Legal & Support · Effective June 3, 2026
Karaway, in plain English.
Seven pages covering how Karaway works, what we collect, what your rights are, and what to do when something feels unclear. Written by humans, for humans.
Effective Date · June 3, 2026
Medical Disclaimer
- Karaway is a tracking tool, not a medical device or medical service.
- Nothing on this site or in our product is medical advice, diagnosis, or treatment.
- Always talk to a qualified healthcare provider about your health. Karaway doesn't replace that conversation — it's designed to help you prepare for it.
- In a medical emergency, call 911 (or your local emergency number). Don't use Karaway.
1. What Karaway is
Karaway is an app that helps you track digestive symptoms and identify patterns for your doctor. Our app and this website are designed to help you:
- Record what you experience — symptoms, triggers, medications, daily factors
- Recognize patterns in your own data over time
- Prepare for appointments with your doctor or healthcare provider, by summarizing what you've recorded
That's it. We're a memory and pattern-recognition tool for your personal health journey.
2. What Karaway is not
Karaway is not:
- A doctor or healthcare provider
- A diagnostic tool — we don't tell you what condition you have or whether something is wrong
- A medical device that has been cleared or approved by the FDA, EMA, MHRA, or any other regulator
- A substitute for professional medical advice, examination, diagnosis, or treatment
- A platform for handling medical emergencies
We don't make medical decisions for you. We help you organize what you already know about yourself.
3. No medical advice
Any information you see on karaway.health, in our marketing materials, in our app, or in any communication from us — including descriptions of conditions, symptoms, triggers, medications, treatments, or health practices — is for informational and educational purposes only. None of it is medical advice.
- Don't use anything from Karaway to diagnose yourself or someone else
- Don't start, stop, or change any treatment based on what you read here
- Don't delay seeking medical care because of something you saw in our app
- Don't disregard advice from a healthcare provider because of something Karaway suggested
If you have or think you have a medical condition, talk to a qualified healthcare provider. They can examine you, review your full history, and give you advice tailored to your situation.
4. Patterns and "insights" are observations, not conclusions
Karaway may show you correlations or patterns in your data — for example, that symptoms you've logged tend to occur after certain triggers you've recorded. These are observations from your own logs, not medical conclusions. Correlation isn't causation. Your healthcare provider is the right person to interpret what your data means for your health. If something we surface seems important to you, bring it to your doctor.
5. Emergencies
Karaway is not for emergencies. If you're experiencing a medical emergency — including but not limited to: severe pain, sudden numbness or weakness, severe headache unlike any you've had before, difficulty breathing, signs of stroke or heart attack, suicidal thoughts, or any acute crisis — call your local emergency number immediately — 911 in the U.S., 112 in the EU/UK, or your local equivalent — or go to the nearest emergency room. Do not use Karaway to log, message, or otherwise document an emergency in progress. Get help first.
6. No doctor-patient relationship
Using Karaway or visiting karaway.health does not create a doctor-patient, therapist-client, or any other healthcare-professional relationship between you and us. We are a software company. We are not licensed to practice medicine, give medical advice, or provide medical services in any jurisdiction.
7. Specific topics, conditions, and medications
If our content mentions specific conditions (such as digestive symptom and GLP-1 side-effect tracking), medications, or treatments — including medication names, dosages, or side effects — it's only for context, education, or to help you record what's relevant to you. We don't endorse, recommend, or prescribe any treatment or medication. Always follow your healthcare provider's guidance on medications and treatments.
8. Third-party content
We may quote, link to, or reference third-party sources — such as medical guidelines, research papers, or content from health organizations. We're not responsible for the accuracy or completeness of third-party content. Always verify with a qualified provider.
9. Your responsibility
By using Karaway, you acknowledge that:
- You're responsible for your own health decisions
- You'll consult a qualified healthcare provider for medical advice
- You won't rely on Karaway for diagnosis, treatment, or emergencies
- Any information you enter is for your own use and reference
If you're unsure whether Karaway is right for you, ask your healthcare provider before using it.
10. Contact us
For questions about how Karaway works (not medical questions): Support: support@smart-it.io · General: legal@smart-it.io
For medical questions: contact your healthcare provider. For emergencies: call your local emergency number (911 in the U.S., 112 in the EU/UK, or your local equivalent).
Effective Date · June 3, 2026
GDPR Notice (European Union)
If you're in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) gives you specific rights about your personal data.
Who is the controller?
Smart IT US Inc. is the data controller for personal data collected via karaway.health. You can contact us at legal@smart-it.io or Smart IT US Inc., 30 N Gould St Ste R, Sheridan, Wyoming 82801, USA. We do not currently target Karaway to individuals in the EEA. If our activities change such that an EU representative under Article 27 is required, we will update this notice.
Legal bases for processing
We process your data on one of the following legal bases:
| Processing | Legal basis |
|---|---|
| Sending you marketing emails you signed up for | Consent (Article 6(1)(a)) |
| Setting non-essential cookies (analytics, advertising) | Consent (Article 6(1)(a)) — collected via cookie banner |
| Running our site, security, fraud prevention | Legitimate interests (Article 6(1)(f)) |
| Analytics in aggregate | Legitimate interests (Article 6(1)(f)) |
| Responding to legal requests | Legal obligation (Article 6(1)(c)) |
You can withdraw consent at any time without affecting the lawfulness of processing done before.
Your rights under GDPR
You have the right to:
- Access your data (Article 15)
- Rectify inaccurate data (Article 16)
- Erase your data — "right to be forgotten" (Article 17)
- Restrict processing (Article 18)
- Portability — receive your data in a portable format (Article 20)
- Object to processing based on legitimate interests, including profiling (Article 21)
- Object to direct marketing at any time (Article 21(2))
- Not be subject to fully automated decisions with legal or similarly significant effects (Article 22) — we don't do this
To exercise any right, email legal@smart-it.io. We respond within 30 days.
