Waitlist privacy notice

How CarnAIvore handles what you give us when you join the waitlist and, if you choose, answer our optional questions. See our website privacy notice. The app policies are published: App privacy, App health data and App terms.

Effective October 28, 2026. Earlier version: October 26, 2026. This version adds a separate consent choice for sharing optional answers and a standalone waitlist consumer health data policy; the purpose stays the same. "We" and "CarnAIvore" mean CarnAIvore LLC.

In short

• We ask for your email address and that you're 18 or older. Everything else is optional.
• When you press Join the waitlist, we hold your submission privately for up to 7 days while you confirm your email. Unconfirmed submissions are never counted as members, exported or emailed again.
• You can unsubscribe in one step from any email we send after you confirm, and ask us to delete everything at any time.
• We don't sell your information, give it to advertisers or use it to train AI models.
• The website sets no cookies and runs no analytics, advertising pixels or other trackers. If you choose a theme or motion setting, we save that choice only in your browser (localStorage), so it can be remembered here. Those choices are not sent to us. Your answers are never saved in browser storage. Our emails don't track opens or clicks.

Who we are

CarnAIvore LLC, 1209 Mountain Road Pl NE #13707, Albuquerque, NM 87110, USA. Questions about this notice or your information: support@carnaivore.ai.

What we collect, why, and for how long

We don't ask about your health conditions, your body or what you eat, and we don't need those details. We don't buy information about you or combine what you give us with information from other sources. We keep no logs of visits to the website.

Before you confirm

Nothing leaves this page until you press Join the waitlist. Then our server at Fly.io keeps a pending submission: your email address, that you confirmed you're 18 or older, whether you chose Building news, whether you asked to be considered for the private beta, the name of the link that brought you, and your optional answers only if you ticked both separate consent boxes. It also keeps the date and time you submitted, the expiry time, the confirmation status, a one-way hash of a random confirmation code, and a one-way hash of your email address to prevent repeat confirmation emails. These hashes cannot be read back into the original code or address, though an address can be checked against its hash. The email link contains the random code, not your address or answers. To keep out automated spam, the form also sends how long the page was open. We use that number only for this check and don't keep it. Sign-ups that look automated are discarded and get no email.

The link stops working after 7 days. We delete expired submissions at startup, daily while the server is running, and before accessing pending submissions; if the server is asleep, cleanup happens before it accepts another request. Pending submissions never enter the contact list at Resend, exports, membership counts or answer analysis. Resend receives only your address and the confirmation email until you confirm. We send no reminder or other follow-up to an unconfirmed address.

When you press Confirm, the consented submission joins the list at Resend and our server deletes its address, email-address hash and answers. Until the original 7-day expiry it keeps only the code's one-way hash, the submission and expiry times and confirmation status (a consumed receipt, whether confirmation succeeded or an existing unsubscribe blocked it), so replaying the link cannot change your preferences or undo an unsubscribe. The server's pending database is private, separate from the public website files. Our host keeps daily copies of this server's data for up to 5 days; deleted information leaves those copies within that time.

How we use it

• To confirm your address: one email with a Confirm button. If you don't press it, the link stops working after 7 days and your pending submission is deleted as described above.
• Announcements: when CarnAIvore is ready to download, and major news about it after that. We expect a few a year.
• Building news, only if you ask for it: progress and updates on CarnAIvore, at most once a week. If you previously agreed to monthly news, that monthly limit continues unless you separately agree to weekly news.
• Private beta, only if you ask: if you tick "I'd like to be considered for the private beta", we may use your answers to choose people to invite, and email you an invitation with Apple's TestFlight link. Joining is your choice; you install TestFlight with your own Apple Account, and Apple's privacy policy covers TestFlight.
• Founding members: the first 5,000 people to confirm hear first, on launch day, before we announce CarnAIvore publicly. The waitlist stays open after that. This is about who hears first; it doesn't reserve any price.
• Your answers: we read them to decide what to build and how to explain it. We may share overall findings, such as "most people asked for X", but never your words or anything that identifies you.
• Counting: totals only, such as how many people joined from each link.

We will never:

• sell your information, or share it for cross-context behavioral advertising, as California law defines those terms;
• give or upload your address or answers to Meta, Google or any other advertiser, including for "custom audiences" or "lookalike" targeting;
• use your answers or address to train AI models, or let anyone else do so;
• try to connect your waitlist details with records in the CarnAIvore app;
• use your information in a new way without asking you first (see "Changes").

Your answers and health privacy laws

Optional answers may reveal health information. We treat all answers as consumer health data. Read the separate waitlist consumer health data privacy policy for the categories, sources, uses, recipients and rights. You can join without answering. Earlier answers given under consent version answers-v2-pending-7-days (“to plan the app”) keep that purpose; answers-v3-improve-carnaivore agreed to help improve CarnAIvore. New answers use answers-v4-collect-and-share and require separate choices for collection and sharing.

Who else receives it

• Resend, Inc., our email service in the United States, stores the list and your answers and sends our emails. It acts on our instructions and may not use your information for its own purposes.
• Fly.io, our website host, holds your pending submission privately for up to 7 days before confirmation, as described above. After confirmation it passes your consented submission to Resend and deletes its copy of your address and answers.
• AI tools, only for answers given under the new separate sharing consent, to help us read and summarise them. We use them only under terms that prevent the provider from using the answers for its own purposes or training its models. Older answers are not sent to AI tools unless you give new permission.
• People working on CarnAIvore, only as needed for the purposes above.
• Authorities, if the law requires it, for example a valid court order.
• A new owner, if CarnAIvore LLC is sold or merged. The new owner must keep the promises in this notice, and we'll email you beforehand so you can unsubscribe or ask us to delete your information first.

No one else.

How long we keep it

• Until you unsubscribe or ask us to delete it.
• After you unsubscribe, we stop emailing you at once, and within 30 days we delete everything except your email address and the fact that you unsubscribed. We keep those on a do-not-email list so we never write to you again by mistake. Ask us and we'll delete the address too.
• If you never press Confirm, your pending submission expires after 7 days and is deleted as described in "Before you confirm". You are never counted, exported or contacted again.
• If CarnAIvore closes, we delete the list.

Your choices and rights

• Unsubscribe in one step from the link in any email we send after you confirm. The same link lets you turn Building news on or off.
• See, correct, get a copy of or delete your information, or withdraw consent for your answers: write to support@carnaivore.ai from the address you signed up with. If you write from another address, we'll check with the signed-up address first. We'll answer within 45 days, usually much sooner. If we need longer, we'll tell you why within those 45 days.
• Someone acting for you, a person or an AI agent, can make these requests; we'll confirm with you at the signed-up address before acting.
• Appeal: if we decline a request, reply to our answer to appeal, and we'll respond within 45 days. If you're still not satisfied, you can contact your state's attorney general.
• Making a request costs nothing and won't change how we treat you.
• We honour Global Privacy Control signals, though because we don't sell or share your information, there's nothing for them to switch off.

Security

Pages, forms and our connection to Resend are encrypted (HTTPS). Confirmation links use unguessable random codes and expire after 7 days. Only people working on CarnAIvore can reach the list. We keep strengthening these protections as CarnAIvore grows. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

Under 18

The waitlist is for adults. If you're under 18, please don't join. If we learn that someone under 18 has joined, we delete their information.

Changes

We'll post any change here with a new effective date. Before using your information in a new way or sharing it with a new kind of recipient, we'll email you first, and for your answers we'll ask for your consent again.