Health AI is a nutrition, training and running app for iPhone and Apple Watch. This policy explains what we collect, where it goes, and what you can do about it. It is written from what the app actually does, and it changes when the app does.
The short version: everything you log is written to your phone first, and logging it needs no connection. If you are signed in, your food, workouts, runs, weigh-ins, water, saved foods and your plan are also copied to your account, so you can get them back on a new phone. What you ask the coach and the photos you scan are sent to be answered, and are not kept. We do not sell data, show adverts or use trackers.
1. Who we are
Health AI is operated by Bolt Business Limited, a company registered in England and Wales (company number 16864050), which is the data controller for the information described here. We are registered with the Information Commissioner's Office (registration number ZC277230).
4th Floor, 14 Museum Place, City Centre, Cardiff CF10 3BH, United Kingdom
For any question about this policy, or to exercise any of the rights in section 10, contact us at support@thehealthai.co.uk.
2. Where what you log is kept
Everything you log is written to this phone first, in the app's private storage, and writing it there needs no connection. What does need one is anything that has to go and ask: searching the food database, scanning a barcode or a meal, the map drawing itself, and the coach.
These stay on your phone, whether you are signed in or not:
- Runs and workouts brought in from Apple Health
- App settings, reminders and preferences
- Your conversation with the coach
These are also copied to your account while you are signed in, so that a new phone or a reinstall restores them instead of starting empty:
- Food you log, and your diary history
- Saved foods and saved meals
- Workouts and personal records, your routines, and the exercises you made yourself
- Runs and walks, including the GPS route of each one and, for one you recorded on your Apple Watch, its average and highest heart rate
- Weigh-ins and water
- Your plan: your calorie and macro targets, your goal and pace, and the body details they are worked out from (see section 3)
Your account and these copies are stored by Supabase in London.
Signed out, that copying does not happen and nothing is sent. If you then lose the phone, that data is lost with it.
Uninstalling the app deletes what is on the phone, but cannot reach your account: the copies there stay until you delete your account. Reset everything, in Settings, deletes your logs and the coach conversation on the phone (your account, targets, and the foods, meals, routines and exercises you saved are kept) and, if you are signed in, marks the copies in your account as deleted so your other devices remove them too.
Your phone's own iCloud backup may copy the app's stored data as part of a device backup, under Apple's terms rather than ours. You can turn that off in your iPhone's settings.
The widgets and the Lock Screen cards read from your phone, not from us. The Apple Watch app receives today's figures and a run in progress from your phone over Apple's own connection between the two, and sends the runs and walks you record on the watch back to your phone the same way; nothing goes through us.
3. What we collect
Your email address, when you create an account. We use it to sign you in, and to link your subscription and your monthly allowances to you. We do not send marketing email.
Your name, only if you sign in with Google. Google shares your name and a link to your profile picture along with your email address. We keep them with your account and show the name at the top of Settings; the picture is not used. Sign in with Apple can offer a name too, but the app does not keep it, and we never ask for a name anywhere else.
A token from Apple, only if you sign in with Apple. When you sign in, Apple gives the app a one-time code, and our server swaps it with Apple for a token that only Apple can use. We keep it with your account for one thing: when you delete your account, we send it back to Apple, which ends Health AI's access to your Apple ID. It is deleted with your account, or, if Apple cannot be reached at that moment, once it has been sent back, and within 30 days whatever happens (section 8).
Your body details, which you enter yourself: your height, weight, sex and date of birth, with the goal, pace and activity level you choose. They are used to work out your calorie and macro targets. Your date of birth is kept rather than only your age so that the targets stay right as you get older. They are stored on your phone and, while you are signed in, copied to your account with your plan.
Where you heard about us. Onboarding asks where you heard about the app: the App Store, a friend, TikTok and so on. Your answer is kept with your account, so we can count what brings people to the app, and it is deleted with the account.
