, which receives a barcode number if you choose to scan one; and Cloudflare Pages, which hosts and serves the site and therefore sees your IP address. The Apple App Store and Google Play Store distribute the mobile apps. We do not use any crash-reporting or analytics provider. Each provider is bound by its own privacy policy and may use the data only to deliver the requested service.
6. Data retention
There is nothing to retain. Your quiz inputs and self-screening results never reach our servers. The plant photo you submit is passed to PlantNet for identification and is not stored by us. The medicine name you type into the interaction checker is passed to the US National Library of Medicine, the product names you search go to DSLD and openFDA, and a scanned barcode goes to Open Food Facts. None of them is stored by us. We keep no analytics, no crash logs and no accounts. The rate-limit counters that see your IP address hold only a request count and expire within the hour. Depending on how the site is deployed they live either in the server process or in a short-lived Cloudflare key-value store; in both cases they contain no personal data beyond the address itself and are not readable as a history.
7. Children
The Service is intended for adults. It deals with medical and health information and is not directed to children, and we declare an 18+ target audience in both the App Store and Google Play. We do not knowingly collect personal information from anyone, children included. If you believe a child has sent us information through the Plant Identifier, contact us and we will confirm what was and was not retained.
8. Your rights
Subject to your jurisdiction (GDPR for the EEA / UK, CCPA for California, and similar regimes elsewhere), you may have the right to: access your personal data; request correction or deletion; object to or restrict processing; data portability; lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at support@mcfuntain.com.
9. International transfers
Some of our third-party providers are based outside your country of residence. Where personal data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection.
10. Security
We use industry-standard protections including HTTPS / TLS encryption in transit, restricted server access, security headers, and dependency-vulnerability scanning. No internet transmission is 100% secure; we cannot guarantee absolute security, but we work continuously to maintain a high standard.
10a. Storage on your device
Some features store small amounts of data in your browser rather than on our servers. The complete list, by storage key: your migraine episode log (drg.migraine.v1); your plant identification history (drg.plantid.v1); your last period date, cycle length and period length (keys beginning drgideon:v1:cycle:); your six wellness scores and up to thirty days of score history (drgideon:v1:tracker:); what you told the symptom triage, the medicines you entered there and any triage runs you saved (drgideon:v1:triage:); the list of what you take, the name you put on the doctor report and the questions you added to it (drgideon:v1:record:); your herb cabinet, with any batch numbers and dates you entered (drgideon:v1:cabinet:items:v1); the people you added under Family and which one is selected (drgideon:v1:family:); your protocol adherence log (protocol:log:v1 — written raw, without the drgideon:v1: prefix); the date you last ran a recall check (drgideon:v1:recalls:lastChecked); your hydration setup — weight, unit, sex, exercise hours, climate and caffeine — so the calculator does not ask again (drgideon:v1:hydration:); up to twelve saved results per screening tool for the heart, mind, body-age, breath, reaction-time, sleep, mens-health and hydration screens (keys beginning drgideon:v1:screener:); whether this device holds a premium subscription (premium:entitlement:v1); the results of medicine-name lookups so the same name is not requested twice (keys beginning rxnorm:v1: and rxclass:v1:); your language preference (locale); and, for the current browser session only, a flag recording that you dismissed the install banner (pwa-banner-dismissed). Where you have added more than one person under Family, that person’s data is stored under the same key with their profile identifier appended. Several of these categories are sensitive — menstrual and fertility dates, mental-health screening totals, sexual-health answers and the medicines you take — so it is worth being exact: every item above is written only in your own browser, none of it is ever uploaded, there is no account it could be attached to, and we cannot read any of it. The Period & Fertility Tracker, the Wellness Score Tracker and every screening tool that saves a result each carry a control that erases what it stored. All of it is removed if you clear your browser storage or uninstall the app.
11. Cookies and similar technologies
The Service sets no cookies at all. There are no advertising cookies, no analytics cookies and no cross-site tracking. The few things the app remembers, listed in section 10a, are kept in the local storage of your own browser on your device, not in cookies, and are never sent to us. Clearing your browser storage removes them.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date will reflect the most recent revision. Material changes will be communicated on the Service. Your continued use of the Service after any change constitutes acceptance of the updated policy.
13. Contact
Questions or requests regarding this Privacy Policy: support@mcfuntain.com.