Privacy policy

Last updated: 7 September 2026

Barbelly ("we", "the app") is a food and workout tracker. This policy explains what we collect and why. The short version: your data is yours, we use it only to run the app for you, and we never sell it or use it for advertising.

What we collect

• Account: your email address, name and a hashed password, so you can sign in and recover your account.
• What you log: meals, workouts, body weight, saved meals, recipes, coach conversations and settings. This is stored on your device and, when you are signed in, backed up to our server so you can restore it on another device.
• Meal photos: stored on your device with the entry. When you use photo scanning, the photo is sent to our server and forwarded to Anthropic's Claude API to estimate calories; it is not stored on our server after the estimate is returned.
• Apple Health data (only if you connect it): steps, active and resting energy, distance, exercise minutes, heart rate and workouts. Daily activity totals are kept on your device. Workouts imported from Apple Watch are part of your workout history and therefore included in your backup. We never use Health data for advertising or marketing, never sell it, and never share it with third parties other than as described here. You can revoke access at any time in the Health app.
• AI features: when you use the coach, described meals or AI recipes, the text you type plus a summary of your profile, targets and recent logs are sent to our server and to Anthropic's Claude API to generate a reply. Anthropic processes this data under its API terms and does not use it to train models.
• Purchases: subscription status is verified with Apple. We store your Apple original transaction ID to keep your plan active. We never see your payment details.
• Technical: standard server logs (IP address, timestamps) kept for 14 days for security and abuse prevention. No analytics SDKs, no ad trackers.

Where it is stored

On our own server hosted by Hetzner Online GmbH in Helsinki, Finland (EU). Data is encrypted in transit (HTTPS).

Your rights

• Delete your account in the app: Settings → Account → Delete account. This removes your account and backup from our server immediately.
• Export your data: Settings → Account → "Upload my data now" keeps a JSON backup; contact us for a copy.
• Access, correction and portability requests: email us and we answer within 30 days.

Children

Barbelly is not intended for children under 16.

Contact

support@barbelly.app