Privacy Policy

1. Who We Are

My Metabolism ("we," "us," or "our") is the developer of the My Metabolism iOS application and the website at mymetabolism.org (the "Service"). This Privacy Policy explains how we handle information when you use our app and website.

Contact: support@mymetabolism.org

2. Our Privacy Commitment

Privacy is a core design principle of My Metabolism — not an afterthought. We built this app so you can track your wellness trends without handing your personal health data to a company. We have no interest in collecting, profiling, or monetizing your information.

• On-device storage: Your wellness journal — including body temperature readings, heart rate (BPM) measurements, food entries, macro data, journal notes, photos, voice memos, and all associated metadata — is stored locally on your iPhone using on-device storage.
• No cloud journal: We do not maintain a server-side copy of your wellness journal. We do not sync your personal health data to our cloud. There is no login or account required to use your private journal.
• No selling or sharing: We do not sell, rent, lease, trade, or otherwise disclose your personal wellness data to third parties for their marketing, advertising, or commercial purposes. Ever.
• No advertising: The My Metabolism app does not display third-party advertisements and does not use advertising identifiers to track you across other apps or websites.
• No analytics profiling: We do not build user profiles from your wellness data. We do not use your journal contents for machine learning training or product development beyond delivering the features you explicitly use.

3. Information Stored on Your Device

The following data is stored exclusively on your iPhone and remains under your control:

• Body temperature readings and heart rate (BPM) measurements
• Metabolism Trendline scores and historical data points
• Food journal entries, including calories, macronutrients, and meal ratings
• AI food analysis results once returned to your device
• Journal entries (sleep, workouts, supplements, appointments, meditation, etc.)
• Photos, voice notes, and other media you attach to entries
• App settings and preferences

This data is not transmitted to us for storage. If you delete the app or erase your device, this data is removed unless you have separately backed up your iPhone through Apple's iCloud or local backup systems — which are governed by Apple's privacy policies, not ours.

4. Optional Features That Involve Data Processing

Certain features you choose to use may involve limited, transient processing. You are always in control of whether these features are activated.

4.1 AI Food Photo & Text Analysis (User-Initiated Only)

When you explicitly choose to analyze a meal, food photos, descriptions, notes, or voice-derived text may be sent over an encrypted connection to our Cloudflare Worker and AI provider (such as OpenAI) solely to generate nutritional and wellness-context estimates. Optional location coordinates may be included if you grant location permission, to improve restaurant or local meal context. Analysis results are returned to your device and saved in your local journal. We do not retain your food photos on our servers after processing is complete. We do not use your food content to build advertising profiles or sell data to third parties. Results are estimates only and are not medical advice.

4.2 Apple Health / HealthKit (Optional)

If you choose to enable Apple Health sync, the app reads heart rate data from HealthKit according to the permissions you grant. Manual body temperature entries are entered by you in the app. HealthKit data is used locally within the app for wellness metabolism trend estimates. HealthKit data is governed by Apple's HealthKit policies and is not used for advertising.

4.3 Fitbit / Google Health Sync (Optional)

If you connect Fitbit or Google Health, sign-in runs through our secure backend (Cloudflare Worker) using Google OAuth. Heart rate may sync into your local journal. OAuth tokens are stored server-side keyed to an anonymous install identifier generated on your device (not used for advertising). Disconnecting removes tokens for your device only.

4.4 Coaching Application (Optional)

If you submit the coaching form, we collect the information you provide — such as name, email, phone (optional), goals, notes, and SMS/contact consent if offered — and store it in Supabase so our coaching team can follow up. This is separate from your on-device journal. Coaching is educational wellness support, not medical care.

4.5 Subscriptions (Apple App Store & RevenueCat)

Premium subscriptions are processed entirely through Apple's App Store and managed via RevenueCat for subscription status verification. We receive only the information necessary to confirm your subscription tier (e.g., active/inactive status). We do not receive your payment details — those are handled by Apple. RevenueCat and Apple each have their own privacy policies governing payment and subscription data.

