Privacy Policy
Last updated: September 2026
We built this app to help you understand your body and nutrition, not to collect data about you beyond what's needed to do that. This Privacy Policy explains what information we collect, why we collect it, and how it's used.
In this policy, "we" and "us" mean Stribog IT Solutions Private Limited, the developer of Hale & Hearty Food Diary. By using the app, you agree to the practices described in this policy.
App Store privacy nutrition label
This section matches the App Privacy answers declared for this app on the App Store.
Data collected, not linked to you
Requests carry no account identifier, and there are no accounts at all. None of this data is used for tracking.
- Health & Fitness → Health: symptoms, cycle phase, health conditions, allergens and trigger foods, sleep and recovery summaries sent to AI services. Purposes: App Functionality, Product Personalization.
- Health & Fitness → Fitness: movement strain and active energy summaries. Purposes: App Functionality, Product Personalization.
- Sensitive Info: pregnancy, breastfeeding, or peri/menopause life stage. Purposes: App Functionality, Product Personalization.
- User Content → Photos or Videos: meal photos sent for AI recognition. Purpose: App Functionality.
- User Content → Other User Content: food descriptions, food logs, Ask Hale messages and saved notes. Purposes: App Functionality, Product Personalization.
- Identifiers → Device ID: an anonymous per-install identifier used only to enforce a daily usage cap. Purpose: App Functionality.
Not collected
- Tracking: none.
- Contact Info: none.
- Location: none. Your location is never sent, in any form.
- Browsing History: none.
- Purchases: none. Apple handles billing; we never see payment data.
- Diagnostics: none. The app does not include any third-party analytics, telemetry, or crash-reporting SDK.
There is no Hale & Hearty account. Your logs live on your device and, when you are signed into iCloud, in your own private iCloud database. We cannot read that database.
1. Information We Collect
- Food & nutrition logs you enter manually or via AI-assisted entry.
- Body stats (age, weight, height, biological sex) you provide in your profile.
- Nutrition goals and preferences you configure.
- Symptom and supplement logs you record.
- Messages you send to Ask Hale, and short notes Ask Hale saves about things you tell it, such as a food you're sensitive to. You can review and delete these notes in Ask Hale.
- Health data read from Apple HealthKit (sleep, steps, workouts, menstrual cycle) if you grant permission.
We do not collect precise location, contacts, or your photo library. Photos you explicitly attach to a meal are stored in the app's private storage and synced with your other data through your private iCloud database, so they appear on the meal entry across your devices. Deleting the meal deletes the photo. A photo used for AI food logging is also sent to the AI service for recognition. See section 4.
Voice input is transcribed on your device. The recording is never stored or sent anywhere, including to Apple.
The app does not include any third-party analytics or telemetry SDK. We do not track which screens you visit or which features you use.
2. How We Use Your Information
- To provide personalised nutrition insights and recommendations.
- To track your progress toward your nutrition and hydration goals.
- To power AI-assisted food logging and analysis features.
- To generate weekly and monthly insights based on your logged data.
We do not use your personal data for advertising and we do not build advertising profiles.
3. Apple Health & HealthKit
This app requests read access to Apple HealthKit for the following data types:
- Sleep analysis, to show sleep duration and quality context.
- Step count, active energy, and exercise minutes, to show movement data.
- Activity summaries, to read the Move goal set on your Apple Watch.
- Workout sessions, to surface activity in your day-at-a-glance timeline.
- Heart rate variability, to gauge overnight recovery.
- Menstrual cycle data, to provide cycle-phase nutrition guidance.
- Dietary water, so hydration logged in other apps counts here too.
- Body weight and height, to pre-fill your profile and personalise targets.
- Date of birth and biological sex. Read once to pre-fill your profile. Apps cannot change these; you can edit them in the app without affecting Health.
The app also writes the following back to HealthKit so other apps can see it:
- Water intake you log in this app. Written as dietary water.
- Menstrual flow you log in this app. Written as a menstrual flow sample.
- Nutrition from meals you log: energy, protein, carbohydrates, fat and fibre, plus the micronutrients the parser identified (vitamins A, C, D, E and B12, folate, calcium, iron, magnesium, potassium, sodium, zinc, iodine, selenium, sugar, saturated fat and cholesterol). Deleting a meal removes the samples this app wrote for it.
Every one of these is an individual permission. Health asks once, and you can grant or refuse each type separately. The app works with whatever you allow, and features that need a type you've declined show a 'Connect Health' state instead.
HealthKit data is used only to personalise your experience in the app, and never for advertising. Raw Health records are never uploaded or shared. Summaries derived from them, listed in section 4, are sent to AI services when a feature needs them. You can revoke HealthKit access at any time in iPhone Settings → Privacy & Security → Health.
