This is not a legal document. It is a description of what the software does, specific enough that you can check it yourself in about thirty seconds.
The free mode has no sign-up, no server, and no telemetry attached to you. Your weight, your food, your history: all of it lives in your browser and nothing user-identifying ever leaves the device. The only call carrying anything you typed is an anonymous food-database lookup.
"If the product is free, you are the product."
That is the usual deal, and with most free health apps it is true. That is not what is happening here.
There is no account to attach a log to, no server holding your history, and nothing collected that could be packaged and sold. Free and private are the same fact here, said twice. Nothing is gathered, so there is nothing to sell, and nothing you would have to buy back later.
The complete list, not the highlights.
In IndexedDB, in the browser you are using, on the device in your hand, namespaced per profile. Not in an account. Not in a backup I hold. You do not have to believe that.
That is the same sentence as the privacy claim, read from the other side. Keeping your data off a server means nobody can hand it over, and it also means nobody can hand it back.
So export, and do it before you need to. The file is plain and readable, in a documented format, and it is yours.
When I change how the app stores your data, your existing log is updated for you, and the app can still open anything an older version wrote. The export button is never more than one screen away.
This site counts visits with Vercel Analytics, on the marketing pages and inside the app alike. It sets no cookies and builds no profile of you: it records the page, the referrer, and coarse details like country and device type, and it is used to see whether anyone is reading the site and to spot bot traffic. It never sees anything you logged. Your weight, your food, your measurements and everything worked out from them stay in your browser and are never sent anywhere.
Nothing else measures anything: no second analytics tool, no session recording, no heatmaps, no advertising or conversion pixel. If that ever stops being true, this page changes in the same release.
Fonts are served from this site rather than a font network, so reading these pages does not tell a third party you were here.
Version 0.5 is the first release where a user's identifiable health data touches a server. Nothing above this line does.
Accounts, hosted storage and payments all sit on that side of it, and none of them are built. When they are, they are opt in, and this page changes before they ship.
Open the app, turn the network off, and keep logging. That is the shortest version of this page.
Free. Private. No sign-up.