What the coach is sent. When you ask the coach something, your question goes with a summary of your recent logs, which is what lets it answer about you rather than in general. The summary is put together on your phone and holds:
- your targets, goal and body details — height, weight, sex and age
- the food you logged in the last 30 days, the meals you planned for the next 14 days, and the foods you log most
- your weigh-ins and weight trend
- your workouts — each exercise's number of sets and its best set — and your saved routines
- your water
- your runs and walks: distances, times and paces, never their routes
- and, from Apple Health if you allowed it, your steps, active calories and sleep
It is sent to answer that message, and not kept by us. Your conversation itself is kept on your phone.
Photos you scan. When you use Scan food, that one photo is sent to be read and is not stored by us afterwards. Nothing is sent until you take or choose the photo. A photo from your library can have the place it was taken saved in it; that is removed on your phone before the photo is sent.
Usage counts. We count how many coach messages and scans you use each month, to enforce your allowance. This is a number, not content.
Coach answers you report. If you report an answer, by pressing and holding it, the answer, the question it answered and anything you add are sent to us, against your account, so that we can look into it. You see all of it before it is sent.
The logs listed in section 2, while you are signed in, so they can be restored to another device. They are stored against your account and are not read by us for any other purpose.
Error reports. When something in the app goes wrong, we record what broke — the error, where in the app it happened, your app version and your phone's iOS version — and send it to us so we can fix it. If the app crashes, iOS writes its own report of the crash, and we send what killed the app, which parts of its code it was running and your phone's model, too. These are tied to a random identifier for your phone, not to your account or your email. So that one phone cannot flood us with them, our server also counts how many each account sends in an hour, and deletes that count after a day; we do not use it to find out whose a report is. Before anything is sent, the app keeps only the first line of the error and the places in its code it happened, and removes email addresses, sign-in tokens, web addresses, ids, map coordinates and any image data from them, so that nothing you typed, logged or photographed is included.
4. What we do not collect
We do not collect your address, your contacts or your photo library — only a photo you choose to scan — and we do not collect your location outside a run or walk you started. We do not sell data to anyone, we do not show adverts, and the app contains no advertising trackers and no analytics tools of our own.
5. Health and location permissions
Location is used only while you are recording a run or walk, on your phone or your Apple Watch, to measure distance and draw your route. The route is stored on your phone and, while you are signed in, copied to your account with the run. We never track your location when you are not recording.
Apple Health, if you allow it, is read on your phone for six things and nothing else: the active calories you have burned, your step count, workouts recorded by other apps or a watch, your sleep, your weigh-ins, and your heart rate during a run or walk brought in from elsewhere. They are read on your phone — to show your figures, to widen your calorie budget if you turn that setting on, to bring in runs you recorded elsewhere, with their average and highest heart rate, so they are not missing from your history, and to bring in weigh-ins from a smart scale or another app.
Weigh-ins brought in from Apple Health join your weight log, and like the ones you type in, they are copied to your account while you are signed in. Nothing else read from Apple Health is copied to your account. The one other place any of it leaves your phone is the coach: if you use it, your recent steps, active calories and sleep are part of the summary sent with your message, as section 3 says, with your weigh-ins.
On Apple Watch, if you allow it, a run or walk you record there reads your heart rate, distance and calories while it lasts, to show them on your wrist, and is saved to Apple Health as a workout, with its route, when you finish. The run is also sent to your phone, where it is kept like any other run, with its average and highest heart rate; while you are signed in, those two figures are copied to your account with the run. Your heart rate is not part of what the coach is sent.
Saving to Apple Health, if you allow it: a run, walk or gym workout you finish on your phone is saved to Apple Health as a workout, with its distance and calories, and with its calories as active energy so that it counts towards your Move ring. A weigh-in you log is saved there too, and so is each day's food, as that day's total energy, protein, carbohydrate and fat. Deleting a workout or a weigh-in here deletes it there, and changing a day's food changes that day's totals. These, and the watch's workouts, are the only things the app writes to Apple Health.
Motion & Fitness, if you allow it, is read only while you are recording a walk or a run: the steps you take on a walk, counted by the phone's motion chip, and the change in height from its barometer, which is what makes the climb on your activities accurate. Both are saved with that activity and copied with it while you are signed in.
Camera, if you allow it, is used to photograph food for scanning and to read barcodes. Nothing is recorded outside the moment you take a photo or hold up a barcode.
