Privacy policy

GrubLog is a calorie and macro tracker in beta testing on iPhone (through Apple’s TestFlight) and Android (through Google Play testing). This policy covers this website, the beta email list, and the beta app, including accounts, backup and the connector for AI apps. The app works the same way on both platforms.

GrubLog is run by Alejandro Kinejara (“GrubLog,” “we,” “us”). Questions go to grublogapp@gmail.com.

1. What we collect

Your email address. When you sign up for the beta on this website, we collect the email you enter. For the Android beta, we need the email of your Google account, because that’s how Google Play adds testers.

Your account. You sign in with Google or Apple. We receive your name and email from them, and an account ID. We don’t see your Google or Apple password.

What you enter in the app. Your units, sex (used in the calorie formula), date of birth, height, weight, activity level, goal and targets, and, if you answer it, whether you’re pregnant or breastfeeding. Also the foods, weights, exercise and water you log, and your reminder times. It is stored in the app on your phone and, while backup is on (the default), copied to your account so it survives a lost phone and appears on your other devices. Each account can only read its own data. Meal photos are the exception: small thumbnails that stay on your phone and are never backed up.

Keeping it only on your phone. Settings → Account → Back up to my account. Turn it off and nothing new is sent to your account. You can also delete what’s already backed up, or delete your account entirely.

What the app sends when you use a feature. Some features need our server:

• AI logging: the text you type (for example, “2 tacos al pastor”) or the photo you take, and your answers to follow-up questions.
• Food search and barcodes: the search words or barcode number.
• Insights and the weekly summary: daily totals (calories, protein, carbs, fat), your targets and goal, your weight trend and number of weigh-ins, the foods you log most with their calories, and your exercise types and minutes. Never photos or notes.

Each request carries a random install ID created by the app and, when you’re signed in, your account ID so we can check it’s you. We use them only to enforce daily limits on AI and search, which count against your account when you’re signed in.

App updates. The app checks for updates through Expo, which receives your app version, device type, and IP address to deliver them.

Beta testing platforms. Apple (TestFlight) and Google (Google Play) collect information about testers and share some of it with us: your name and email if we invite you by email, your device model and operating system, crash reports, and any feedback or screenshots you choose to send. Their own privacy policies also apply.

Basic visit information. When you visit this website, our hosting provider processes standard request data, such as your IP address, browser type, and the page requested, to deliver the site and protect it from abuse.

Messages you send us. If you email us, we keep the conversation so we can reply.

We don’t collect your location, contacts, or advertising ID. Neither the website nor the app uses analytics, advertising, or tracking tools.

2. How we use it

• To run the app’s features: turn text and photos into food entries, look up foods, and write insights and your weekly summary.
• To limit how many AI and search requests each install can make in a day.
• To fix bugs, using crash reports and the feedback you send.
• To understand how GrubLog is used overall: we look at counts across all accounts, such as how many people logged this week or how many have water tracking on. These are totals and percentages that can’t identify you. We don’t look at individual accounts’ logs.
• To invite you to the beta, add you as a tester, and tell you when GrubLog launches.
• To reply to your messages and keep the website and app secure.

We don’t use your information for advertising or build profiles of you. Your calorie and macro targets come from standard formulas that run on your phone, not from AI. We don’t send newsletters or promotions.

3. AI features

GrubLog uses Anthropic’s Claude models for its AI features. When you use them:

• The app sends the request to our server, which forwards it to Anthropic. No name or email goes with it.
• Anthropic processes it under its commercial terms, which don’t allow it to train its models on our requests.
• Our server doesn’t store your text, photos or summaries after the response comes back.
• Meal photos are kept only on your phone, as small thumbnails, and are never backed up.

Anything AI estimates is labelled as an estimate, and you can edit it before saving.

4. Connected AIs

You can connect GrubLog to an AI app you use, such as Claude or ChatGPT, through our connector. This is your choice, made in that app, and it works only while your backup is on.

