Privacy Policy

Effective Date: March 21, 2026

For Your Benefit ("FYB," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the For Your Benefit iOS application ("the App"). By using the App, you agree to the practices described in this policy.

Information We Collect

Information Stored on Your Device Only

The following data is stored locally on your iPhone using SwiftData and is never transmitted to any server:

• Profile information you enter during onboarding (age, height, weight, gender, activity level, fitness goals)
• All food log entries, workout logs, water entries, and weight entries
• Body measurements (body fat percentage, waist, hip, chest, and arm circumference)
• Saved meals and custom recipes
• GPS route data recorded during outdoor cardio workouts (coordinates, altitude, speed, pace, and elevation — stored on-device only)
• Motion and step data recorded during workouts (step count, cadence, floors climbed — stored on-device only)
• App preferences and settings

Information Sent to Our Servers (AI Features Only)

When you use FYB Pro AI features, the following data is sent to our secure proxy server for processing:

• Text descriptions of meals you submit for AI macro estimation
• Photos of food you capture or select for AI photo-based macro estimation
• Your remaining macro targets (calories, protein, carbohydrates, fat) when requesting AI meal suggestions
• Contextual health information to improve accuracy: your current weight, goal type, daily calorie target, and dietary restrictions or preferences
• Recipe details (name, ingredients, macros) when using the AI Recipe Optimizer
• Meal count and calorie/protein targets when generating an AI Meal Prep Plan

This data is sent to our secure proxy server, which forwards it to the Claude AI API (operated by Anthropic) for processing. We do not store this data on our servers after the response is returned to your device. No personally identifiable information — such as your name, email address, phone number, or physical address — is ever transmitted.

Location Data

FYB requests access to your device's location to enable GPS route tracking during outdoor cardio workouts (running, cycling, and walking). Location data is collected only when you start a cardio workout session.

• When-in-use location: GPS coordinates are recorded while the App is active on screen during a workout.
• Background location: If you lock your screen during an active workout, the App continues recording GPS coordinates in the background so your route is not interrupted. Background location updates are automatically stopped when you end the workout.
• Data recorded: Latitude, longitude, altitude, speed, heading, and timestamp — used to display your route on a map, calculate distance, pace, elevation gain/loss, and splits.
• Storage: All location data is stored on your device only and is never transmitted to our servers or any third party.

You can grant or revoke location permission at any time through iOS Settings > Privacy & Security > Location Services > For Your Benefit. Revoking location permission disables GPS route tracking but does not affect any other App features.

Motion and Fitness Data

FYB uses your device's motion sensors (via Apple's CoreMotion framework) to track step count, cadence (steps per minute), and floors climbed during workouts. This data is stored on-device and used solely to display workout metrics within the App. No motion data is transmitted to our servers or any third party.

You can grant or revoke motion and fitness permission at any time through iOS Settings > Privacy & Security > Motion & Fitness > For Your Benefit.

Camera Access

FYB requests access to your device's camera for two purposes:

• Barcode scanning: The camera is used to scan food barcodes (in the food log and shopping scanner) to look up nutritional information from the Open Food Facts database. Camera frames are processed entirely on-device; no image data is transmitted.
• AI meal photo estimation: You may take or select a photo of a meal for AI-powered macro estimation. This photo is sent to our secure proxy server for processing by Anthropic's Claude AI. Photos are not stored on our servers after the response is returned.

You can grant or revoke camera permission at any time through iOS Settings > Privacy & Security > Camera > For Your Benefit.

Apple HealthKit Data

FYB reads and writes data to Apple HealthKit only with your explicit permission. You may grant or deny access to each data type individually through iOS Settings.

• Data we read from Apple Health: Step count, active energy burned, basal (resting) energy burned, workouts, resting heart rate, body mass
• Data we write to Apple Health: Dietary energy consumed, protein, carbohydrates, fat, dietary fiber, water intake, active energy burned (from workouts), body mass, waist circumference, walking/running distance, cycling distance, workout sessions

These practices comply with Apple's App Store Review Guidelines, including Guideline 5.1.3 regarding health and fitness data.