4. AI Features & Your Health Data
Some features are powered by third-party AI models: AI-assisted food logging (Google Gemini), and the app's written insights, reflections and Ask Hale answers (Anthropic Claude). Requests to Claude are routed through OpenRouter, an AI routing service. If a model is unavailable, OpenRouter may answer the request with a Google Gemini model instead. To generate a response, the app sends the relevant slice of your logged data. The app asks for your permission before it sends anything to these services, and you can withdraw it at any time (see section 7).
Depending on the feature, a request can include:
- Food descriptions you type or dictate, and meal photos you attach for photo logging.
- Questions you ask Ask Hale, the earlier messages in that conversation, and the notes Ask Hale has saved from past chats.
- Names of logged foods, your nutrition and micronutrient totals compared against your goals, and your water intake.
- Your energy goal if you've set one, and an estimate of your daily energy use calculated on your device from your profile.
- Summary sleep, recovery and movement statistics: sleep duration and quality, heart rate variability, and daily movement strain.
- Cycle day, cycle phase, and life stage, including pregnancy stage, breastfeeding, or peri/menopause where applicable.
- Health conditions you've selected and foods flagged for them, allergens you've set, and trigger foods confirmed by your elimination tests.
- Symptom names from the app's built-in list, with counts and timing patterns.
- Eating-reason labels, a day status you've set such as fasting or a sick day, diet and cuisine preferences, and active elimination-test pairs.
- The current weekday and time of day.
What is never sent to AI services: your name; your age, weight, height, or biological sex (the energy estimate above is calculated from them on your device, but the values themselves are not sent); notes you attach to a meal or symptom entry; custom symptom names you typed yourself; raw Apple Health records; voice recordings; and your location. Requests carry no account identifier, and nothing in them ties the data to your identity.
Requests reach the AI providers through a relay we run on Cloudflare, so that API keys are never shipped inside the app where they could be extracted. The relay forwards each request and returns the response. It does not store the contents of requests or responses. To enforce a daily usage cap it keeps two counters: one against an anonymous per-install identifier, and one against the network IP address the request came from. Both expire at the end of the day (UTC). The identifier is generated on the device, is not linked to your Apple Account or your iCloud data, and changes if you reinstall the app. The IP address is not used to determine where you are.
The relay instructs OpenRouter to route requests only to providers that do not store them or use them to train models, and we use Google's paid API terms, under which requests are not used to improve Google's models. The providers process each request only to produce the response you see in the app, and their handling is also governed by their own privacy policies (OpenRouter, Anthropic and Google).
Nutrition reference lookups query USDA FoodData Central, through the relay, and Open Food Facts, directly from your device. Those requests carry the food name or barcode only.
5. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:
- The AI and routing providers named in section 4 (OpenRouter, Anthropic and Google), and Cloudflare, which hosts our relay. Limited to the data listed there.
- If required by law or to protect the rights, property, or safety of users or the public.
- In the event of a merger or acquisition, where data may transfer to a successor entity under the same privacy commitments.
6. Data Storage, Sync & Security
Your data is stored on your device using Apple's SwiftData framework and synced through your private iCloud database (CloudKit), so your logs appear on your other devices signed into the same Apple Account. That database belongs to your Apple Account. We cannot read it, and we do not keep a copy of your logs on any server of ours. The only server we operate is the relay described in section 4, which passes AI requests through without storing their contents.
One deliberate exception: your body details (birthday, biological sex, weight, and height) and the cycle length derived from Apple Health are kept only on the device where they were set. They are never synced to iCloud; each of your devices fills them in from its own copy of Apple Health, or from what you enter on that device.
Apple's device encryption protects local data at rest, and iCloud data is encrypted in transit and on Apple's servers.
Deleting the app removes the data stored on that device. Your synced copy remains in your private iCloud database until you remove it. Use Delete All Data in the app to erase your entries everywhere.
7. Your Rights & Choices
- Access. You can view all your logged data directly within the app.
- Correction. You can edit any entry at any time.
- Deletion. You can delete individual entries at any time, and Delete All Data in the app settings erases your entries from this device and from your private iCloud database.
- Ask Hale notes. You can review and delete the notes Ask Hale has saved from the Ask Hale sidebar. Delete All Data removes them too.
- HealthKit permissions. You can revoke access at any time in iPhone Settings → Privacy & Security → Health.
- AI features. You can withdraw your consent to the AI features at any time in Profile → Health → AI & Your Data. Nothing is sent to AI services after that. Because the app is built around these features, it pauses until you turn them back on, and you can still manage or cancel your subscription.
If you have questions about exercising any of these rights, please contact us at the address below.
8. Children's Privacy
Hale & Hearty Food Diary is intended for people aged 16 and over. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we'll revise the 'Last updated' date at the top of this page. For significant changes, we'll notify you within the app.
Continued use of the app after changes take effect constitutes your acceptance of the revised policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or how your data is handled, please reach out:
Hale & Hearty Food Diary is made by Stribog IT Solutions Private Limited, which is responsible for the data practices described in this policy. Governing law is the laws of India, as set out in the Terms of Service.
Related: Help & Support · Terms of Service