Privacy Policy

Overview

Bloatless is an iOS wellness companion for check-ins, meal logging, hydration, routines, reminders, photos, optional face scan progress, and gentle pattern reflection. This policy explains what information is processed when you use the app, website, subscriptions, support, analytics, attribution, and optional online features.

Bloatless is designed to keep your wellness history on your device whenever possible. We do not sell your personal information or use your check-ins, meal history, or photos for advertising.

Who is responsible

Bloatless is provided by the developer identified in the App Store listing and on the Imprint page. For privacy questions or requests, contact support@bloatless-app.com.

Information stored on your device

The app may store the following information locally on your iPhone or in Apple-managed device backups, depending on your settings:

• Daily check-ins, including bloating, puffy face, stress, energy, hydration, notes, completed habits, optional photos, and optional face scan photos and scores.
• Meal entries, including names, dates, tags, notes, optional photos, analysis summaries, and debloat scores.
• Morning and evening routines and custom habits.
• Selected goals, onboarding choices, water goals, and notification preferences.

You can delete local check-ins, meals, routines, and custom habits through the app. Uninstalling the app removes local app data, subject to Apple backup and restore behavior.

Photos and wellness information

Check-ins, notes, meal history, and photos may reveal sensitive information about your body, habits, diet, or wellbeing. Bloatless is not a medical records system. Avoid adding information you do not want stored on your device or included in an optional online request.

Saved check-in, meal, and face scan photos are stored locally. A meal photo is sent to the Bloatless service only when you explicitly request meal photo analysis. A face scan photo is sent only when you explicitly request Face Scan analysis. Other check-in photos are not sent for analysis.

Optional meal and Face Scan analysis

When you request meal analysis, the meal name, notes, selected tags, and optional meal photo needed for that request may be sent to the service. When you request Face Scan analysis, the selected face photo is sent to the service to return wellness progress scores. Bloatless uses OpenAI services to generate these optional results and scores.

Generated responses and scores may be inaccurate or incomplete. Do not include sensitive medical information in meal notes or photos. Bloatless does not provide medical advice, diagnosis, treatment, disease detection, identity recognition, protected-trait inference, or medication guidance.

Face data collection, use, sharing, retention, and deletion

Face Scan is optional. Before the first AI scan, Bloatless asks for your consent. If you choose a face photo and start a Face Scan, the complete selected photo, including your face and visible facial features, is compressed and transmitted securely through the Bloatless service hosted by Vercel to the OpenAI API. If you select “Not Now,” the photo is not sent.

The photo is used only to generate the following wellness progress scores for you: Overall, Puffiness, Hydration, Potential, Symmetry, Glow, Facial Definition, and Under-eye Freshness. Bloatless does not create or collect biometric templates, facial embeddings, Face ID data, or facial-recognition identifiers. Face data is not used to identify or authenticate you, diagnose a medical condition, infer protected traits, train Bloatless models, advertise to you, or sell or profile you.

Vercel processes the request as Bloatless's hosting provider, and OpenAI processes the face photo to produce the requested scores. Bloatless does not share face photos or Face Scan results with PostHog, AppsFlyer, RevenueCat, advertisers, or data brokers. The Bloatless service does not intentionally write the face photo to a database or application logs; it keeps the photo only in request memory while the analysis is completed and then discards it. OpenAI may retain API inputs and outputs for up to 30 days for service operation and abuse monitoring, unless a longer period is required by law.

The selected face photo, generated scores, and scan date are stored locally on your device until you delete them. You can revoke consent at any time in Profile > Legal > AI Photo Consent. After revocation, no future AI scan is sent until you consent again. Revoking consent does not delete photos or results already stored locally. To delete them, use Profile > Delete all local data. Uninstalling Bloatless also removes local app data, subject to Apple backup and restore behavior. Data already processed by OpenAI is deleted according to the retention period above. You may also contact us at support@bloatless-app.com for a privacy request.

Bloatless uses Vercel and OpenAI as service providers under contractual confidentiality, security, and data-protection obligations. We require these providers and their subprocessors to use face data only to provide the requested service and to protect it to the same or an equivalent standard as described in this policy.

Analytics and attribution

Bloatless uses PostHog for product analytics and AppsFlyer for attribution measurement. These services may process technical identifiers, app opens, screen views, onboarding completion, paywall and purchase events, feature usage counts, and selected onboarding wellness metrics such as sleep, stress, water goal, salty food frequency, puffy face frequency, and aggregate goal, signal, and habit counts.

Bloatless does not use PostHog session replay or screen recordings.

These analytics are used to understand whether the app is working, improve onboarding and paid features, measure campaigns, and prevent fraud. Bloatless does not use this information to sell personal information or for behavioral advertising.

Subscriptions and purchases

Bloatless may offer subscriptions through Apple in-app purchases. Apple processes payments, and RevenueCat is used to manage subscription status, restore purchases, and unlock paid features. Apple and RevenueCat may process purchase identifiers, receipts, product identifiers, entitlement status, transaction history, storefront information, and technical identifiers needed to operate purchases and prevent fraud. We do not receive your full payment card number.

Notifications

If you allow notifications, Bloatless schedules local reminders on your device. Notification permission is managed by iOS and can be changed in the app or iOS Settings.

Support and website data

If you contact support, we process the information you choose to send, such as your email address, message, screenshots, device model, iOS version, and app version. Please do not send sensitive health or medical details unless necessary for your request.

When you visit the Bloatless website, the hosting provider may process technical information such as IP address, browser type, device information, requested pages, timestamps, referring URLs, and server logs to operate, secure, and debug the website and service.

How information is used

• Provide the app features and optional online requests you choose.
• Operate subscriptions, restore purchases, and prevent fraud.
• Measure product usage, attribution, and onboarding performance.
• Respond to support requests and diagnose technical issues.
• Maintain security, reliability, and legal compliance.
• Improve Bloatless without selling personal information or using it for behavioral advertising.

Service providers and international processing

Limited information may be shared with Apple for app distribution, purchases, device permissions, and platform services; RevenueCat for subscription management; OpenAI for optional meal and Face Scan analysis; PostHog for product analytics; AppsFlyer for attribution measurement; Vercel for website and service hosting; and email providers for support. These providers may process information in countries other than where you live. Service providers that process face data do so on Bloatless's behalf under contractual confidentiality, security, and data-protection obligations and must provide the same or equivalent protection described in this policy.

Retention, choices, and rights

Local app data remains on your device until you delete it, uninstall the app, erase device data, or change Apple backup settings. Online requests, analytics and attribution records, server logs, purchase records, and support emails are kept only as long as reasonably needed to operate and secure the service, provide subscriptions and support, improve Bloatless, comply with law, and handle disputes.

You can delete local data, revoke AI photo consent in Profile > Legal > AI Photo Consent, disable camera, photo, or notification permissions, choose not to use optional online features, and manage subscriptions through Apple. Revoking consent prevents future AI photo requests until you consent again. You may contact us to request access, correction, deletion, export, restriction, objection, or withdrawal of consent where applicable law provides those rights.

Children and security

Bloatless is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We use reasonable measures designed to protect processed information, but no app, device, network, or online service can be guaranteed completely secure.

Changes and contact

We may update this policy as Bloatless changes or as legal, technical, or business requirements evolve. The updated version will appear here with a new date. For privacy questions, contact support@bloatless-app.com.