Privacy Policy

Firebase usage measurement

We use Google Analytics for Firebase (GA4) to understand where onboarding is difficult, which subscription steps succeed or fail, and whether food logging works reliably. Measurement is enabled by default in both current apps and can be turned off in Settings, as described in “Your measurement choice.”

What the events contain

• Onboarding: screen identifiers, screen order, forward and back navigation, time spent actively viewing a screen, and bounded validation or save-failure categories.
• Onboarding answers: when you complete an onboarding step, the event can include the option you chose for that step: your primary goal and desired outcome, activity level, whether you want to lose, maintain or gain weight, how ready you feel, your diet preference (for example balanced, vegetarian or vegan), and whether you chose to connect Apple Health, use exercise credit, calorie rollover or reminders. Your goal direction may also be stored as a user property. Body measurements, birth year and gender are not sent.
• Permissions and features: whether you allowed or declined camera, microphone, Health or notification permission when asked, which app features you use, when a free-plan limit is reached, and bounded categories of errors shown to you.
• Subscriptions: offer loading, paywall views, selected product or package identifiers, checkout, cancellation, failure, confirmed purchase or trial outcomes, and restore results. A trial preview or purchase-button tap is not recorded as a confirmed trial.
• Food-logging reliability: the selected logging method, capture and analysis starts, completion, retries, cancellation, failure categories, processing time, review/edit actions, and whether a meal was successfully saved. Saving your first new food entry can produce a first-use milestone.
• Technical context: app and operating-system information, device information, language, timestamps, and a Firebase app-instance identifier. Google Analytics may also derive approximate location, such as country or city, from the network IP address; the app does not request GPS location for analytics. Event, onboarding-journey, screen-visit and operation identifiers help associate related actions and avoid counting duplicates.

Events are associated with a Firebase app-instance identifier and with the anonymous app user ID generated for purchases by RevenueCat, which we set as the Firebase user ID so subscription and app events can be connected. This is identifier-based, pseudonymous information, not fully anonymous data. It can distinguish an app installation or a sequence of interactions without including your name or email address; the apps have no account or sign-in.

What our analytics events do not contain

We do not include your body measurements, birth year, gender, Health records, meal contents, photographs, barcodes, voice transcripts, food descriptions, search text, AI prompts or raw error messages in these event payloads. We use limited error categories rather than the content that caused an error. These events are not used for advertising, and advertising audiences are not built from nutrition, body goals, diet preferences or Health information.

Your measurement choice

Usage measurement is on by default. You can turn it off at any time: in the iOS app under Settings → Privacy → Usage measurement, and in the Android app under Settings → Share usage analytics. Turning it off does not limit any app feature. If you turned measurement off in an earlier version, that choice is kept after you update.

Successfully saving an off choice stops Firebase Analytics collection, resets the local analytics identity and removes the Firebase identifier association supplied to RevenueCat. It does not erase your diary or cancel your subscription. If a settings change cannot be saved, the app displays an error and the previously saved choice remains in effect; retry until the off choice is saved. You can turn measurement back on in the same place.

Turning measurement off does not automatically delete information already received by service providers or purchase records needed to manage a subscription. You can contact us with an access or deletion request using the address below.

Advertising identifiers and version differences

The current iOS app does not request App Tracking Transparency (ATT) permission, collect the Identifier for Advertisers (IDFA), or enable Apple Ads attribution-token collection; Firebase’s collection of the Identifier for Vendors (IDFV) is also disabled. The current Android app does not collect the Android Advertising ID: the advertising-ID permissions are removed from the app and Firebase advertising-ID collection is disabled. In both apps, advertising storage, advertising user data and ad personalization are always denied, even if you authorized ATT in an older version.

Older versions: earlier app versions may have used the Android Advertising ID (AAID), or IDFA on iOS with ATT permission, for campaign measurement, and may have asked for measurement consent differently. Updating this policy does not change the behavior of an older installed binary; updating the app applies the practices described here.

