Privacy Policy

NibbleIQ is a food, drink, mood and body logging app, built by Aryabhatta Labs. This policy explains what information we collect, why we collect it, and the choices you have. We try to keep this policy short and honest. If anything is unclear, email us and we will explain.

Information we collect

Account information

• Email address — you sign in with Apple, with Google, or with an email address and password. We use it to identify your account and nothing else. If you use Sign in with Apple and choose to hide your address, we only ever see Apple's private relay address.
• Name — how we greet you in the app.
• Profile photo — if you sign in with Google, we store the photo URL Google provides so the app can show your picture. Apple and email accounts have none, and the app falls back to an initial.
• Password — email accounts only, stored as a one-way hash. We never store or see the password itself.

Profile information you enter

• Gender, year of birth, country of residence, native country
• Food preference (vegetarian, non-vegetarian, vegan, etc.) and cuisine preferences
• Health conditions you choose to share (e.g., diabetes, PCOS, hypertension)
• Height, weight, activity level

This information lets us personalise nutrition targets to you. You choose what to share.

What you log

• The text you type when logging a meal (e.g., "2 roti dal rice"), and the structured items, macros and nutrients we derive from it
• Drinks logged in one tap — water, tea, coffee and their companions
• Optional context tags (who you ate with, where, how rushed) — only if you add them
• Body measurements you choose to record (weight, waist, hip)
• Check-ins — if you fill them in: how you slept, how you felt on waking, your mood and energy, how digestion felt, how the day went, any symptoms you select, and any note you write
• The time on your own clock when you logged something, and your time-zone offset, so the app can show your day in your own hours

Health conditions, symptoms and mood are sensitive. You choose whether to record any of them, every entry can be edited or deleted, and none of them are ever sent to analytics.

Technical information

• Platform (iOS or Android) and app version
• Authentication tokens stored securely on your device
• A notification token for your device, if you turn notifications on — used only to deliver them, and removed when you turn them off or delete your account

Health data (with your permission)

If you grant permission, NibbleIQ reads a small set of daily values from Apple HealthKit or Google Health Connect: sleep (total, time awake, and the light, deep and REM stages where your device records them), steps, active energy burned, and resting heart rate. We only ever read; we never write anything back to Apple Health or Health Connect, and we never share this data with anyone else. You can revoke the permission in your device settings at any time. Only the daily summaries needed to show these figures beside your food are stored on our servers — not the underlying samples.

What we do not collect

• Your location
• Your contacts
• Your photos or camera feed — the only image we hold is the profile picture from Google Sign-In, and we store it as a link, not a copy
• Advertising identifiers
• Advertising or cross-app tracking networks (no Meta pixel, no ad SDKs)

How we use your information

• To run the app — authenticate you, save your logs, show your history.
• To personalise your reference intakes — work out which published reference set applies to you, from your profile and conditions, so the numbers you see are the ones meant for someone like you.
• To parse your meals — the text you type is sent to our AI provider (OpenAI) to extract structured nutrition data. Alongside it we send the profile details that change how the text should be read — your food preference, cuisine origin, any health conditions you recorded, and your running totals for the day — so that portions and food names are interpreted for you rather than generically. Your name, email and account identifier are never sent. Requests are processed one at a time and are not used to train models.
• To generate insights — summaries and counts drawn from your own logged days, computed either on our servers or, for the written summaries, via our AI provider.
• To improve the product — anonymised, aggregated usage patterns help us spot bugs and improve the app.

Third-party services we use

• OpenAI — to parse meal text and phrase insight summaries, as described above. No name, email or account identifier is attached.
• Sign in with Apple — to authenticate you. We receive an identifier and, unless you hide it, your email. Apple does not receive your logs.
• Google Sign-In — to authenticate you. We receive your email and profile photo; Google does not receive your logs.
• Google Analytics for Firebase — to understand how the app is used in aggregate: which screens are opened, where people stop during sign-up, and whether logging continues over time. This is product usage data, not your food, mood or health content. It is used to improve the app and is never used for advertising.
• Firebase Cloud Messaging — to send notifications you have turned on.
• Apple HealthKit / Google Health Connect — with your permission, to read the sleep and activity values listed above from your device. Read-only.
• Hosting providers — our database and servers are hosted with reputable cloud providers under standard data-processing agreements.

We never sell your data. We never share it for advertising, and we do not use analytics to build advertising profiles. Your food logs, moods, symptoms and health conditions are never sent to analytics — only anonymous usage events such as "opened Insights" or "completed onboarding step 3".

Storage and retention

Your data is stored in a secure database and retained while your account is active. When you delete your account, the deletion happens immediately and in full — your account and every row belonging to it are removed from our database in that moment, not queued for later review. Encrypted backups are rotated on a rolling schedule, so a copy may persist in backup storage briefly until the backup holding it is overwritten.

Your rights

The two that matter most are built into the app, so you never have to ask us:

• Deletion — Profile → Delete account. Removes your account and every row of your data, immediately.
• Portability — Profile → Download my data. Returns a zip of spreadsheets, one per signal: meals, foods, body measurements, water, check-ins, your days, and every entry you submitted.
• Correction — anything the app recorded about you can be edited or deleted in place, including individual meals, measurements and check-ins.
• Access — the export above is a complete copy. If you would rather we sent it, ask.

For anything else — or if you cannot reach the app — email ask@aryabhattalabs.com with a subject line describing your request (for example, "Data Deletion Request"). We respond within 30 days, and usually much sooner.

Children

NibbleIQ is for adults: you must be at least 18 to use it, as set out in our Terms of Service. It is not directed at children and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.

Changes to this policy

If we make a material change, we will update the effective date above and, where appropriate, notify you in the app. Continued use of NibbleIQ after a change means you accept the updated policy.

Questions? Email ask@aryabhattalabs.com.