Collected
Account and profile details, food and nutrition entries, optional Apple Health data, user-requested inference photos, community content, support messages, security signals, interactions, diagnostics, and ad-processing data. Previously recorded wellness-safety signals are deleted at expiry; no new signals are recorded.
Apple Health is optional. Depending on the installed version, BiteBuddy reads active or resting energy, steps, workouts, weight, and height only after permission. It does not write to Apple Health, sell these values, or use them for ads. Health data may be stored in your BiteBuddy account; removing iOS permission stops future access. The upcoming app disconnect control also removes saved raw snapshots while retaining historical profile and weight entries that may include manual edits.
Used for
App functionality, estimates, personal daily targets, Battle scoring, account security, moderation, support, fraud prevention, opt-in rewarded ads, and post-log scan interstitials. Health and nutrition data, and any historical wellness-safety data, are not placed in analytics or advertising payloads.
Shared carefully
Only with processors needed for hosting, AI inference, user-requested support, and advertising. Historical private inferred eating or weight patterns are not sent to moderators, advertisers, analytics providers, opponents, or other users. Scan interstitials may follow each AI plate log and every other successfully logged matched barcode; manual entries are ad-free.
Protected
TLS in transit, least-privilege authorization, secure mobile storage, signed uploads, fraud-detection signals, replay protection, rate limits, access-controlled safety records, and append-only audit trails.
Deleted
The app attempts to remove temporary camera and prepared-image files after inference; cleanup can fail after an interruption. BiteBuddy doesn’t store the photo in its database or file storage. Google’s published policy says it keeps submitted content for 55 days for abuse monitoring. Previously recorded wellness-safety signals are deleted at expiry; no new signals are recorded. Historical Safe Mode transition audit records may be retained for up to two years, then deleted or irreversibly anonymized unless a legal hold applies. We request deletion from applicable service providers; separate retention and narrow legal or integrity exceptions may apply.
Your control
Correct estimates, manage consent and open ad privacy options when required, report or block users, hide or delete your content, appeal content decisions, request access to your data, and delete your account. Automatic check-ins and Safe Mode pauses are not currently active, and BiteBuddy is not recording wellness-safety signals.