Purchases and RevenueCat

Apple handles payment for purchases in the iOS app; Google Play handles purchases in the Android app. RevenueCat helps the app retrieve products, validate purchase status, restore purchases and determine subscription access. This involves an anonymous app-user identifier, store transaction information, product identifiers, subscription status and technical device/app information processed by the purchase SDK. The app does not receive your full payment-card details.

When usage measurement is on, we associate the Firebase app-instance identifier with RevenueCat so subscription lifecycle events, such as renewals, cancellation, expiry or billing issues, may be reported through a RevenueCat-to-Firebase integration where it is enabled. This association does not mean every lifecycle event is necessarily delivered. Withdrawal requests removal of the association for future reporting; processing by RevenueCat can depend on network availability and does not recall events already sent. It does not delete essential RevenueCat or store purchase records. Subscription access and restore functionality continue to operate without optional usage measurement.

See RevenueCat’s Privacy Policy.

Your diary, photos and local storage

Both apps store your onboarding answers, body measurements, goals, nutrition targets, diary, saved foods, exercise, preferences and subscription-access cache on your device. These are used to calculate and display your plan and tracking history. The apps do not provide an account or cloud diary sync service.

The Android app can export your food diary as a CSV file when you choose to. The file is created on your device and shared only with the app or person you select in the system share sheet.

Food photographs and unfinished text or voice-transcript drafts can also be saved locally so you can return to a logging task. Cancelling analysis does not necessarily discard its draft. A saved meal may retain its photograph and analysis-derived ingredients and nutrition. The app does not save a standalone voice recording for the diary.

When upgrading from the earlier Flutter app, the native app can retain the original diary, preferences, photographs and recovery copies on your device to protect against migration failure. Local app data may also be included in device or computer backups, depending on your Apple settings. Local storage does not mean that a photo or description you submit for online analysis stays only on your device.

Food analysis, search and voice input

AI food and label analysis

When you request analysis, the app sends the selected food or label image and/or food description, portion information and requested output language to Google’s Gemini Developer API through Firebase AI Logic. Google processes this input to return estimated ingredients and nutrition. The app does not send your complete diary, body profile or Apple Health history with that request. An image or description may itself reveal personal information, so include only what you want analyzed.

Our Firebase project currently uses an active billing account. Under Google’s paid-service terms, submitted prompts and responses are not used to improve Google’s products. This is not a zero-retention promise: Google’s published abuse-monitoring policy describes retention of prompts, context and responses for 55 days and possible authorized human review of flagged content. Other operational records are subject to Google’s terms. See Firebase AI data governance, Gemini API terms and abuse-monitoring information.

These feature inputs are separate from Firebase Analytics events. Turning off usage measurement does not prevent processing needed for analysis you request. Manual food entry remains available without submitting a photo or description to AI.

Food search and barcodes

Food search sends your search text to USDA FoodData Central. Barcode lookup sends the product’s barcode to Open Food Facts; barcode recognition from a selected image is performed on the device before the lookup. These providers receive normal network request information, including the connecting IP address. Search terms and barcodes are excluded from our analytics event payloads, but are required by the lookup provider. See USDA’s Privacy Policy and Open Food Facts’ Privacy Policy.

Voice descriptions and photos

On iOS, voice input requests microphone and Apple speech-recognition access. Depending on device, language and service availability, audio may be processed by Apple’s servers; the app does not require transcription to stay on-device. You can review the resulting text before submitting it to Google for food analysis. Apple’s handling is described in Siri, Dictation & Privacy.

On Android, voice input requests microphone access and uses the device’s speech-recognition service, which is typically provided by Google; audio may be processed on Google’s servers depending on your device and language settings. You can review the resulting text before submitting it for food analysis.

The camera is used when you choose to capture a meal or label. The system photo picker gives the app the images you select, rather than blanket access to your photo library. You can manage camera, microphone and speech permissions in your device settings. Analytics settings do not grant any of these permissions.

Apple Health

With the access you choose to grant, the app reads workouts and active energy to display activity and calculate eligible exercise credit. Imported activity and Health record identifiers are stored locally for history, synchronization and duplicate prevention.