4.6 Camera Heart Rate Measurement

When you use the in-app camera to measure heart rate, video frames are processed on your device to detect pulse. This processing occurs locally and is not uploaded to our servers.

5. Data We May Process (When You Use Optional Features)

Your core wellness journal stays on your device. When you use optional features, the following may be processed:

• Heart rate from Apple Health, if you grant permission
• Heart rate from Fitbit/Google Health, if you connect an account
• Manual body temperature entries you log in the app
• Food photos, descriptions, notes, and voice-derived text for AI analysis
• Nutrition estimates and macros returned from AI analysis
• Optional location coordinates for food analysis context, only when permission is granted
• Coaching form data: name, email, phone, goals, notes, and contact/SMS consent if provided
• Subscription and purchase status through Apple and RevenueCat
• Anonymous install identifier for Fitbit/Google Health token keying (not used for advertising)
• Basic technical logs from Cloudflare, Supabase, and website hosting for security and delivery

We do not use this information for third-party advertising or cross-app tracking.

6. What We Do Not Do

For clarity:

• We do not sell your wellness journal or health data for marketing
• We do not operate a full cloud copy of your private journal
• We do not use advertising identifiers to track you across other apps or websites
• We do not require an account to use your on-device journal

7. This Website (mymetabolism.org)

This marketing website is a static site hosted on Cloudflare Pages. It does not use cookies for tracking, does not embed third-party advertising, and does not collect personal information through forms. Standard web server logs (such as IP address and browser type) may be processed by Cloudflare for security and delivery purposes under Cloudflare's privacy policy. We do not use these logs to identify or profile individual visitors.

8. Third-Party Processors

The limited third parties that may process data when you use specific optional features include:

• Apple — App Store, in-app purchases/subscriptions, HealthKit, and device backups
• Google / Fitbit — Google Health and Fitbit OAuth and heart-rate APIs when you connect an account
• Cloudflare — Website hosting, worker infrastructure, and secure food analysis routing
• OpenAI (or the active AI provider) — Food photo/text analysis and optional image generation when you initiate analysis
• Supabase — Coaching application storage and follow-up
• RevenueCat — Subscription entitlement verification

None of these relationships involve selling your wellness journal for third-party marketing. We do not integrate social media tracking pixels, ad networks, or data brokers into the app.

9. Data Security

Because your wellness data resides on your iPhone, it benefits from Apple's device-level security — including encryption when your device is locked, Face ID / Touch ID, and optional iCloud backup encryption. We recommend keeping your device software up to date and using a strong passcode.

Any data transmitted for optional features (such as food photo analysis) is sent over HTTPS encrypted connections.

10. Children's Privacy

My Metabolism is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly address the matter.

11. Your Rights and Choices

You have direct control over most of your data:

• Access: Your on-device journal data is visible within the app.
• Local deletion: Delete individual entries in the app, or remove local data by deleting the app from your iPhone.
• Server-side deletion: Deleting the app removes local data but may not automatically delete coaching applications, OAuth tokens, or subscription records held by Apple, RevenueCat, Supabase, or our backend. Email support@mymetabolism.org to request deletion of server-side coaching or sync-related records.
• Opt out of optional features: Skip Apple Health sync, Fitbit/Google Health, AI food analysis, location, and coaching signup.
• Revoke permissions: Manage camera, photos, location, HealthKit, and other permissions in iPhone Settings at any time.

If you are located in a jurisdiction that provides additional privacy rights (such as the EU/EEA under GDPR or California under CCPA/CPRA), contact us to exercise applicable rights.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Wellness Disclaimer

My Metabolism shows wellness estimates, trends, and patterns. It is not medical advice and does not diagnose, treat, cure, or prevent any disease or health condition. Always consult a qualified healthcare professional for medical decisions.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

support@mymetabolism.org