Health AI is a nutrition, training and running app. This policy explains what we collect, where it goes, and what you can do about it.
The short version: everything you log is written to your phone first, and logging it needs no connection. If you are signed in, your food, workouts, runs, weigh-ins and water are also copied to your account so you can get them back on a new phone. Your email address, anything you send the coach, and photos you scan are handled separately — all of it is explained below.
1. Who we are
Health AI is operated by Bolt Business Limited, a company registered in England and Wales (company number 16864050), which is the data controller for the information described here.
4th Floor, 14 Museum Place, City Centre, Cardiff CF10 3BH, United Kingdom
For any question about this policy, or to exercise any of the rights in section 8, contact us at support@thehealthai.co.uk.
2. Where what you log is kept
Everything you log is written to this phone first, in the app's private storage, and writing it there needs no connection. What does need one is anything that has to go and ask: searching the food database, scanning a barcode or a meal, the map drawing itself, and the coach.
These never leave your device, whether you are signed in or not:
- Saved foods, saved meals, routines and custom exercises
- Your calorie and macro targets
- App settings, reminders and preferences
- Your coach conversation
These are also copied to your account while you are signed in, so that a new phone or a reinstall restores them instead of starting empty:
- Food you log, and your diary history
- Workouts and personal records
- Runs and walks, including the GPS route of each one
- Weigh-ins and water intake
Signed out, that copying does not happen and nothing is sent. If you then lose the phone, that data is lost with it.
Uninstalling the app, or using Reset everything in Settings, deletes what is on the phone — and, if you are signed in, marks the copies in your account as deleted so your other devices remove them too.
Note that your phone's own backup (Google Drive on Android, iCloud on iOS) may copy the app's stored settings as part of a device backup, under the terms of your Google or Apple account rather than ours. You can turn that off in your phone's settings.
3. What we collect
Your email address, when you create an account. We use it to sign you in and to link your subscription and message allowance to you. We do not send marketing email.
Your messages to the coach, and a summary of your recent logs sent with them. The summary is what lets the coach answer about you rather than in general — it typically includes your targets, recent food totals, recent workouts, your runs and walks, your weight trend, and, where your phone or watch has recorded it, your sleep. Sleep is the only part of that summary you did not type in yourself; it is read from your health app, and only if you granted that permission. Your conversation is stored on your phone; a short-lived copy passes through our server to be answered.
Photos you scan. When you use Scan food, that single photo is sent to be read and is not stored by us afterwards.
Usage counts. We count how many coach messages and scans you use each month, to enforce your allowance. This is a number, not content.
The logs listed in section 2, while you are signed in, so they can be restored to another device. They are stored against your account and are not read by us for any other purpose.
4. What we do not collect
We do not collect your name, your address, your contacts, your photo library, or your precise location outside of a run you started. We do not sell data to anyone, and we do not use advertising trackers.
5. Health and location permissions
Location is used only while you are recording a run or walk, to measure distance and draw your route. On Android the recording runs as a foreground service with a visible notification, so it is always obvious when tracking is on. The route is stored on your phone. We never track your location in the background when you are not recording.
Health Connect (Android) or Apple Health (iOS), if you allow it, is read for four things and nothing else: the active calories you have burned, your step count, workouts recorded by other apps or a watch, and your sleep. All four are read on your phone — to show your figures, to widen your calorie budget if you turn that setting on, and to bring in runs you recorded elsewhere so they are not missing from your history.
None of it is uploaded to us, with one exception you control: if you use the coach, your recent nights of sleep are included in the summary sent with your message, the same way your food and workouts are. That is described in section 3.
Camera, if you allow it, is used to photograph food for scanning and to read barcodes. Nothing is recorded outside of the moment you take a photo.
6. Who we share data with
These are all of them, and not one is an advertiser. None is sold your data, and none receives your logs except where a bullet says so.
- Supabase — hosting, sign-in, and the synced copies of your logs from section 2. Holds your email address and your usage counts.
The coach and the meal scan are both ours. The coach's picture of you is assembled here from your own logs; a scan is your photo with our own instructions around it. Only that finished question goes out, to a rented model, to come back as words or as a list of foods. None of the three is told who you are — no name, no email, no account number — none may train on it, and each deletes it after holding it briefly to catch abuse.
- Anthropic — puts the coach's answers into words, and reads a food photo when Google is down. Does not train on it.
- Google — reads your food photos and nutrition labels, on the paid Gemini tier: no training, no human reviewers.
- OpenAI — the same, only if Anthropic is unavailable.
The rest:
- Resend — delivers your sign-in link. Sees your email address and the link, nothing else.
- Apple and Google sign-in — confirm who you are, if you use them. We get your email address.
- RevenueCat — checks your subscription is live. Sees an account identifier and what the store says about the purchase. Apple takes the payment; neither of us ever sees your card.
- USDA FoodData Central and Open Food Facts — searched when you look up a food or scan a barcode. They see the search term, never you.
- Mapbox — draws the maps. Sees the area on screen, never your diary. Their software also sends them de-identified usage data; the ⓘ on any full map turns that off.
We may also disclose information if the law requires it.
7. How long we keep it
Your email address, usage counts and the synced copies of your logs are kept while your account exists. Coach messages are held only as long as needed to answer them and to recognise a retry of the same question, and are cleared within an hour. A record of something you deleted is kept briefly as a marker so your other devices delete it too, and is swept after 90 days. Deleting your account removes your account record and everything stored against it.
8. Your rights
If you are in the UK or the EU, you have the right to access, correct, export, restrict or delete your personal data, and to object to processing.
In practice, most of this is in the app:
- Delete your account — Settings → Account → Delete account. This removes your account, everything synced to it, and everything on this phone.
- Export your data — GPX for runs from Run → Settings, JSON for workouts from Train → Settings.
- Reset your data — Settings → Data → Reset everything.
For anything else, write to support@thehealthai.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.
9. Children
Health AI is not for children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.
10. Changes
If we change this policy we will update the date above and, for anything significant, tell you in the app.
Last updated: $legalLastUpdated