Privacy Policy

This Privacy Policy explains how debloat ("debloat", "we", "us", or "our") collects, uses, and protects information when you use the debloat mobile app and this website (together, the "Service"). By using the Service, you agree to the practices described here.

1. Information stored only on your device

Most of what debloat knows about you never leaves your phone. The following is stored locally on your device and is not transmitted to or stored on our servers:

• Your logged meals and their history
• Your daily debloat scores and score history
• Water, sleep, and stress entries you log manually
• Your onboarding answers, including any personal food sensitivities or triggers (for example, lactose or gluten) and your diet style
• Your streak and in-app preferences
• Apple Health data read by the app (see Section 4)

This information remains on your device until you delete it, delete your account, or remove the app. We cannot access it.

2. Information you provide to us

Account information

debloat uses Sign in with Apple to create your account. When you sign in, Apple provides us with a unique identifier and, depending on what you choose to share, your name and an email address (which may be Apple's private relay address). We use this to create and secure your account and to link your subscription to it. We do not receive your Apple password.

Waitlist email

If you enter your email address on our website to join the waitlist, we use it only to contact you about debloat's launch and updates. You can ask us to remove it at any time.

3. Meal photos and descriptions

When you log a meal by photo or text, the image or description — along with your relevant food triggers, your diet style, and an account identifier — is sent to our backend and on to our AI provider (OpenAI) to identify the foods and estimate their bloat impact and nutrition. Food names may also be checked against the U.S. Department of Agriculture's public FoodData Central database.

We use this content solely to return your meal analysis. Under our agreement with our AI provider, content sent through its API is not used to train its models. We do not use your meal photos or descriptions for advertising, and we do not sell them.

4. Apple Health data

If you connect Apple Health, debloat reads the following to calculate your movement and sleep scores: steps, sleep, active energy, exercise minutes, and workouts.

• This data is read on your device and used only to compute your scores within the app.
• It is not transmitted to our servers, shared with any third party, used for advertising or marketing, or sold.
• You control this access in the iOS Settings app under Privacy & Security → Health, and you can revoke it at any time.

Our use of Apple Health data complies with Apple's HealthKit requirements, including the prohibition on using health data for advertising or data-mining.

5. Purchases and subscriptions

Subscriptions are sold through Apple's App Store. Apple processes your payment; we do not receive your full payment card details. To know whether your subscription is active, we work with RevenueCat, which manages purchase receipts on our behalf, and we store a record of your entitlement (such as the product purchased, status, renewal/expiry date, and an associated email or identifier) so the app can unlock for you across your devices.

6. Technical information

When the app communicates with our backend, our hosting provider may process limited technical data such as IP address and request metadata to operate the Service securely and prevent abuse (for example, rate limiting). We do not currently use third-party analytics or advertising SDKs.

7. How your information is shared

We do not sell your personal information. We share information only with service providers that help us run the Service, and only as needed to provide it:

• Apple — Sign in with Apple and App Store purchases
• OpenAI — meal photo and text analysis
• U.S. Department of Agriculture (FoodData Central) — nutrition lookups by food name
• RevenueCat — subscription status management
• Supabase — our backend and database hosting

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the Service.

8. Data retention

On-device data is kept until you remove it or delete the app. Account and subscription records are kept while your account is active and for a limited period afterward as needed for legal, accounting, and fraud-prevention purposes. Waitlist emails are kept until you ask us to remove them or they are no longer needed.

9. Your rights and choices

• Delete your account and data — see Section 10.
• Apple Health — revoke access any time in iOS Settings.
• Notifications — turn off in iOS Settings or in the app.
• Subscription — manage or cancel through your Apple ID subscription settings.

Depending on where you live, you may have additional rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing (for example under the GDPR in the EEA/UK, or the CCPA in California). We do not sell personal information or use it for cross-context behavioral advertising. To exercise any of these rights, contact us using the details below.

10. Deleting your account and data

You can delete your account from within the debloat app, which removes your account and associated server-side records. Removing the app from your device clears the data stored locally on it. If you need help completing a deletion or want to confirm it, email us at support@debloatr.com.

11. Security

We use industry-standard measures to protect your information, including encryption in transit and keeping API keys and secrets off your device and on our server. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children's privacy

debloat is not directed to children. The Service is intended for users aged 18 and older, and we do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will delete it.

13. International users

We operate the Service from, and process data in, the United States. If you use the Service from outside the United States, you understand that your information may be transferred to and processed in the United States and other countries where our service providers operate.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect means you accept the updated policy.

15. Contact us

Questions about this policy or your data? Email us at support@debloatr.com.