This Privacy Policy describes how Boba handles your information. Boba is built around a single principle: your meals, photos and health data stay on your phone. We've designed the app so we cannot see any of your nutrition data, photos or health information.
1. The short version
- Your meals and photos never leave your phone. Food recognition runs on your device, and everything you log is stored on it.
- No accounts. You don't create a profile, log in, or hand over an email.
- Anonymous counts only. Boba adds one to a few shared tallies: when the app opens, and at steps of the first-run setup. A tally has no account, no device or advertising ID, nothing you entered and no health data, so it can't be linked to you.
- We don't know what you eat. Your scans, meals and photos are never counted or sent.
- Apple Health steps, if you allow it. When you tap the Health circle on Home, Boba asks to read today's step count from Apple Health and shows it there. It only reads steps, never writes to Health, and your Health data never leaves your iPhone.
- Open Food Facts barcode lookups. When you scan a barcode, Boba queries the public Open Food Facts API to fetch product nutrition. The query contains only the barcode number — no personal data, no identifier.
- No third-party analytics or ads. Boba doesn't include any third-party analytics, advertising or crash-reporting service. Anonymous crash logs may be sent to Apple if you share analytics with app developers in your phone's settings — that is a system feature, not a Boba one.
2. What stays on your device
Everything you enter into Boba — your name, age, height, weight, target weight, dietary preferences, allergies, meal photos, scanned barcodes, NOVA grades, calorie targets, and macro logs — is stored locally on your phone. None of it is uploaded anywhere.
3. Network requests
Boba connects to the internet for three small things:
- Barcode lookups. When you scan a barcode, the app queries the Open Food Facts API (world.openfoodfacts.org) with that barcode to retrieve the product's name and nutrition. The request carries only the barcode digits. Open Food Facts is an open public database; their privacy practices are described at openfoodfacts.org, and we don't control what they log on their side.
- Anonymous tallies. Boba adds one to shared counters in Doses AI's own database on Google Cloud: each time the app opens, and when the first-run setup starts, finishes, shows the price, leads to a purchase, or shows or opens the rating prompt. Each update says only which of these happened, which version of the setup it was and, for app opens, the day. It contains no account, device or advertising identifier, nothing you typed or photographed, and no health data.
- Setup settings. Boba reads a small settings file that decides which version of the first-run setup you see. The choice is made on your phone and is never sent back.
4. AI and on-device models
Boba's food recognition runs entirely on your device using a vision-language model that comes with the app. All inference happens locally — your photos are never uploaded to a server for analysis. We do not see your meal photos, ever.
5. Children
Boba is not intended for children under 13. Because Boba does not require an account and its tallies can't identify anyone, we have no way to identify or single out any user. We do not knowingly collect personal data from anyone, including children.
6. Your control
Because everything you enter is stored on your phone, you control it completely. To delete all your data, simply delete the Boba app from your phone — every meal, photo, and setting is removed immediately. The anonymous tallies can't be traced to you, so there is nothing on a server tied to you.
7. Changes to this policy
If we ever change how Boba handles data — for instance, if we add an optional cloud-sync feature in the future — we will update this policy and prominently notify you in the app before any change takes effect.
8. Contact
Questions about privacy? Email us at support@doses.ai.