Privacy

Last updated 2 August 2026

This app holds a record of what you eat, how you sleep, what medication you take and how you feel. That is about as personal as data gets, so this page is written to be read rather than to be legally sufficient.

What is stored

Only what you log, plus what you choose to connect:

• Food and drink you record, and the nutrition worked out from it
• Symptoms, bowel movements, mood and medication doses you enter
• Sleep, heart rate, HRV, steps and workouts, if you connect Apple Health or a supported wearable
• Body measurements you enter, used to work out your targets
• Your settings: goals, what you track, reminders, screen layout

You are not asked for your name, your email address, your date of birth beyond what a calorie target needs, or your phone number. There is no profile, because the app has no use for one.

Where it is stored

In a database of its own. Each account gets a separate database rather than a shared table with a column naming who each row belongs to. That is a deliberate structural choice: the common way health data leaks is a query that forgets to filter by user, and a separate database makes that mistake impossible rather than unlikely.

Databases are hosted with Turso, encrypted in transit and at rest. Backups are encrypted before they leave the machine that makes them.

What is never done with it

• Never sold. Not to advertisers, insurers, data brokers or researchers.
• Never used for advertising. There are no adverts in the app and no plan for any.
• Never used to train a model that anyone else benefits from.
• Never shared with another person unless you explicitly choose to share it with them.

Tracking

There is none. No analytics SDK, no crash reporter that uploads your data, no advertising identifier, no third-party scripts in the app. The app talks to its own server and to nothing else.

Signing in

Sign-in uses a passkey — Face ID, Touch ID or your device passcode. There is no password, so there is nothing to steal in a breach, nothing to phish, and no reset email to intercept. The private half of the passkey never leaves your device, including when we look at it: it cannot be read by the server, by us, or by anybody else.

Apple Health

If you connect Apple Health, the app reads only the categories it asks permission for and only to show them to you. It writes nothing back to Apple Health. You can withdraw any of it in the Health app at any time, and the app will show those figures as unavailable rather than filling them in from somewhere else.

Product information you contribute

If you choose to share a scanned product, what crosses into the shared database is only what is printed on the packet: the barcode, the product name, the brand, the ingredients and the nutrition panel. The server refuses — as an error, not by quietly stripping — any attempt to include when you ate it, how much, your description of it, or a photograph. A contribution says a product exists. It never says you consumed it.

Seeing and taking your data

Settings → All your data lists everything held about you, table by table, with row counts and dates, and lets you read any of it. The export button produces a single file containing the lot, and tells you if anything was too large to include rather than quietly truncating.

Deleting it

You can delete your account. That destroys the database it lived in — the whole thing, not a flag marking it hidden. It cannot be undone, which is why the app asks you to export first and to confirm deliberately.

Children

The app is not designed or intended for children, and no account should be created for anyone under 16.

Changes

If this policy changes in a way that affects what is done with data already collected, that change will be described in the app before it takes effect — not published here and left for you to find.

Contact

Questions about any of this, or a request about your data: privacy@abetterhealthapp.com.