This Privacy Policy describes how Boba handles your information. Boba is built around a single principle: your data stays on your phone. We've designed the app so we cannot see, collect, or transmit any of your nutrition data, photos, or health information.
1. The short version
- We collect nothing. Boba runs entirely on your device.
- No accounts. You don't create a profile, log in, or hand over an email.
- No cloud. Your meals, photos, weight, and goals never leave your phone.
- No food analytics. We don't know what you eat. We don't track your scans.
- Open Food Facts barcode lookups. When you scan a barcode, Boba queries the public Open Food Facts API to fetch product nutrition. The query contains only the barcode number — no personal data, no identifier.
- No analytics SDKs. Boba does not integrate any third-party analytics or crash-reporting service. Anonymous OS-level crash logs may be sent to Apple if you have iOS Analytics enabled in your device settings — that is a system feature, not a Boba one.
2. What stays on your device
Everything you enter into Boba — your name, age, height, weight, target weight, dietary preferences, allergies, meal photos, scanned barcodes, NOVA grades, calorie targets, and macro logs — is stored locally on your iPhone using the iOS sandbox. None of it is uploaded to our servers, because we do not run servers that receive your data.
3. Network requests
Boba makes outbound network requests in only one situation: when you scan a barcode, the app queries the Open Food Facts API (world.openfoodfacts.org) with the barcode you scanned to retrieve the product's name and nutrition. This is a stateless lookup and contains no personal information about you. If you never scan a barcode, Boba never connects to the internet for any reason.
Open Food Facts is an open public database. Their privacy practices are described at openfoodfacts.org. We do not control what they log on their side, but the request from Boba carries only the barcode digits.
4. AI and on-device models
Boba's food recognition runs entirely on your device using a quantised vision-language model. The model is bundled inside the Boba app itself — it ships with the binary you download from the App Store, so no separate download is needed and no part of the model touches the network at runtime. All inference happens locally — your photos are never uploaded to a server for analysis. We do not see your meal photos, ever.
5. Children
Boba is not intended for children under 13. Because Boba does not require an account and does not collect any personal data, we have no way to identify or single out any user. We do not knowingly collect data from anyone, including children.
6. Your control
Because everything is local, you control your data completely. To delete all your data, simply delete the Boba app from your phone — every meal, photo, and setting is removed immediately, and there is nothing on a server that needs to also be deleted.
7. Changes to this policy
If we ever change how Boba handles data — for instance, if we add an optional cloud-sync feature in the future — we will update this policy and prominently notify you in the app before any change takes effect. We will never quietly start collecting data.
8. Contact
Questions about privacy? Email us at support@doses.ai.