Privacy Policy
Effective date: 2026-10-06 · Last reviewed: 2026-10-06 · App policy version 2.0
Contents
1. Overview
PureBariatric (“PureBariatric”, “we”, “our”) is an educational nutrition and recovery app for people before and after bariatric surgery. It is operated by 2800977 Alberta Inc., an Alberta corporation. PureBariatric is not a medical device and does not diagnose or treat any condition.
This policy covers the PureBariatric iOS app and the app pages at purebariatric.app. Your journal stays on your device. A few optional features (the AI photo scan, Coach, and subscriptions) send limited data off the device, and this policy names exactly what, where and why. The policy for the purebariatric.com website is published separately at purebariatric.com/privacy.
2. What we collect
| Category | Collected? | Stored where | Why |
|---|---|---|---|
| Food log, meals, fluids, protein, supplements, weight, symptoms, milestones | Yes | On your device only | So your journal persists between sessions. |
| Profile (name, surgery type, surgery date, diet stage, height, goals) | Yes | On your device only | To personalize targets and stage guidance. |
| Email address | Only if you enter one for Coach or a subscription | Our servers (Supabase, US — Oregon) | To link your Coach history and subscription status to you. |
| Coach messages | Only if you use Coach and consent | Our servers (Supabase, US — Oregon); processed by Anthropic | So Coach can answer and remember your conversation. See section 4. |
| Red-flag safety events | Only if a safety flag is raised in Coach | Our servers (Supabase, US — Oregon) | Safety audit trail. Erased with account deletion. |
| Food photos for the AI photo scan | Only for a Pro subscriber who allows it | Not stored by PureBariatric; processed by OpenAI or Anthropic | To identify the food and estimate nutrition. See section 4. |
| Food search terms and barcodes | When you search or scan | Sent to the public food databases (Health Canada CNF, USDA FoodData Central, Open Food Facts); not linked to you | To look up nutrition values. |
| Subscription status | Only if you subscribe | Apple (purchases), RevenueCat (entitlements), our servers | To unlock Pro features. We never see your payment card. |
| Apple Health steps and body weight | Only if you grant permission | On your device only | To show your steps and weight trend. See section 5. |
| Advertising identifiers (IDFA), location, contacts, microphone | No | — | Not used. |
3. How we use information
- To show you your own journal and progress inside the app.
- To identify a food from a photo only after you allow the AI photo scan.
- To answer Coach questions and keep your Coach conversation history.
- To confirm and restore your subscription.
- To respond to support and privacy requests.
We do not sell data. We do not share data with advertisers. We do not use your data to train AI models, and our AI providers do not use it to train theirs.
4. Third-party AI: OpenAI and Anthropic
Two optional features share data with third-party AI services. This section discloses both in full. Nothing is sent to either provider until you turn the feature on and allow it.
Who
- OpenAI, L.L.C. — headquartered in the United States of America. OpenAI privacy policy · OpenAI API data controls
- Anthropic, PBC — headquartered in the United States of America. Anthropic privacy policy · Anthropic API data retention
AI photo scan (Pro)
What is sent: the single food photo you take or choose, your current diet stage, and your food-database region. No name, email, account identifier, advertising ID or location is sent with the photo.
How: the photo is sent over HTTPS to PureBariatric’s server, which passes it to OpenAI to identify the food (Anthropic is used if OpenAI is unavailable). Nutrition values come from the public food databases, and Anthropic reviews the result for stage-appropriate portions. The result is shown to you and saved only in your on-device journal. PureBariatric does not store the photo.
Permission: the first time you use the AI photo scan, the app shows a prompt naming OpenAI and Anthropic and asks you to allow it. If you decline, no photo is sent, and manual entry, search and barcode scan keep working. To withdraw permission, use Erase Everything or Delete My Account in the app.
Coach
What is sent: your question, your email (to link your history and subscription), your app language, and basic context (surgery type, diet stage, days since surgery). Coach replies are generated by Anthropic’s Claude API.
Permission: Coach asks for your consent before storing any conversation. You can delete your Coach history at any time from Coach settings.
Provider retention and training
Under their current API terms, OpenAI and Anthropic may keep inputs and outputs for up to 30 days for abuse monitoring, then delete them. Neither provider uses API data to train its models.
Equal protection
OpenAI and Anthropic each provide protection for this data equal to or greater than that described in this policy and required by Apple’s App Store Review Guidelines section 5.1.2(i).
5. Health data
With your permission, PureBariatric reads your step count and body weight from Apple Health. It does not write anything to Apple Health. Apple Health data is processed and stored on your device only. It is never sent to PureBariatric’s servers, OpenAI, Anthropic, or any other third party, and it is never used for advertising.
6. Device permissions
| Permission | Why we request it | Required? |
|---|---|---|
| Camera | To scan barcodes and take a photo for the AI photo scan. | No. |
| Photo Library | To choose an existing photo for the AI photo scan. | No. |
| Apple Health (read) | To show your steps and weight trend. | No. |
No location, microphone or contacts permission is requested.
7. Where your data is stored
Your journal is stored locally on your device. If you delete the app, iOS removes that data. Coach history, red-flag safety events, consent records, your email and subscription status are stored with Supabase in the US-West (Oregon) region, so this information leaves Canada. Purchases are handled by Apple and tracked by RevenueCat, Inc. (United States).
8. Tracking & advertising
PureBariatric does not track you across apps or websites owned by other companies, does not use the IDFA, shows no ads, and includes no analytics or advertising SDKs.
9. Children
PureBariatric is intended for adults. It is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13.
10. Your rights and account deletion
Delete My Account (in the app under Save & Share Your Data) erases everything on your device. If you have entered an email, it also emails you a confirmation link that permanently deletes your server records: Coach history, red-flag safety events, consent records and account. If you have an active App Store subscription, cancel it in iOS Settings first. Deleting your account does not cancel an Apple subscription.
You can also ask to access, correct or delete your information by emailing privacy@purebariatric.com. We respond within 30 days. Residents of jurisdictions with privacy laws (including Canada under PIPEDA, the EU/UK under GDPR, and California under CCPA/CPRA) can exercise their rights at the same address.
11. Changes to this policy
If we change this policy, we will update the dates at the top of this page. Material changes will be summarized inside the app.
12. Contact
Privacy questions: privacy@purebariatric.com. Support: support@purebariatric.app.
2800977 Alberta Inc. (PureBariatric) · Alberta, Canada