BrainFuel (Mohammed Albastaki) ("we," "our," or "us") built BrainFuel as a subscription app that estimates a "Brain Fuel Score" from photos of your meals. This Privacy Policy explains what information BrainFuel collects, how we use it, and the choices you have.
By using BrainFuel, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the app.
Health disclaimer: BrainFuel provides estimates generated from photos for general wellness and informational purposes only. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Always consult a qualified health professional about your diet and health.
1. Information We Collect
Information You Provide Directly
Account information. BrainFuel uses Sign in with Apple. We receive a unique account identifier and, if you choose to share it, your name and email address. Apple may provide a private relay email address instead of your real address.
Meal photos. When you scan a meal, the photo you select or capture is sent to our backend for analysis (see Section 4). The resulting estimate (ingredients, Brain Fuel Score, suggestions) is stored on your device.
Support requests. If you contact us, we collect your email address and the contents of your message.
Health & Fitness Data
With your permission, BrainFuel reads hydration and sleep data from Apple HealthKit to refine your score. This access is read-only.
HealthKit data is processed on your device to compute on-screen meters. We do not sell HealthKit data, use it for advertising or marketing, or share it with third parties for those purposes, consistent with Apple's HealthKit requirements.
Information Collected Automatically
App data stored locally. Your meal history, hydration entries, daily scores, and preferences are stored on your device (SwiftData) and in an App Group container shared with the BrainFuel home-screen widget.
Usage counters. We store a per-day scan counter on your device and on our backend to operate the service and prevent abuse.
Device ID / advertising identifier (IDFA) & measurement events. With your permission (Apple's App Tracking Transparency prompt), your device's advertising identifier (IDFA) and related device identifiers, and app install, launch, and interaction events, are collected for advertising attribution and measurement. See Advertising and Measurement Partners (Section 5). If you do not grant permission, we do not access the IDFA, and attribution relies only on Apple's privacy-preserving SKAdNetwork.
Aside from the advertising measurement described in Section 5, we do not build advertising profiles from your in-app activity, and we do not track your browsing across other companies' apps or websites. Your account data (name, email, user ID, purchases) and your meal and health data are never shared with advertising partners.
2. How We Use Your Information
We use the information we collect to:
Provide BrainFuel's core functionality — analyzing meal photos and producing your Brain Fuel Score
Authenticate you and maintain your account
Read HealthKit hydration/sleep to refine your on-device score (with your permission)
Operate usage counters to protect against abuse
Process and manage subscriptions
Measure and attribute app installs to our advertising campaigns, with your App Tracking Transparency permission (see Section 5)
Respond to your support requests
Diagnose and fix technical problems
We do not sell your personal information, build advertising profiles from your in-app activity, or use your data to make automated decisions that produce legal or similarly significant effects.
3. How We Share Your Information
We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:
Service providers that operate BrainFuel on our behalf (see Section 4), under contractual confidentiality and security obligations.
Apple, which processes Sign in with Apple and all subscription billing.
Advertising and measurement partners (including TikTok), and only with your App Tracking Transparency permission, to attribute and measure app installs from our advertising (see Section 5).
Legal requirements, when required by law, regulation, legal process, or government request.
Safety, to protect the rights, property, or safety of BrainFuel (Mohammed Albastaki), our users, or the public.
Business transfers, if we are involved in a merger, acquisition, or sale of assets, in which case we will notify you.
Meal photos are transmitted to our Supabase Edge Function, which forwards them to the Google Gemini API for analysis. Our API key for Gemini is held only on the server and never ships in the app. We do not direct these providers to retain your meal photos for their own purposes; their handling of transmitted content is governed by their respective policies.
5. Advertising and Measurement Partners
To understand how people discover BrainFuel and to measure the effectiveness of our advertising, we work with third-party advertising and analytics partners, including TikTok (TikTok Pte. Ltd. and its affiliates).
With your permission — requested through Apple's App Tracking Transparency prompt — we and these partners may collect and process: your device's advertising identifier (IDFA) and related device identifiers; and app install, launch, and interaction events (for example, that you installed or opened the app after seeing an ad).
This information is used only to attribute app installs to advertising campaigns and to measure and improve those campaigns. If you do not grant permission, we do not access the IDFA, and attribution relies only on Apple's privacy-preserving SKAdNetwork, which shares aggregated, non-identifying data.
International data transfers. These partners may process your data on servers located outside your country of residence, including in the United States and other jurisdictions, under appropriate safeguards where required.
Your choices. You can withdraw tracking permission at any time in iOS Settings → Privacy & Security → Tracking. For more on TikTok's practices, see TikTok's privacy policy.
We carry out this processing in accordance with applicable data protection laws, including the UAE Personal Data Protection Law (PDPL), the Saudi Personal Data Protection Law, and, where applicable, the EU General Data Protection Regulation (GDPR).
6. Data Retention
Account data: Retained while your account is active. Deleted within 30 days of an account-deletion request.
Server scan records: Counters used to operate the service and prevent abuse are retained while your account is active and removed when your account is deleted.
Meal photos: Sent to the backend only to compute a score in real time; we do not store your meal photos on our servers as part of normal operation.
On-device data: Your meal history and preferences remain on your device until you delete them or uninstall the app.
7. Data Security
We implement reasonable technical and organizational measures to protect your information, including:
Encryption in transit (TLS/HTTPS) for all network communication
Storing your authentication session in the device Keychain
Server-side authentication on every backend request; analysis keys held only on the server
Access controls limiting who can access user data
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Your Choices and Rights
Account deletion. You can permanently delete your account and its server-side data from Profile → Delete Account in the app. This also clears your local data and signs you out.
Advertising / tracking. You can grant or withdraw permission for advertising measurement (IDFA) at any time in iOS Settings → Privacy & Security → Tracking. If withdrawn, we do not access the IDFA and rely only on Apple's aggregated SKAdNetwork.
HealthKit. You can revoke BrainFuel's access to Health data at any time in the Apple Health app or iOS Settings. The app continues to work with reduced functionality.
Notifications. Daily reminders are off by default and can be toggled in Profile → Notifications or iOS Settings.
Access, correction, export, and erasure. To request a copy, correction, or deletion of your personal data, contact us at brainfuelaiapp@gmail.com. We respond within 30 days.
For European Union / EEA & UK Residents (GDPR / UK GDPR)
Lawful bases: consent (HealthKit access, notifications, advertising measurement / IDFA), performance of a contract (providing the service and subscriptions), and legitimate interests (security, abuse prevention, product improvement).
You may access, correct, erase, restrict, or object to processing, request portability, and lodge a complaint with your local Data Protection Authority.
Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
For California Residents (CCPA/CPRA)
You may request the categories and specific pieces of personal information we hold, request deletion, and request correction.
We do not sell or "share" (as defined by the CPRA) your personal information.
We will not discriminate against you for exercising your rights.
You may access, correct, and erase your personal data, nominate a representative, and file a grievance with us or the Data Protection Board of India.
9. Children's Privacy
BrainFuel is not intended for children under 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at brainfuelaiapp@gmail.com and we will delete it.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last Updated" date and, where appropriate, notify you in the app. Your continued use of BrainFuel after changes are posted constitutes acceptance of the updated policy.