Privacy policy

Draft, not yet reviewed. Effective date: TODO(owner): set the date this policy takes effect.

The short version

• Your food log, test results and rules are stored on your iPhone in an encrypted database and synced to your BellyLogic account.
• When you use an AI helper, what you give it (a photo, a description or an ingredient list) is sent to an AI service to be read or explained. Nothing is sent to the AI unless you ask.
• A few other things reach our server as you use the app: the words you search for, ingredient look-ups, reports you send, and a note when you open the app. Each is described below.
• We do not sell your data. We do not show ads. This website sets no cookies and uses no trackers.
• You can delete your account, and everything in it, from inside the app.

What the app stores

BellyLogic keeps the things you put into it:

• Your food log: the meals you record and when you ate them.
• Your reactions: the symptoms you log and when.
• Your tests and results: which food groups you tested, the doses, and the outcome of each.
• Your rules and settings: the food groups and ingredients you have marked as safe, limited or off-limits.

Where it is stored

Your food log, reactions, tests, results and rules are kept on your iPhone in an encrypted database, and the food log works offline. They are also synced to your BellyLogic account, so they are there if you change phones. You sign in to that account with your email address: we send you a sign-in link, and we store no password. The account’s data is hosted by Supabase in the United States (Virginia, AWS us-east-1), encrypted in transit and at rest.

What we do not keep

When the app suggests calorie targets, it asks once for your sex, birth year, height and activity to work out a starting point. These are not stored on your phone or in your account. We keep only your aim (keep, lose or gain), your pace, whether the weekly check is on, and whether you are an adult.

What leaves your phone

The AI helpers

Three parts of the app use an AI service: the AI food analyzer, the AI label reader, and “Questions about your results”. They are optional. When you use one, the app sends what you gave it so it can be read or explained:

• For the label reader, the photo of the label, which comes back as an ingredient list.
• For the food analyzer, your description or photo of the food, which comes back as an estimate of ingredients and portion.
• For “Questions about your results”, the results you ask about and your question, which come back as a plain-words explanation.

Ingredient lists may also be sent so they can be read or explained. The AI only supplies information; the verdict for a food always comes from fixed rules and your own settings on your device. TODO(owner): name the AI service provider, link to its privacy terms, and say whether it keeps the data sent to it or uses it for training.

When you open the app

The app tells our server when it was opened after a break of 20 minutes or more, along with the app version, build number and iOS version. We use this to count sessions and see how the app is used. It contains nothing about your food, symptoms or results, and it is deleted with your account.

Ingredient look-ups

When you open a food that has no ingredient list, the app may ask our server to look up that food’s ingredient list on the manufacturer’s or a retailer’s website. Only the food’s name, brand and barcode are used, never anything about you. The result is stored for everyone who opens that food. You are not asked first, and the look-up can be switched off in Settings. TODO(owner): confirm there is such a switch, or remove this clause.

Food searches

Typing in search sends the words you type to our server to find foods. We count searches that found little (“missed searches”) without recording who made them, so we know which foods to add.

Reports you send

When you add an ingredient to a food, report a problem or ask for a food to be added, that report is sent to us so the owner can correct the food for everyone. A short code that is the same for the same person, and that says nothing about them, lets us count how many different people reported the same thing. Your name and email are never attached.

Restaurant menus

Restaurant menu data comes from each chain’s own published nutrition guide. TODO(owner): say whether menu data is bundled with the app or fetched from a BellyLogic server, and what, if anything, is sent in that request.

Nothing else

The app has no advertising, no analytics from advertisers, and no social media plug-ins. TODO(owner): state whether the app collects crash reports or usage analytics, and if so with which service and whether it can be turned off.

What we never do

• We do not sell your data, and we do not share it with advertisers or data brokers.
• We do not use your food log, reactions or results for anything other than running the app for you.
• We do not read your data unless you ask us to help with a problem and give us permission.

This website

bellylogic.com is a set of plain pages. It sets no cookies, runs no scripts, and uses no analytics or trackers. The fonts and images are served from this site, not from a third party. TODO(owner): confirm what the hosting provider logs (Cloudflare Pages keeps standard request logs) and for how long.

Deleting your account and data

“Delete all my data” in Settings removes your account and everything in it: your food log, reactions, tests, results, rules and your session records. Deleting the app from your phone removes the copy stored on the device. TODO(owner): say how long deletion takes to complete and whether backups are kept for a period afterwards.

If you can no longer open the app, email support@bellylogic.com from the address you signed up with and we will delete the account for you.

How long we keep data

Your data stays in your account until you delete it. TODO(owner): state the retention period for accounts that are inactive, for data sent to the AI service, and for support emails.

Children

TODO(owner): state the minimum age for using the app and whether any data is knowingly collected from children.

Your rights

You can see everything the app holds about you by opening it, and you can delete it as described above.

US privacy laws

We do not sell personal information, and we do not share it for advertising. If you live in Washington, Nevada, California or another state with a consumer health data or privacy law, you can ask us to access, correct or delete your data by emailing support@bellylogic.com, or delete it yourself with “Delete all my data” in Settings. TODO(owner): a lawyer should review this section before public launch.

Changes to this policy

If this policy changes, we will update this page and the effective date at the top. TODO(owner): say how users will be told of material changes, for example a notice in the app.

Contact

Questions about privacy go to support@bellylogic.com.

TODO(owner): add the legal name and postal address of the company or person responsible for the app.