Privacy Policy

Effective date: March 13, 2026 · Last updated: March 13, 2026

Summary: ProteinPilot stores your data locally on your device. We do not collect personal information, require account creation, or sell your data. Your protein tracking data stays on your phone.

1. Introduction

This Privacy Policy explains how ProteinPilot ("we," "our," or "the app") collects, uses, and protects your information when you use the ProteinPilot: Protein Tracker application for iOS.

ProteinPilot is designed with a privacy-first, offline-first approach. The app works fully without an internet connection, and the vast majority of your data never leaves your device.

2. Information We Collect

2.1 Data Stored Locally on Your Device

The following data is stored locally in an SQLite database on your device and is never transmitted to our servers:

  • Food log entries (foods logged, protein amounts, dates)
  • Daily protein goals and targets
  • Body stats (weight, height, activity level) used to calculate your protein target
  • Custom foods you create
  • Saved/favorite foods
  • Daily streak data
  • App settings and preferences (theme, units, haptics)

2.2 iCloud Sync

If you enable iCloud backup (optional), your local database is backed up to your personal Apple iCloud account using Apple's iCloud storage. We do not have access to your iCloud data. This backup is governed by Apple's Privacy Policy.

2.3 Camera and Photo Library

ProteinPilot may request access to your camera and photo library for the following purposes:

  • Barcode scanning: Camera is used to scan food product barcodes for quick nutritional lookup.
  • AI food recognition (Pro feature): Photos of meals are sent to OpenAI's API for food identification. These images are processed in real-time and are not stored by us after processing. OpenAI's data usage is governed by their Privacy Policy.
  • Meal photos: If you choose to attach a photo to a food entry, it is stored locally on your device only.

Camera and photo library access is only activated when you explicitly initiate a scan or photo action.

2.4 Subscription Data

In-app purchases and subscriptions are processed by RevenueCat, our subscription management platform. RevenueCat receives:

  • An anonymous, randomly-generated user identifier
  • Purchase and subscription status information
  • No personal information (name, email, etc.) is shared with RevenueCat

See RevenueCat's Privacy Policy for details on their data handling.

2.5 Analytics and Crash Reporting

We use Firebase Analytics and Firebase Crashlytics to improve app stability and understand how features are used. This data includes:

  • Anonymized usage events (e.g., screens viewed, features used)
  • Crash reports and error logs
  • Device type and OS version

No personally identifiable information (PII) is collected through analytics. No names, emails, or account identifiers are transmitted. See Firebase Privacy Information.

2.6 Food Search Data

When you search for foods, search queries are sent through our Cloud Functions proxy to the FatSecret API to retrieve nutritional information. No user identity is associated with these search requests. Results are cached locally on your device for 24 hours to reduce network requests.

3. Information We Do Not Collect

ProteinPilot does not collect, store, or transmit:

  • Your name, email address, or any account information (no account required)
  • Location data or GPS coordinates
  • Contacts or address book information
  • Advertising identifiers (IDFA)
  • Cross-app tracking data
  • Health data from Apple HealthKit (not integrated)
  • Browsing history or data from other apps

4. Third-Party Services

ProteinPilot integrates with the following third-party services:

5. Data Retention

Your food tracking data is stored locally on your device and persists until you:

  • Delete the app (removes all local data permanently)
  • Manually clear data within the app
  • Delete data from your iCloud account (if backup was enabled)

RevenueCat retains subscription records according to their data retention policy. Firebase Analytics data is retained for up to 14 months.

6. Your Rights (GDPR / CCPA)

Since ProteinPilot stores data locally on your device, you inherently control your own data. You have the right to:

  • Access: View all your data directly within the app
  • Delete: Remove your data by deleting the app or clearing data within settings
  • Portability: Your data is stored in a standard SQLite database on your device
  • Opt-out of analytics: Disable analytics in your device's privacy settings

For any data held by third-party services (RevenueCat subscription records), contact us at support@proteinpilot.io and we will assist with your request.

California residents (CCPA): We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

7. Children's Privacy

ProteinPilot is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date at the top of this page and communicated through app update release notes. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Email: support@proteinpilot.io