Privacy Policy
- Your meals, weight and profile are health data. We use them only to run the app for you.
- No ads, no tracking, no analytics or crash-reporting tools, and we never sell or share your data for marketing.
- The text you type for a meal or an activity goes to an AI service (Anthropic's Claude) to work out the calories. Your name, email, weight and history do not go with it.
- You can delete everything at any time: Settings → Delete my data.
- Meal reminders are set up on your phone only; we do not send push messages and keep no reminder data on our server.
- Next Bite is for adults: you must be 18 or older.
1. Who we are
Next Bite is made by FOP Myroslav Kuzmych, a sole proprietor registered in Ukraine, 16 Petrasha Street, Yaremche, Ivano-Frankivsk Oblast, 78500, Ukraine ("we", "us"). We decide how your data in Next Bite is used (under the GDPR we are the "controller").
Contact for anything about privacy: privacy@getnextbite.app.
2. Information we collect
2.1 Information you give us
You can use Next Bite without giving a name or an email. When you first open it, the app creates an account with a random ID. Here is everything linked to that ID:
| Data | Examples | Where it comes from |
|---|---|---|
| Profile | sex, year of birth and height (both optional when you type your own target), activity level, goal, daily calorie target and whether you typed it yourself, units, app language, meals per day, whether you switched on water tracking and weight sync | you |
| Consent | the date you accepted and which version of the text | the app |
| Food diary | the text you typed for each meal, the foods, calories, protein, fat and carbs, the meal time; foods you saved for yourself | you, and the AI meal check |
| Activities and water | activity name, minutes, calories burned; glasses of water | you |
| Weight | your weight, the date, and whether you typed it or it came from Apple Health / Health Connect | you, or Apple Health / Health Connect if you switch on sync |
| Feedback | notes you send us from the app, their topic, and the app language. Please do not write health details or contact data in them: the team reads them. | you |
| Saved account (optional) | your email address, or the ID and email Apple give us when you save your diary with Sign in with Apple (you may choose Apple's "Hide My Email"; your name only if you let Apple share it). | you, Apple |
| Subscription | whether you have Next Bite Pro, which plan, which store, when it renews or ends. We never see your card or payment details: Apple or Google take the payment. | Apple, Google, via RevenueCat |
| Usage limits and service records | how many AI meal checks you used today; for each check, its cost, speed and whether it worked; meal texts the AI could not read; texts that were not about food or tried to misuse the AI; the AI's answer to a meal text, saved for repeat meals | the app's server |
| Sign-in sessions and server logs | the IP address and device or browser type of the phone that signs in, and the time; technical logs of requests to our server. Used only to keep your account secure and the service working, never to find your location. | your phone, Supabase |
We do not ask for your real name, phone number, address or contacts. If you write them in a feedback note, we will read and keep them as part of that note (see section 7), so please don't.
Kept on your phone only (never sent to us): your reminder settings (which meals, the weekly summary), the app language and appearance, and small notes such as which tips you already saw. Meal reminders are local notifications that your phone schedules itself; we use no push service and store no device token. A weekly summary reminder shows the number of days you logged and your average calories, worked out on your phone from your diary.
2.2 Information collected automatically
Next Bite contains no advertising, analytics or crash-reporting tools (no Google Analytics, Firebase or Crashlytics, and no advertising ID). We do not track you across apps or websites. Even so, when your phone connects to our servers, some technical data is processed automatically, as with any online service:
- IP address and the time of the request, and the type of device and operating system, as part of the connection. Our database provider (Supabase) keeps these in its server logs for a short time (section 7). We use them only to deliver the service, to limit abuse (for example how many accounts one connection can create), and to fix faults.
- Purchase data: RevenueCat, which handles subscription status for us, receives your random account ID, your store purchase information, and technical data it needs for that (such as IP address, device type and app version).
- This website sets no cookies and has no analytics. Our hosting provider, Cloudflare, keeps ordinary access logs (IP address, page, time) for security and may count visits without identifying you.
