Privacy Policy
BiteBoss — last updated 1 September 2026
BiteBoss is a food diary. You tell it what you ate, it works out the calories and macros, and it shows you the day and the week. This page says exactly what it stores to do that, who else sees it, and how to get rid of it.
Who is responsible
The app and the service behind it are operated by the developer of BiteBoss, reachable at [email protected]. That address is also where you send any request under this policy.
What is collected
| Data | Why |
|---|---|
| Email address and the account id from the provider you signed in with (Google, Apple or Telegram), plus the display name and avatar that provider returns | To have an account at all, and to recognise you on your next device. There is no password — sign-in is delegated entirely to those providers. |
| What you ate: a name, a portion, calories, protein, carbohydrate, fat, optional notes, an optional photo, and the date and time you say you ate it | This is the product. Without it there is no diary. |
| Your profile answers: date of birth, sex, height, weight, activity level and weight goal | Used once to compute a daily calorie and macro target, and again whenever you re-run the questionnaire. |
| Groups you join, and the messages and reactions you leave in them | The social half of the app. See Who else sees your data below — this is the part that is not private. |
| Your conversation with the in-app coach | So the coach can refer back to what you already told it. |
| A push notification token per device you sign in on | To send the notifications you switched on. Deleted when you sign out of that device. |
| Crash and error reports | To find out that something broke. These may include the technical context of the failure. |
| If, and only if, you connect Apple Health or Health Connect: daily step count, active and basal energy, exercise minutes, walking/running distance, average/minimum/maximum and resting heart rate; your workouts (type, start, end, duration, energy, distance); and your weigh-ins | To draw the movement card on the weekly report and to fill in your weight without you typing it. Read as daily totals, never as raw samples — a watch's ten thousand heart-rate readings a day are averaged on the phone and never leave it. Off by default, switched on by you, and switched off again in Settings → Connections. |
| How the app is used: which screens you open, which actions you take (a meal logged, a weight saved, a group joined), and the device, browser and country the request came from | To find out which parts of the app people actually use and where they get stuck, so the next thing built is the thing that helps. It is your activity in this app and nothing else — never what you ate, never a photo, never what you told the coach. |
What is not collected: no advertising identifiers, no location, no contacts, no browsing history. BiteBoss contains no advertising, no advertising SDK, and nothing that tracks you across other companies' apps or websites. It does use two product-analytics services, named below, to measure how the app itself is used — and neither of them ever receives your diary or your health data.
Apple Health and Health Connect
This section exists because health data deserves to be described on its own rather than as a row in a table.
Nothing is read until you switch it on, from Profile → Connections or Settings → Connections, and the phone then asks you separately which categories to allow. You can allow some and refuse others; refusing simply means that figure stays empty.
What is read, if you allow it: steps, active energy, basal energy, exercise minutes, walking and running distance, heart rate (as a daily average, minimum and maximum), resting heart rate, your recorded workouts, and your weigh-ins. Read as daily totals wherever a total is possible — the raw samples are summarised on your phone and the summaries alone are sent to the server.
What is written back, if you allow it: the meals you log, with their nutrients, and any weight you type into BiteBoss. Nothing else. The app writes under its own identifiers, so editing a meal replaces the entry it wrote rather than adding a second one.
Who else sees it: nobody. Health data is used to draw your own screens. It is never sent to the two analytics services, never shown to the people in your groups, never used for advertising — there is no advertising here — and never sold, shared or transferred to any third party for any purpose. It is not used to make decisions about credit, insurance or employment.
How to stop it. Switch the connection off in Settings → Connections, which stops the sync immediately, or revoke the permissions in Apple Health or Health Connect itself. Either one ends the reading. What has already been read is deleted with your account, in the same way and at the same time as everything else (see Deleting your account); ask at the address above if you want only the health figures erased and nothing else, and that is done for you.
One account syncs from one phone. If you sign in on both an iPhone and an Android phone, only one of them syncs health data at a time — the two stores disagree, and the app will not quietly average them. You choose which, and can change it whenever you like.
Where it goes
Your data is stored on the operator's own servers. Six third parties are involved in running the service, each doing one job:
- Anthropic — when you describe a meal or photograph one, that text or image is sent to Anthropic's model to be turned into a calorie and macro estimate, and to power the coach. It is sent for that request and its answer.
- Google (Firebase Cloud Messaging) — delivers push notifications to your device. It receives the notification and the device token, not your diary.
- Sentry — receives crash and error reports. This is a self-hosted instance operated by the developer.
- PostHog and Ripples — product analytics. They receive the usage described above: which screens and actions, the device and country, your account id, and your email address and display name so the same person on two devices is one person and a support conversation can be matched to an account. Neither receives your diary — no meals, no photos, no coach conversation, no profile answers, no weight readings. Neither is an advertising service and neither is given anything to combine with data from other companies' apps.
- Google, Apple and Telegram — only as sign-in providers, and only at the moment you sign in.
Your data is not sold, and it is not shared with anyone for advertising or for their own purposes.
Who else sees your data
This one matters, because it is the point of the feature. If you join a group, the other members of that group see your day — your meals, your totals against your goal, your name and your avatar — and can react and comment on it. Anything you would not show them, do not log while you are in a group with them. Leaving a group stops it.
Nothing else is visible to other users. Your profile answers, your coach conversation and your email are not shown to anyone.
How long it is kept
For as long as your account exists, and — because deletion is reversible — after you delete it too. See below. Crash reports are kept separately and expire on their own schedule.
Deleting your account
In the app: Profile → Delete account. It takes effect immediately: the account closes, you cannot sign in with it again, you disappear from your groups, and nothing of yours — meals, photos, comments, coach conversation — is shown to anyone, including you.
It is a soft delete, and this page will not pretend otherwise. The underlying data is retained rather than erased, which is what makes the deletion reversible: if you delete by mistake, write from the account's address and it can be restored intact. Nothing is reachable in the meantime, by anyone.
If you want it actually erased, ask, and it is done manually — see Your rights. That step cannot be undone.
Groups you created are not deleted; they stay for the people still in them.
If you have already uninstalled the app, or you want to read the longer version of all this, see Delete your account.
Your rights
You can ask for a copy of your data, ask for it to be corrected, or ask for it to be permanently erased, by writing to [email protected] from the address your account uses. Closing the account you can also just do yourself, above; erasure of the retained data is the request to make here.
Children
BiteBoss is not directed at children and is not intended for anyone under 13. Accounts are not knowingly created for them.
Changes
If this policy changes in a way that affects what is collected or who sees it, the date at the top changes and the app says so.