• What it gets: the data backed up to your account (food, weight, exercise, water, profile, goal, targets, settings), read through your own sign-in. Never your meal photos.
• What it may do: you choose on our sign-in page. Read only lets it look. Read and write also lets it log and change entries, targets, profile and settings, within GrubLog’s safety rules. Only AI apps we recognise can be given write access. It can never delete your account or your backup.
• What we keep: a record of each change a connected AI makes (what it was before and after), so you can see and undo it in the app under Settings → Account → Recent AI changes. It’s part of your account data and is deleted with it.
• Who sees your data: the AI app you connected, under its own privacy policy. We don’t send your data to any AI you haven’t connected, and we have no access to your conversations there.
• Ending it: remove GrubLog in the AI app, or revoke it in Settings → Account. Its access stops immediately.

5. Who we share it with

We never sell your personal information, and we never share it for advertising. We use a few service providers that process it on our behalf:

Food searches and barcode lookups go from our server to public nutrition databases (USDA FoodData Central and Open Food Facts). They contain only the search words or barcode, never anything that identifies you.

We may also disclose information if the law requires it or to protect someone’s safety.

6. How long we keep it

• On your phone: until you delete it in the app or uninstall the app.
• In your account’s backup: until you turn off and delete the backup, or delete your account, in Settings → Account. Deleting your account removes it too.
• On our server: request content isn’t stored. Daily usage counts for each install ID or account are deleted after 48 hours.
• Email list: until you unsubscribe or ask us to remove you. If GrubLog doesn’t launch, we’ll delete the list.
• TestFlight and Google Play: kept by Apple and Google under their own policies.

7. Your choices and rights

• Export your history in the app: Settings → Download my data (CSV or JSON).
• Correct anything by editing the entry, your profile, or your targets.
• Delete everything: Settings → Delete all data removes it from your phone and from your account’s backup if backup is on. Settings → Account also lets you delete just the backup, or your whole account. Uninstalling removes what’s on the phone.
• Keep it local by turning off Settings → Account → Back up to my account.
• Disconnect an AI in that app or in Settings → Account, and undo its changes under Recent AI changes.
• Leave the beta from TestFlight or Google Play at any time.
• Unsubscribe with the link in any email we send, or write to grublogapp@gmail.com.

Depending on where you live, you may have more rights over your information, including to know what we hold, get a copy, correct it, delete it, or withdraw consent. We’ll respond within the time the law allows, and we won’t treat you differently for asking.

California. Under the CCPA, the information we collect falls into these categories: identifiers (your name, email, account ID and install ID), health information you choose to send for analysis, and limited internet activity (visit and app requests). We use sensitive information only to provide the feature you asked for. We don’t sell or share personal information.

Mexico. You have rights of access, rectification, cancellation, and opposition (ARCO) over your personal data, and you can revoke your consent. Send requests to grublogapp@gmail.com.

European Economic Area, UK, and Switzerland. If these laws apply to you, we process your data to provide the app (contract), with your explicit consent (health information and the email list), and for our legitimate interests (security and preventing abuse). You can complain to your local data protection authority.

8. Health information

Some of what the app handles is “consumer health data” under laws like Washington’s My Health My Data Act: your weight, food and calorie intake, goals, exercise, and pregnancy or breastfeeding status. Your logs are backed up to your account unless you turn that off. When an AI feature sends some of it to our server, we use it only to give you that answer and don’t store it. We share it only with the providers in section 4 that process it for us. We never sell it.

9. Security and storage

Everything between the app, our server, and our providers travels over HTTPS, and your account’s backup is encrypted at rest by our storage provider. Our server checks that requests come from the app and limits how many each account or install can make. Only the developer can access the beta list and our server, protected with multi-factor authentication. Our providers process data in the United States, so if you use GrubLog from another country, your information is transferred there.

10. Children

GrubLog isn’t meant for children under 13, and we don’t knowingly collect their information. If you think a child has signed up, email grublogapp@gmail.com and we’ll remove it. If your date of birth shows you’re under 18, the app won’t set weight-loss or weight-gain targets.

11. Not medical advice

GrubLog gives estimates, not medical advice. It isn’t a medical device. Talk to a healthcare professional before making major changes to how you eat.

12. Changes to this policy

When we make meaningful changes, we’ll update the date at the top and tell you in the app or by email.

13. Contact

grublogapp@gmail.com
Alejandro Kinejara