Privacy policy
Balanza ("the app") is a personal nutrition tracker. This policy says exactly what data the app collects, what it is used for, and who it is sent to. It is written to be precise, not generic.
No account, no personal identification
There is no registration, login, username, email or password in the app. On first install a random anonymous id is created, stored on the device, and used to link your data to the server. We do not collect a name, an email address, a phone number or a precise location. The device's advertising id is used only by Google's advertising SDK (see "Advertising" below) and is never linked to your food or health data.
What is stored
The data you enter is stored on Cloudflare's infrastructure (a D1 database), tied to the anonymous install id and encrypted in transit (HTTPS):
- Health and fitness data: weight, waist circumference, height, year of birth, sex, activity level and goal weight.
- Your food diary: the foods and amounts you logged and their nutrition values.
- Saved meals and the personal food list built from your own use.
- The language you chose in the app.
Food photos and free text: sent, never stored
When you photograph a meal, photograph a nutrition label, or write a free-text description of what you ate, the content is sent to an AI service to recognise the foods and extract their nutrition values: photos to Anthropic (the Claude model), text descriptions to OpenAI (a GPT model). Food photos are never stored on our servers: they are processed inside the request and discarded as soon as the values are extracted, and they are used for nutrition recognition only.
External food lookups
To look up nutrition values the app talks to Open Food Facts and USDA FoodData Central. Only food names or barcodes are sent to these services, never any personal data.
Usage data
To understand which parts of the app are useful and which are confusing, the app records basic usage events: that the app was opened, that a food was logged (and by which method: photo, barcode, text), that a weight was logged, that the progress screen was viewed. These are labels only: nothing you typed is ever stored in them, no food names, no amounts, no personal values. The events go to the app's own server only (the same Cloudflare infrastructure that holds the rest of the data), encrypted in transit, tied to the same anonymous id, and are shared with no third party. There is no third-party analytics library in the app. The server also records the country a request came from (country level only, no IP address and no coordinates), to know where the app is used. "Delete all data" deletes these events too.
Advertising
The app is free and funded by a few unobtrusive ads served through Google AdMob. To show ads, Google's SDK may collect the device's advertising id and basic usage data, under Google's privacy policy. Your health and food data is never shared with Google or with advertisers: the ad system is entirely separate from the app's data. In the European Economic Area and the United Kingdom a consent form is shown as the law requires, and you can decline.
What we do not do
- We do not sell your data. Health and food data is not used for advertising and is not shared with any advertising party.
- Notifications are local to the device only.
How long data is kept
- Health data and the food diary: kept for as long as you use the app. No automatic deletion, so your history and trends are not lost.
- Immediate and complete deletion: "Delete all data" on the Settings screen permanently erases all your data from the server, immediately and with no copies. The action cannot be undone.
- Food photos: never stored (zero days).
- Deleting the app without deleting the data: the anonymous id is removed from the device, and the data stays on the server permanently detached from any person: it cannot be linked to you, recovered or accessed except with the recovery code you kept. Use "Delete all data" before removing the app. For deletion questions: support@maazan.info.
- Technical counters: a daily count of AI requests (a number only, no content) is kept to prevent abuse.
Control over your data
- Export: all data can be exported as a file from the Settings screen.
- Deletion: "Delete all data" in Settings permanently erases every entry from the server and resets the install.
- Recovery: the recovery code in Settings brings your data back on a new device.
Children
The app is not directed at people under 13 and does not knowingly collect data from them.
Changes
When this policy changes, the date at the top of the page is updated. Material changes are announced inside the app.
Contact
For any privacy question: support@maazan.info