BuonApp Join the waitlist

Privacy Policy

Effective date: July 9, 2026 · BuonApp is currently in private testing (pre-release).

BuonApp is a photo-based nutrition tracker. This policy explains what data the app handles and where it goes. The short version: your data lives on your phone, we store nothing about you on our side, and we don’t sell or share anything.

Data stored on your device

Everything you create in BuonApp is stored locally on your device and nowhere else:

  • Your profile (age, sex, height, weight, body composition, goals, macro targets)
  • Meal logs, including meal photos you take or select
  • Weight entries, progress photos, and history
  • App settings and subscription state

If you add the optional home-screen widget, today’s totals are shared with it inside the app’s own protected container on your device — nothing about the widget leaves your phone.

We operate no accounts. If you delete the app, this data is deleted with it.

Backups stay yours too. Your diary is included in your iPhone’s normal backup (iCloud or computer — controlled by your Apple settings, stored in your Apple account, not with us). You can also export everything to a single file from Settings → Backup and restore from it later; that file goes wherever you choose to save it and never passes through us.

Crash diagnostics stay on your phone — unless you choose to send them. If the app crashes, Apple’s MetricKit gives the app a diagnostic report on the next launch. It is saved on your device only; nothing is transmitted automatically. The optional “Report a problem” button prepares an email to us with the app’s technical event log and crash reports attached — no meal photos, no body data — and you see that email and its attachments before deciding to send it. (Whether anonymized crash data is separately shared with Apple/developers is governed by your own iOS analytics settings.)

Meal photo analysis (optional)

If you enable AI analysis, the meal photo you snap (and any caption you type) is sent to Anthropic’s Claude API to estimate the dish, portions, and nutrition. That transfer happens only when you use an AI feature, only for that content, and the result comes straight back to your device.

Depending on configuration, the request travels either directly to Anthropic or through BuonApp’s relay server, which exists solely to keep API credentials off your device and to prevent abuse. The relay does not store your photos, text, or results — it forwards them and returns the answer. What it does keep, for service health and cost accounting only: an anonymous daily request counter (deleted within 48 hours) and a per-request technical record containing a timestamp, a truncated random device identifier (not your name — the app has no idea who you are), the AI model used, the request’s token counts, and — for failed requests — the error type. These records contain no photos, no text, no results, and are automatically deleted within 7 days.

Anthropic processes this data as a service provider under its commercial terms and privacy policy; API inputs are not used to train Anthropic’s models. BuonApp sends no identity information with the photo — no name, email, or account ID (none exist in the app).

If you don’t enable AI analysis, no photo ever leaves your device.

Apple Health (optional)

If you connect Apple Health, BuonApp writes the meals you log (calories, protein, carbohydrates, fat) into the Health app, and reads your weight, body fat and active energy to power the energy balance and weight trend. This exchange happens entirely on your device — none of your Health data is sent to BuonApp’s relay, to Anthropic, or to anyone else, and it is never used for advertising or shared with third parties. You control access at any time in the iOS Health app (Data Access & Devices); revoking it stops the exchange immediately.

Connected wearables (optional)

If you connect a wearable service such as WHOOP, BuonApp requests read-only access to daily summary data — recovery, strain, sleep scores, and calories burned. This data is:

  • fetched directly from the provider to your device,
  • used only to display your stats and adjust your daily nutrition targets,
  • never sent anywhere else, never sold, never shared.

You can disconnect at any time in BuonApp Settings, and additionally revoke BuonApp’s access from your wearable provider’s own account settings (e.g., your WHOOP app). Disconnecting stops all data access; wearable data already shown is not retained beyond your device.

The waitlist on this website

If you join the waitlist, your email address is delivered to our inbox by FormSubmit, which acts as a form-to-email processor. We use it for one thing: telling you when the TestFlight beta opens. No mailing lists, no sharing, and you can ask us to delete it any time at the address below.

What we don’t do

  • No advertising, no ad trackers
  • No analytics SDKs in the current release
  • No sale or sharing of personal data with third parties
  • No accounts, no server-side storage of your content (the relay keeps only short-lived anonymous counters and technical usage records — never the content itself)

Payments

Subscriptions, if offered, are processed entirely by Apple through the App Store. BuonApp never sees your payment details.

Deleting your data

Delete the BuonApp app to delete all locally stored data. For wearable connections, also revoke access in the provider’s account settings. Relay counters expire on their own within 48 hours; relay technical usage records within 7 days. For data sent to Anthropic during photo analysis, see Anthropic’s privacy policy above.

Children

BuonApp is not intended for children under 13, and the questionnaire is designed for users 14 and older.

Changes

We’ll update this page when the policy changes and note the new effective date above. Material changes (for example, if a future version introduces accounts or cloud sync) will be called out in the app.

Contact

Questions or requests: ciao@buonapp.app