Notifications, if you allow them, are the reminders you set, scheduled on your phone. We do not send notifications from a server.
6. Who we share data with
These are all of them, and none is an advertiser. None is sold your data, and none receives your logs except where a bullet says so. Each one that handles your data for us is bound by its terms with us to protect it as well as this policy does. Apple, Google sign-in and Open Food Facts you deal with directly, under their own terms.
- Supabase — hosting, sign-in and the copies of your logs from section 2, stored in London. Holds your email address, your usage counts, the record of your consent (section 9), your answer to where you heard about us and, if you signed in with Google, your name.
The coach and the meal scan are both ours. The coach's summary of you is put together on your phone from your own logs; a scan is your photo with our own instructions around it. Only that finished question goes out, to an AI model we pay for, to come back as words or as a list of foods. None of these companies is told who you are — no name, no email, no account number — none may train its models on what we send, and each deletes it after holding it for a limited time to catch abuse.
- Anthropic — writes the coach's answers, and reads a food photo when Google is unavailable.
- Google — reads your food photos and nutrition labels, and writes the coach's answers when Anthropic is unavailable, on the paid Gemini service.
The rest:
- Resend — delivers your sign-in link, the email we send an account that has gone unused for nearly two years (section 8), and a daily summary of error reports to us. For your emails it sees your email address; the summary holds only the error reports described in section 3.
- Apple — Sign in with Apple, the App Store and its payments, Apple Health, and the connection to your Apple Watch.
- Google sign-in — confirms who you are, if you use it, and gives us your email address, your name and a link to your profile picture.
- RevenueCat — checks your subscription is live. Sees an account identifier and what the App Store says about your purchase, and deletes its record of you when you delete your account. Apple takes the payment; neither of us ever sees your card.
- Open Food Facts — searched when you look up a packaged food or scan a barcode. Your phone searches them directly, so they see the search term and, as any website does, your phone's internet address — never your name or your diary. Barcodes go to our server first, which asks them itself and remembers the answer, so most never reach them from your phone at all.
- USDA FoodData Central — searched through our server for foods that are not already in the app, so it sees the search term and never your phone. Most whole foods are answered from the copy inside the app, which reaches nobody at all.
- Mapbox — draws the maps. Your phone asks for the area on screen, so they see that area and your phone's internet address, never your diary. Their software also sends them de-identified usage data; the ⓘ on any full map turns that off.
- Cloudflare — runs our website, and forwards email you send to support@thehealthai.co.uk to the inbox we read it in.
We may also disclose information if the law requires it.
7. Where it is processed
Your account and the copies of your logs are stored in London. Some of the companies in section 6 are based in the United States, so what they handle for us may be processed there. UK law allows that only with a safeguard in place, and each has one:
- Google, Mapbox, Cloudflare and Resend are certified under the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework).
- Anthropic, RevenueCat and Supabase have the EU's standard contractual clauses, with the Information Commissioner's UK addendum to them, in their data processing terms with us.
Open Food Facts is in France, which UK law treats as protecting data adequately. USDA FoodData Central is sent only search terms, by our server, and nothing about you.
8. How long we keep it
Your email address, usage counts, plan, the record of your consent, your answer to where you heard about us and the copies of your logs are kept while your account exists.
The coach's reply, and what a scan read from your photo, are kept on our server for about an hour, so that if your phone loses signal and asks again it gets the same answer without using another message or scan; older ones are removed the next time the coach or the scanner is used. Your question, your photo and the summary sent with them are not kept.
Supabase, which runs our server, keeps its own logs of the requests made to it and of sign-ins, which include your phone's internet address, for up to a week. Backups of our database, when Supabase makes them, are kept for seven days, so something deleted is gone from them within a week.
A record of something you deleted is kept as a marker, so your other devices know to delete it too. If two of your devices change the same entry before either has synced, the version that loses is kept as well, rather than lost.
Error reports are deleted once they are 90 days old, and coach answers you reported once they are a year old, by clean-ups that run every night.
Our host, Supabase, keeps a log of sign-ins and of the requests the app makes to our server, with your phone's internet address, for up to a week, to keep the service secure and working. Then it is deleted.
