Privacy Policy
Effective date: 2026-05-24 · Last reviewed: 2026-05-24
Contents
1. Overview
PureBariatric ("PureBariatric", "we", "our") is an educational nutrition and recovery companion app for post-bariatric patients. We believe the best privacy policy is one that collects as little as possible. PureBariatric is designed to work without an account and without sharing personal information.
This policy explains exactly what data the app handles, when, where, and why — including the optional Photo Food Log feature that uses a third-party AI service called Passio Inc.
2. What we collect
| Category | Collected? | Stored where | Why |
|---|---|---|---|
| Name, email, address, phone | No | — | Account is optional and not required for the app to work. |
| Device identifiers (IDFA, advertising ID) | No | — | We do not track across apps or websites. |
| Food log entries (manual) | Yes | On your device only | So your tracking persists between sessions. |
| Protein, hydration, supplement entries | Yes | On your device only | So your progress persists between sessions. |
| Photos for the optional Photo Food Log | Only if enabled | Sent to Passio Inc. for identification; not retained | See section 4. |
| Apple Health data (steps, weight, etc.) | Only if you grant permission | On your device only | To populate optional dashboard widgets. |
| Crash logs & anonymous usage | Aggregated, no PII | Apple-provided analytics, on-device only unless you opt in | To fix bugs. |
3. How we use information
- To show you your own tracking data inside the app.
- To estimate nutrition for a photo only when you tap the Photo Food Log and after you consent.
- To improve the app via aggregated, anonymous crash logs.
We do not sell data. We do not share data with advertisers. We do not use your data to train AI models.
4. Third-party AI: Passio Inc.
The optional Photo Food Log feature inside PureBariatric uses a third-party AI service to identify food and estimate its nutrition from a single photo. This section discloses that integration in full, as required by Apple App Store Review Guideline 5.1.1(i).
Who
The third-party AI service provider is Passio Inc., a corporation headquartered in the United States of America. Passio operates the food-recognition API and AI model used by the Photo Food Log feature.
- Company: Passio Inc.
- Headquarters: United States of America
- Website: https://www.passio.ai
- Passio's privacy policy: https://www.passio.ai/privacy-policy
What is sent
A single food photo that you choose to capture inside the Photo Food Log. No name, no email, no account identifier, no advertising ID, no device fingerprint, and no GPS location are sent with the photo.
How it is sent
When (and only when) consent is granted and you tap "Scan Food":
- The photo is captured locally on your device.
- It is resized to a small inference-sized image (no full-resolution upload).
- It is base64-encoded and transmitted over HTTPS (TLS 1.2 or higher).
- The Passio API returns predicted food labels and estimated nutrition values.
- Those returned values are stored only on your device, inside your local food log.
If consent has not been granted (the default state), no photo is ever sent to Passio.
All uses
Photos sent to Passio Inc. are used only to identify the food in the photo and return estimated nutrition values. Passio Inc. has confirmed in their terms and privacy policy that submitted images are not retained, not used to train AI models, and not linked to a user identity.
User permission
The Photo Food Log is OFF by default. To turn it on, you must:
- Acknowledge the first-launch disclosure that names Passio Inc. and explains this section.
- Tap "Allow Food Scan" on the in-context consent prompt that appears the first time you open the Photo Food Log, or enable the "AI Food Scan (Passio)" toggle in Settings → Privacy.
You can revoke consent at any time by turning the Settings → Privacy toggle back to OFF. After revocation, the app continues to work in full using manual entry, barcode scan, and the built-in food database.
Equal-protection clause
Passio Inc. provides data protection equal to or greater than that required by Apple's App Store Review Guidelines section 5.1.1(i).
5. Health data
PureBariatric can optionally read step count and body-weight data from Apple Health if you grant permission. We do not write health data back to Apple Health in v1.0. All Apple Health data read by the app is processed locally on your device. It is never transmitted to PureBariatric servers, Passio, or any third party.
6. Device permissions
| Permission | Why we request it | Required? |
|---|---|---|
| Camera | To capture a photo for the optional Photo Food Log. | No — only if you enable the feature. |
| Photo Library | To let you choose an existing photo for the optional Photo Food Log. | No. |
| Apple Health (read) | To optionally display step count and weight trend. | No. |
| Notifications | To send reminders you configure (hydration, supplements). | No. |
No location permission is requested. No microphone permission is requested. No contacts permission is requested.
7. Where your data is stored
All food log entries, hydration data, supplement entries, and recovery checklists are stored locally on your device using the device's standard storage. PureBariatric does not host a user database for v1.0. If you uninstall the app, your local data is removed by the operating system.
8. Tracking & advertising
PureBariatric does not track you across apps or websites owned by other companies. The app does not use the IDFA, does not show third-party advertising, and does not include third-party analytics SDKs other than the Passio food-recognition API described in section 4.
9. Children
PureBariatric is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. The app is intended for adults recovering from bariatric surgery.
10. Your rights
Because PureBariatric does not collect personal information about you on our servers in v1.0, there is generally no profile to access, correct, or delete. If you believe we hold information about you and would like it reviewed, contact support@purebariatric.app. We will respond within 30 days.
Residents of jurisdictions with applicable privacy laws (including the EU/UK under GDPR, California under CCPA/CPRA, and Canada under PIPEDA) may exercise their rights through the same support address.
11. Changes to this policy
If we change this policy, we will update the "Last reviewed" date at the top of the page. Material changes will also be summarized inside the app on next launch.
12. Contact
Questions about privacy can be sent to support@purebariatric.app.
PureBariatric · Blackfalds, Alberta, Canada