Privacy Policy

What stays on your phone

The diary, your weight, your plan, measurements, body progress photos and settings are kept by the app on your phone. Body progress photos are never sent anywhere and are not part of the backup. Photos you show the coach are kept on the phone only.

What is kept on our server

• An anonymous account: a random identifier, a fingerprint (HMAC) of your phone's identifier — so your data comes back after a reinstall — the phone model, the app version, and the dates it was created and last used. We never ask for a name, an e-mail or a phone number. The access token is kept only as a hash.
• A backup of the app's data (diary, weight, measurements, settings, your conversation with the coach and what the coach remembers about you), for as long as synchronisation is on. You can turn it off and erase it from the server in Profile → Privacy and data.
• A log of AI requests: the time, the kind of request, the model, the number of tokens, the cost, and — if the request failed — the provider's error text. It is what the plan's daily limits are counted from. The photos, the voice, the text of the requests and the answers themselves are not stored.
• Your ratings of the coach's answers (👍 / 👎, the reasons and a comment if you add them) — to make the coach better. The text of the question and the answer only if you tick that in the feedback yourself; your entries and photos never go with it.
• Your subscription: the App Store transaction identifier, the product, the plan, the expiry date and whether auto-renewal is on — so the plan you paid for works. We never see your payment details: Apple takes the payment.
• Usage events: which plan screens were opened, purchases, limits reached — so we know what in the app works. The app sends them to our own server only, never to third parties; they are kept for 180 days.
• Invitations: if you came through a referral link, we remember whose code it was — to credit the Pro days to both of you.
• Your IP address is used only to limit how many accounts can be created from one address per hour. It lives in the server's memory and is never written to the database.

AI

When you recognise a photo of a meal or a nutrition label, speak an entry, or ask the coach, the request goes through our server to the model provider — OpenAI (USA) or DeepSeek (China). Only what is needed for the answer is sent: the photo, the voice or the text, and for the coach a summary of your entries. No name, no contact details. The provider processes the request under its own terms; data protection in those countries may be weaker than in the EU.

What we do not do

• We show no ads and embed no third-party analytics or trackers.
• We do not sell your data and pass it to nobody except the AI provider for your request and Apple for the payment.
• We do not profile you and take no automated decisions with legal consequences.

How long it is kept

The backup and the account live as long as you use the app. The log of AI requests stays in the account's history — it is needed for the limits and for our own accounting. The database is dumped into a backup on the same server once a day; dumps older than two weeks are deleted, so erased data disappears from them within that time.

How to erase it

• Turn synchronisation off (Profile → Privacy and data) — the server stops receiving new data.
• Erase the data from the server — the server copy of the diary, weight and settings and your ratings of the coach's answers are deleted at once. The account, the plan and the AI log stay, so the app and the subscription keep working; the data on the phone itself is untouched.
• Export everything to a file — in the same place, if you want to take your data with you.
• Delete the account entirely — on request: write to us and we erase the account, the bond to the phone, the backup, your coach ratings and the subscription record. The AI log rows stay behind with no link to an account, as anonymous cost figures.
• A subscription is cancelled in your Apple ID settings — deleting the account does not cancel it.

Your rights

We process this data to perform our contract with you (so that synchronisation and the plan's limits work) and on our legitimate interest in keeping the service up and unabused. If you are in the EU, the EEA or the UK, you have the rights of access, rectification, erasure, data portability and objection, and you may complain to your data protection authority. Most of these are buttons in the app (above); the rest we do on request.