Your meals, weight, body data and diet are health data (special category data under the GDPR). We process them only because you explicitly agree to it on the first screen.
3. The AI meal check
When you log a meal or an activity, the text you typed and the app language are sent from our server to Anthropic (the Claude AI model) to split it into foods and estimate calories. Your account ID, email, weight, profile and history are not sent with it.
Anthropic processes this text on our behalf. Under its commercial terms it does not use this text to train its models, and it deletes it within 30 days. Only text that its automated safety systems flag as breaking its usage policy may be kept longer, for up to 2 years.
To look up nutrition values, our server then searches the public food databases USDA FoodData Central and Open Food Facts with food names only (for example "rye bread"). Nothing that identifies you is sent to them.
So that the same meal does not need a second AI check, we keep the AI's answer for your text for 30 days, linked to your account.
The "Ask any AI" button only prepares a text on your phone and opens your phone's share menu. Nothing is sent by us; if you share it with another app, that app's own privacy terms apply.
If we ever move the AI meal check to another provider, we update this section, the table in section 5 and the version of this policy first.
The calorie values are estimates. No decision with legal or similar effect is made about you by any automated process.
4. How we use your information
We use your information only to:
- provide and maintain Next Bite: keep your diary, work out your target, count calories with the AI, show your progress, and let you save your diary and move to a new phone;
- manage subscriptions and the free trial, and unlock Pro on your account;
- keep the service safe and affordable: daily AI limits, blocking misuse, finding and fixing faults;
- improve the app, by reading the feedback you send us and the meal texts the AI could not read;
- support you when you write to us, and send service messages (sign-in codes, important changes to the terms or this policy).
We do not use your data for advertising, profiling, or to train AI models, and we send no marketing emails.
| Purpose | Legal basis (GDPR) |
|---|---|
| Keep your diary, work out your target, show your progress (health data) | your explicit consent (art. 9(2)(a)) and our contract with you (art. 6(1)(b)) |
| The AI meal check | your explicit consent and our contract |
| Saving your diary with Apple or email; sign-in codes | our contract with you |
| Subscriptions and the free trial | our contract with you |
| Daily AI limits, blocking misuse, keeping the service safe and working | our legitimate interest in a secure, affordable service (art. 6(1)(f)) |
| Reading your feedback to improve the app | our legitimate interest |
You can withdraw your consent at any time by deleting your data (section 12). This does not affect what was done before.
5. Third-party services
We use a few providers to run Next Bite. They act on our instructions under data processing agreements and may not use your data for their own purposes.
| Provider | What for | What they get |
|---|---|---|
| Supabase Inc. | database, sign-in and the emails with sign-in codes, our server functions | everything in section 2.1, plus connection data (2.2) |
| Anthropic PBC | the AI meal check | the meal or activity text and the app language |
| RevenueCat Inc. | subscription status from Apple and Google | your random account ID and your purchase history in Next Bite |
| Apple, Google | app stores, payments, optional Sign in with Apple, Health data on your phone | what you give them under their own terms; we receive only what is listed in section 2 |
| USDA FoodData Central, Open Food Facts | public nutrition values | food names only, nothing that identifies you |
| Cloudflare, Inc. | this website | ordinary access logs |
We do not sell your data, share it for advertising, or give it to data brokers. We would only disclose it if the law requires it, and then only as much as required.
6. Where it is stored
Your data is stored by Supabase in the European Union (Frankfurt, Germany). Anthropic and RevenueCat are in the United States. When data leaves the EU, the UK or Ukraine, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
7. How long we keep it
| Data | Kept |
|---|---|
| Profile, diary, weight, activities, water, saved foods, subscription status | until you delete them or your account |
| Feedback notes | 180 days |
| Saved AI answers for repeat meals | 30 days |
| Meal texts the AI could not read; texts flagged as misuse | 30 days |
| Records of each AI check (cost, speed, result; no meal text) | 90 days |
| Daily count of AI checks (numbers only) | until you delete your account |
| Accounts never saved with Apple or email, and not used for 12 months (opening the app counts as use) | deleted with all their data after 12 months (an active subscription keeps the account) |
| Sign-in sessions; server logs | sessions until you sign out or delete your data; logs 7 days |
| Reminder settings and other data on your phone | until you change them, delete your data in the app (reminders and their settings), or remove the app |
| Database backups | deleted data disappears from backups within 7 days |
Apple and Google keep their own records of your purchases under their terms and tax law. RevenueCat keeps the purchase history linked to your random account ID until you delete your data; deleting your data in the app deletes it at RevenueCat too.