Right to complain
You can lodge a complaint with your local Data Protection Authority. Find yours at edpb.europa.eu.
International transfers from the EEA
We (the controller) are based in the United States (Wyoming). When you give us your data, it is transferred to and processed in the United States, where most of our service providers are also based. For transfers from the EEA to the United States, we rely on the European Commission's Standard Contractual Clauses (SCCs) with our service providers, plus additional safeguards (encryption, access controls). Copies are available on request.
Data retention
As described in the main Privacy Policy: email and name up to 3 years; technical and usage data up to 26 months.
Special categories of data
In the standard Wave 1 flow, we do not collect special category data (health data, biometric data, etc.) directly. However, because Karaway relates to digestive symptom and GLP-1 side-effect tracking, your interaction with the site may reveal interest in health-related topics. We do not use such inferences for advertising or ad targeting, and we do not create special-category profiles based on this activity. If we later add functionality that collects special-category data directly (such as a health-symptoms quiz), we will obtain explicit consent under Article 9(2)(a) and publish a dedicated privacy layer for that flow.
Contact
Email: legal@smart-it.io · Mail: Smart IT US Inc., 30 N Gould St Ste R, Sheridan, Wyoming 82801, USA
Effective Date · June 3, 2026
California Privacy Rights (CCPA)
If you live in California, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you additional rights about your personal information.
Rights you have
As a California resident, you can:
- Know what categories of personal information we've collected about you, the sources we got it from, what we use it for, and who we share it with
- Access the specific pieces of personal information we hold about you (subject to verification)
- Delete personal information we've collected from you (with certain exceptions, such as legal obligations)
- Correct inaccurate personal information
- Opt out of "sale" or "sharing" of your personal information (more below)
- Limit use of sensitive personal information to what's necessary
- Non-discrimination — we can't deny service, charge you more, or give you a worse experience for using these rights
You can also designate an authorized agent to make a request on your behalf.
Categories of personal information we collect
In the last 12 months, we have collected the following categories of personal information from California residents:
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Identifiers | First name, email address, IP address, device ID | Directly from you, via cookies and analytics | Communication, marketing, analytics |
| Internet activity | Pages viewed, links clicked, time on site | Via cookies and analytics | Site improvement, advertising |
| Inferences | Interest in digestive symptom and GLP-1 side-effect tracking based on your behavior | Derived from your activity | Marketing, audience research |
We do not collect government identifiers (SSN, driver's license), biometric data, precise geolocation, or financial account numbers on karaway.health.
Do we "sell" or "share" your information?
Under CCPA, "sale" and "sharing" include sending personal information to third parties for advertising purposes — even if no money changes hands. Yes — we share your information for advertising purposes, primarily by using cookies from Meta and Google to show you relevant ads and measure their performance. This counts as "sharing" under CCPA. We do not sell your personal information for money to data brokers.
How to exercise your rights
Opt out of sharing for advertising: Click "Do Not Sell or Share My Personal Information" in the site footer, or use "Cookie settings" to reject advertising cookies. We also honor the Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a valid request to opt out of the "sale"/"sharing" of your personal information for that browser.
Any other request (access, delete, correct, limit, etc.): Email legal@smart-it.io with the request. Include enough information for us to verify it's you (typically the email address you used to sign up). We'll respond within 45 days. If we need more time, we'll let you know.
Authorized agents: If you're submitting on someone else's behalf, include a signed permission letter or power of attorney.
Sensitive personal information
In the standard Wave 1 flow, we do not ask you to provide detailed health information such as symptoms, diagnoses, medications, or treatment history. However, because Karaway relates to digestive symptom and GLP-1 side-effect tracking, your interaction with the site (which ads you click, which pages you visit, which pricing or feature pages you view) may reveal or imply an interest in health-related topics. We treat this context carefully. We do not use detailed health information or health-related inferences for advertising or ad targeting, and we do not build advertising audiences based on health interest categories. Our advertising pixels are used only for aggregate conversion measurement of our ad campaigns — we do not retarget visitors to this site, and we do not create lookalike or custom audiences from our visitors or waitlist.
Notice at collection
This Addendum, combined with our Privacy Policy, serves as the notice at collection required by CCPA. We provide it before or at the point we collect your information.
Contact
Email: legal@smart-it.io · Mail: Smart IT US Inc., 30 N Gould St Ste R, Sheridan, Wyoming 82801, USA
Effective Date · June 3, 2026
UK Data Protection Notice
If you're in the United Kingdom, your rights are governed by the UK Data Protection Act 2018 and the UK GDPR — these are substantially the same as EU GDPR. The GDPR summary applies, with the following UK-specific points.
UK-specific points
- Supervisory authority: The Information Commissioner's Office (ICO). Complaints: ico.org.uk/make-a-complaint/
- International transfers from UK: We rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs.
- Contact us the same way: legal@smart-it.io
We don't currently have a UK representative under UK GDPR Article 27. We do not currently target Karaway to individuals in the UK. If our activities change such that a UK representative under Article 27 is required, we will update this notice.
Your rights
Your rights under UK GDPR mirror those under EU GDPR: Access · Correct · Erase · Restrict · Object · Portability · Withdraw consent · Lodge a complaint with the ICO. Email legal@smart-it.io to exercise any right. We respond within one month.
Full GDPR Notice
For the full legal basis breakdown, data retention, sensitive data handling, and international transfer safeguards, see our GDPR Notice — the same framework applies to UK residents.
Contact
Email: legal@smart-it.io · ICO complaints: ico.org.uk/make-a-complaint/