Privacy Policy

Information the App processes

• Account. The App creates an anonymous account on first launch. If you choose to sign in with your email address (via a one-time sign-in link), we store that email to sync your data across devices.
• Profile and goals. Age, sex, height, weight, activity level and weight goal you enter, used to calculate your daily calorie and macro targets.
• Meal photos. Photos you take of your meals are sent to our server, analysed by OpenAI’s model to estimate nutrition, and saved in cloud storage under a random, unguessable file name so they can be shown in your food log. OpenAI does not use API data to train its models.
• Food, water and weight logs. Your logged meals, nutrition values, water intake and weight history are stored in your account.
• AI chat. Messages you send to the built-in AI nutritionist, together with your daily targets and today’s log, are sent to OpenAI to generate a reply and are kept in your chat history.
• Barcodes. Scanned barcode numbers are looked up in the public Open Food Facts database. No personal data is sent with them.

Device permissions

The App asks for access only when a feature needs it. You can change these permissions at any time in iOS Settings; related features will stop working without them.

• Camera — to photograph meals and scan barcodes.
• Photos — only the image you pick in the system photo picker is shared with the App.

How we use information

• Provide the App’s features you request
• Keep the App reliable: diagnose crashes and fix bugs
• Understand, in aggregate, how features are used so we can improve them
• Process purchases and restore subscriptions
• Reply to your support requests

We do not sell your personal information and do not use it for purposes unrelated to the App.

Third-party services

We rely on the following providers. They process data on our behalf under their own privacy policies:

• Google Firebase (Authentication, Firestore, Cloud Functions, Storage) — sign-in, storing your account, logs and meal photos, and running our server logic. Policy
• OpenAI — analysing meal photos, AI chat and recommendations. Policy
• Open Food Facts — product lookup by barcode. Policy
• Apphud — processing and validating in-app purchases and subscriptions; receives purchase receipts and an app-specific device identifier (IDFV). Policy

Tracking and advertising

The App does not track you across apps and websites owned by other companies and does not access your device’s advertising identifier (IDFA).

Purchases and subscriptions

Payments are processed by Apple through the App Store. We never see or store your payment card details. We receive only the information needed to confirm your purchase or subscription status. Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current period; manage or cancel them in Settings → [your name] → Subscriptions.

Account and deletion

If you create an account, we store the identifier provided by your sign-in method (Apple, Google or email) to keep your content and purchases linked to you. Deleting your account in the App removes your profile, food, water and weight logs and chat history. To also remove your stored meal photos, email us from the address linked to your account (or include your user ID from Settings) and we will delete them within 30 days.

Health information

Health-related information in the App is for general wellness and informational purposes only and is not medical advice. It is used only to provide the App’s features, is never used for advertising and is never sold.

Data retention

Data stored on your device stays there until you delete it or remove the App. Data processed on servers is kept only as long as needed for the purpose described above, then deleted or anonymized; diagnostic and analytics data is retained according to the providers’ standard retention periods.

Children

The App is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Your rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, delete or export your personal information, to object to or restrict its processing, and to withdraw consent. To exercise any of these rights, email us — we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Security

We use industry-standard measures, including encryption in transit (HTTPS), to protect information. No method of transmission or storage is 100% secure, but we work to protect your data and limit access to it.

International transfers

Our service providers may process data in countries other than yours, including the United States. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it was last changed. Significant changes will be communicated in the App or on this page.

Contact

Questions about this policy or your data: hanna.musicai.box@gmail.com
Hanna Freitag