Third-Party Services

We use a limited number of third-party services to provide App functionality:

• Claude AI API (Anthropic): Processes all AI-powered feature requests, including macro estimation from text and photos, meal suggestions, recipe generation, meal prep planning, and recipe optimization. Data sent is limited to meal descriptions, food photos, macro targets, recipe details, and anonymized health context (weight, goal type, calorie target, and dietary preferences). No personally identifiable information is sent. Anthropic processes this data according to their own privacy policy, available at anthropic.com/privacy. We do not control Anthropic's data handling practices beyond the scope of our API agreement.
• Open Food Facts: Barcode lookups are sent to the Open Food Facts public API. Only the scanned barcode number is transmitted. No personal data is shared.
• Apple StoreKit: Subscription purchases are handled entirely by Apple. We do not have access to your payment information, Apple ID, or billing details.

All third-party services that process data on our behalf are required to handle that data with the same or equivalent privacy protections described in this policy.

What We Do NOT Do

• We do not sell your data to anyone, ever
• We do not sell data to data brokers or information resellers
• We do not display advertisements of any kind
• We do not use analytics or tracking SDKs
• We do not collect your name, email, phone number, or any contact information
• We do not share HealthKit data with any third party
• We do not use HealthKit data for advertising, marketing, or use-based data mining
• We do not use your data for targeted advertising or profiling
• We do not store personal health information in iCloud
• We do not track you across apps or websites

Your Rights and Controls

You are in full control of your data at all times:

• Location permissions: You can grant or revoke location access at any time through iOS Settings > Privacy & Security > Location Services > For Your Benefit. Revoking location permission disables GPS route tracking only.
• Motion permissions: You can grant or revoke motion and fitness access at any time through iOS Settings > Privacy & Security > Motion & Fitness > For Your Benefit.
• Camera permissions: You can grant or revoke camera access at any time through iOS Settings > Privacy & Security > Camera > For Your Benefit.
• HealthKit permissions: You can grant or revoke access to any HealthKit data type at any time through your iPhone's Settings > Health > Data Access & Devices > For Your Benefit.
• AI features: AI features are entirely optional and only activated when you choose to use them. You can use the full App without ever sending data to our servers.
• Notification permissions: You can enable or disable notifications at any time through iOS Settings or within the App's settings.
• Delete your data: All data is stored on your device. Deleting the App removes all locally stored data permanently. There is no server-side data to request deletion of.
• Export your data: You can export all of your food, workout, water, and weight data as a CSV file from within the App's Settings at any time.

Data Security

We take reasonable measures to protect the limited data that is transmitted when using AI features:

• All communication between the App and our proxy server is encrypted using HTTPS/TLS
• Our proxy server is hosted on Railway with environment-level secrets for API key management
• All requests are authenticated using request-level tokens
• IP-based rate limiting is in place to prevent abuse
• No user data is logged or persisted on our servers

Data Retention

All personal data is stored locally on your device. We do not maintain user accounts, databases, or server-side records of your information. If you delete the App, all locally stored data is permanently deleted.

AI request data (meal descriptions, food photos, macro targets) is processed in real-time and is not stored on our servers after the response is returned to your device. We do not retain logs of AI requests or responses.

Children's Privacy

FYB is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take prompt steps to delete that information.

The App's health and fitness tracking features are designed for adults. Users between the ages of 13 and 17 should use the App only with parental or guardian awareness.

California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Because FYB does not sell personal information, does not share personal information for cross-context behavioral advertising, and collects only minimal data as described in this policy, most CCPA/CPRA provisions have limited applicability. However, California residents have the right to:

• Know what personal information is collected (described in this policy)
• Request deletion of personal information (accomplished by deleting the App)
• Not be discriminated against for exercising privacy rights

To exercise any of these rights, please contact us at the address listed below.

International Users

If you are accessing the App from outside the United States, please be aware that the limited data sent during AI feature usage is processed on servers located in the United States. By using AI features, you consent to the transfer and processing of this data in the United States. We do not collect sufficient personal data to trigger obligations under the EU General Data Protection Regulation (GDPR), but we are committed to handling all user data responsibly and in accordance with the principles described in this policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected with an updated effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: support@getfyb.com