Separate sharing controls let the app write workouts, active energy and nutrition to Apple Health. Nutrition can include calories, protein, carbohydrates, fat, fiber and sugar. Existing food history is not automatically exported merely because you enable sharing. Updates and deletions target records owned by this app; disabling sharing does not automatically erase records already written to Health.

We do not send Health records to Firebase Analytics or Gemini food analysis, or use Health information for advertising. You can change the app’s sharing preferences in Settings → Apple Health and manage permission or previously shared records in Apple’s Health app. Health data and any Apple-managed synchronization remain subject to your Apple settings.

The current Android app does not connect to Health Connect or other health platforms.

Widgets and notifications

To show widgets, the app writes a summary to a shared on-device container accessible to its widget extension. This can include calories, macro totals and goals, exercise and rollover credit, meal counts, weekly logging progress, time zone, widget preferences and subscription-access status. Widgets may make these summaries visible on your Home Screen or Lock Screen. Widget settings include an option to hide exact values; this changes display, not deletion of the underlying summary. The Android app’s home-screen widgets similarly read a summary stored on your device. You can remove widgets at any time.

With notification permission, the app can schedule a local reminder before a confirmed future subscription renewal or trial expiry. iOS holds and displays the reminder; the app does not need to upload your diary to send it. Reminder text may appear on your Lock Screen according to your notification settings. Permission or a reminder is not a purchase and does not start a trial.

Operational services and support

Firebase App Check uses app/device attestation — Apple App Attest or DeviceCheck on iOS, and Google Play Integrity on Android — and security tokens to protect backend requests such as food analysis. Firebase Remote Config uses installation identifiers and technical app information to supply configuration, such as feature availability, AI model and daily analysis limits. These services operate independently of usage measurement and continue when measurement is off. The apps do not include a crash-reporting SDK; on-device diagnostic logs can record technical outcomes and bounded error categories.

Turning off usage measurement does not disable requested food analysis, database lookups, subscription verification or these operational services. Providers necessarily process network information to handle requests. See Firebase privacy and security and Google’s Privacy Policy.

If you contact us, we receive the email address and information you choose to include. Please avoid sending sensitive diary or Health information unless necessary for your request.

Retention and privacy requests

On your device: diary records and preferences remain until changed or removed. You can edit or delete entries using the app. Deleting a diary entry does not currently guarantee deletion of associated image files, saved-food copies, old migration data or recovery copies. The native app does not currently have a single in-app control that erases every retained local copy. Contact us for help with a complete local-data removal request. Offloading the app keeps its data; removal of device backups and Health records is managed separately through Apple’s controls.

At service providers: Analytics retention depends on the configured Google Analytics settings and any retained reporting exports; withdrawing consent or resetting an identifier does not automatically erase previously received data. Subscription records follow RevenueCat’s and the store’s retention requirements, including transaction, fraud-prevention and legal needs. AI retention is described above. We do not promise a single fixed deletion period across these different systems.

To request access, correction or deletion, or ask about retention for a specific record, email anmolsoftwaredeveloper@gmail.com. We may need information to locate records and verify your request. We cannot remotely retrieve a diary that exists only on your device. Where applicable, you may also request portability or restriction, object to processing, withdraw consent, or complain to your local data-protection authority. Some records may need to be retained for legal obligations; we will explain applicable limits when responding.

Service providers, websites and security

We use service providers to operate app features, manage subscriptions, secure requests, provide support and, unless you turn it off, measure usage. Providers may process information outside your country under their applicable terms and privacy arrangements.

This privacy-policy page does not include our own analytics scripts or advertising cookies. Its host, Vercel, may process ordinary request information to serve and secure the page. Linked websites have their own privacy and cookie policies. See Vercel’s Privacy Policy.

We use reasonable measures to protect information, but no method of transmission or electronic storage is completely secure.

Children’s privacy

The current iOS and Android apps and their AI features are intended for adults aged 18 or over; onboarding in both apps applies an adult age check. They are not directed to children. If you believe a child has provided personal information, please contact us so we can investigate and address the request.