8. Apple Health and Health Connect
If you switch on weight sync, Next Bite reads only your weight from Apple Health (iPhone) or Health Connect (Android). It never writes to them and reads nothing else. You can switch this off in Settings, or remove the permission in Apple Health or Health Connect, at any time.
Data from Apple Health and Health Connect is used only to show your weight in Next Bite. It is never used for advertising or marketing, never sold, and never shared with anyone except to store it as described above.
9. Data security
We use reasonable technical and organisational measures to protect your data:
- data travels encrypted (HTTPS) and is encrypted at rest by our database provider;
- each account can read only its own rows (row-level security); service records and logs can be read only by us;
- access to the production database and to API keys is limited to us, and keys are kept out of the app;
- every provider that handles your data is bound by a data processing agreement.
No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the authorities as the law requires.
10. Children's privacy
Next Bite is not intended for children. You must be 18 or older to use it. We do not knowingly collect personal data from anyone under 18 (and in no case from children under 13, or under 16 where the law of your country sets that age). If you believe a child is using Next Bite, write to us and we will delete the account and its data.
11. Your rights (GDPR, CCPA and others)
Wherever you live, you can ask us to:
- access the data we hold about you and get a copy (in a machine-readable form);
- correct it (most of it you can edit in the app);
- delete it (in the app, see section 12);
- restrict or object to how we use it;
- withdraw your consent at any time.
Write to us at the address in section 14. Because accounts are anonymous unless you save them, we may need you to send the request from inside the app or from the email you saved your diary with, so that we give your data only to you. We answer within one month (within 45 days for California requests).
EU, UK and EEA (GDPR): the rights above apply to you in full, plus data portability. You can complain to the data protection authority of your country; in the UK, the ICO. Ukraine: the Ukrainian Parliament Commissioner for Human Rights.
California and other US states (CCPA/CPRA and similar laws): you have the right to know what personal information we collect and why (this policy), to access it, to correct it, to delete it, and not to be discriminated against for using these rights. We do not sell your personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We use health data only to provide Next Bite, as described here, with your consent. Under health-data laws such as Washington's My Health My Data Act, the same applies: we collect and share consumer health data only as this policy describes. You may use an authorised agent to make a request.
12. Deleting your data
In the app: Settings → Delete my data. This deletes your account and everything linked to it on our server at once: profile, diary, weight, activities, water, saved foods, feedback, saved AI answers, limits and service records, your saved sign-in and your subscription status in Next Bite. We also delete your purchase history at RevenueCat. It cannot be undone. Your phone then shows a fresh start.
If you saved your diary with Sign in with Apple, the app first asks Apple to confirm and then revokes Next Bite's access to your Apple ID, so Next Bite no longer appears under "Sign in with Apple" in your Apple ID settings. If that step fails, your data is still deleted; you can then remove Next Bite there yourself.
Deleting your data in the app also cancels every reminder your phone has scheduled and clears your reminder settings on that phone.
Deleting your data does not cancel a subscription: cancel it in your App Store or Google Play settings. More on this, and how to ask for deletion without the app: Delete your Next Bite data.
13. Changes to this policy
When we change this policy, we change the version and date at the top. If the change is important, the app will ask you to read and accept it again before you go on.
14. Contact
FOP Myroslav Kuzmych
16 Petrasha Street, Yaremche, Ivano-Frankivsk Oblast, 78500, Ukraine
Email: privacy@getnextbite.app