An email address that is signed up but never confirmed is deleted after a week.
If you email us, your email and our reply are kept until your question is resolved, and then for two years, in case the same problem comes back. Then they are deleted.
An account nobody uses for nearly two years is sent an email saying so. If it is still unused at two years, and at least a month after that email, we delete it, as Delete account does. Signing in, or the app being opened while you are signed in, counts as using it, and an account with a subscription in force is never deleted this way.
If you signed in with Apple and then stop using Apple sign-in for Health AI, Apple tells us, and we sign your account out on every device. If you delete your Apple ID, Apple tells us that too. If you made your Health AI account with Apple and have never signed in to it with Google, we delete it, as Delete account does. If you first made it with your email address or with Google, or have also signed in to it with Google, we sign it out on every device and forget the Apple sign-in, but keep the account, so you can still sign in that way; Delete account removes it if you want it gone.
Deleting your account removes your account record and everything stored against it on our server, markers included, and your record at RevenueCat. If you signed in with Apple, it also ends Health AI's access to your Apple ID. If RevenueCat or Apple cannot be reached at that moment, we keep only what asking them again needs — the account's id, and Apple's token — and try again each morning for up to 30 days. Apple keeps its own record of your purchases, under its own terms.
9. Why we are allowed to use it
We use your account details, the copies of your logs and your usage counts to provide the app you signed up for — that is the contract between us.
Your weight, body details, food, workouts, runs and sleep count as health information, which the law asks us to take extra care with. We use it only with your explicit consent, and only for what this policy describes — your targets, your history, your scans and the coach — never for advertising. Onboarding asks for that consent after its questions about you. While you answer them, the app uses your answers on your phone to shape the questions that follow — a safe goal weight, say, or a sensible pace — but nothing is read from Apple Health, kept anywhere but your phone, or sent anywhere, until you have said yes. When you gave that consent, and the date of the policy you gave it against, are kept with your account as our record of it.
You can withdraw your consent at any time, without deleting anything. In Settings → Coach and scanner, switching off Use the coach and scanner stops anything from your phone going to Anthropic or Google, and switching off Send Apple Health data to the coach keeps your steps, energy burned and sleep out of what the coach is sent. Everything else in the app keeps working. To withdraw it entirely, delete your account (Settings → Danger zone → Delete account), which removes your health information from our server and from your phone.
We keep error reports because we have a legitimate interest in fixing what breaks; they do not identify you. Your answer to where you heard about us is kept for a legitimate interest too: knowing what brings people to the app. So are emails you send us: answering you, and recognising a problem that comes back.
10. Your rights
If you are in the UK or the EU, you have the right to access, correct, export, restrict or delete your personal data, and to object to processing.
In practice, most of this is in the app:
- Delete your account — Settings → Danger zone → Delete account. This removes your account, everything synced to it, and everything on this phone. What Health AI saved into Apple Health stays there until you delete it in the Health app: your picture, then Apps, then Health AI.
- Export your data — Settings → Legal → Export all my data, in one file. Each section also exports its own: Nutrition → Settings → Export nutrition data (JSON); Train → Settings → Export workout data (JSON); Run → Settings → Export activities (GPX).
- Reset your data — Settings → Danger zone → Reset everything.
For anything else, write to support@thehealthai.co.uk.
To complain about how we handle your data, write to support@thehealthai.co.uk with "Complaint" in the subject. We will acknowledge it within 30 days, look into it, and tell you what we found and what we are doing about it. If you are not happy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.
11. Children
Health AI is for adults. You must be 18 or over, and the app enforces that at sign-up: onboarding asks for your date of birth and will not let you past that question if you are under 18.
Eighteen rather than the thirteen most services use, and deliberately. This app sets calorie targets, tells you to eat less than you burn, and has a coach that will discuss your weight — none of which belongs in front of a child, and the risk it carries is the reason the coach has a section on eating disorders at all.
We do not knowingly collect data from under-18s. If you believe a child has given us data, contact us and we will delete it.
12. Changes
If we change this policy we will update the date below and, for anything significant, tell you in the app.
Last updated: 22 October 2026