BrainFuel (Mohammed Albastaki) ("we," "our," or "us") built BrainFuel as a subscription app that estimates a "Brain Fuel Score" from photos of your meals. This Privacy Policy explains what information BrainFuel collects, how we use it, and the choices you have.
By using BrainFuel, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the app.
Health disclaimer: BrainFuel provides estimates generated from photos for general wellness and informational purposes only. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Always consult a qualified health professional about your diet and health.
1. Information We Collect
Information You Provide Directly
Account information. BrainFuel uses Sign in with Apple. We receive a unique account identifier and, if you choose to share it, your name and email address. Apple may provide a private relay email address instead of your real address.
Meal photos. When you scan a meal, the photo you select or capture is sent to our backend for analysis (see Section 4). The resulting estimate (ingredients, Brain Fuel Score, suggestions) is stored on your device.
Support requests. If you contact us, we collect your email address and the contents of your message.
Health & Fitness Data
With your permission, BrainFuel reads hydration and sleep data from Apple HealthKit to refine your score. This access is read-only.
HealthKit data is processed on your device to compute on-screen meters. We do not sell HealthKit data, use it for advertising or marketing, or share it with third parties for those purposes, consistent with Apple's HealthKit requirements.
Information Collected Automatically
App data stored locally. Your meal history, hydration entries, daily scores, and preferences are stored on your device (SwiftData) and in an App Group container shared with the BrainFuel home-screen widget.
Usage counters. We store a per-day scan counter on your device and on our backend to operate the service and prevent abuse.
We do not use third-party advertising or cross-app tracking SDKs, and we do not track you across apps or websites owned by other companies.
2. How We Use Your Information
We use the information we collect to:
Provide BrainFuel's core functionality — analyzing meal photos and producing your Brain Fuel Score
Authenticate you and maintain your account
Read HealthKit hydration/sleep to refine your on-device score (with your permission)
Operate usage counters to protect against abuse
Process and manage subscriptions
Respond to your support requests
Diagnose and fix technical problems
We do not sell your personal information, build advertising profiles, or use your data to make automated decisions that produce legal or similarly significant effects.
3. How We Share Your Information
We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:
Service providers that operate BrainFuel on our behalf (see Section 4), under contractual confidentiality and security obligations.
Apple, which processes Sign in with Apple and all subscription billing.
Legal requirements, when required by law, regulation, legal process, or government request.
Safety, to protect the rights, property, or safety of BrainFuel (Mohammed Albastaki), our users, or the public.
Business transfers, if we are involved in a merger, acquisition, or sale of assets, in which case we will notify you.
Meal photos are transmitted to our Supabase Edge Function, which forwards them to the Google Gemini API for analysis. Our API key for Gemini is held only on the server and never ships in the app. We do not direct these providers to retain your meal photos for their own purposes; their handling of transmitted content is governed by their respective policies.
5. Data Retention
Account data: Retained while your account is active. Deleted within 30 days of an account-deletion request.
Server scan records: Counters used to operate the service and prevent abuse are retained while your account is active and removed when your account is deleted.
Meal photos: Sent to the backend only to compute a score in real time; we do not store your meal photos on our servers as part of normal operation.
On-device data: Your meal history and preferences remain on your device until you delete them or uninstall the app.
6. Data Security
We implement reasonable technical and organizational measures to protect your information, including:
Encryption in transit (TLS/HTTPS) for all network communication
Storing your authentication session in the device Keychain
Server-side authentication on every backend request; analysis keys held only on the server
Access controls limiting who can access user data
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Choices and Rights
Account deletion. You can permanently delete your account and its server-side data from Profile → Delete Account in the app. This also clears your local data and signs you out.
HealthKit. You can revoke BrainFuel's access to Health data at any time in the Apple Health app or iOS Settings. The app continues to work with reduced functionality.
Notifications. Daily reminders are off by default and can be toggled in Profile → Notifications or iOS Settings.
Access, correction, export, and erasure. To request a copy, correction, or deletion of your personal data, contact us at brainfuelaiapp@gmail.com. We respond within 30 days.
For European Union / EEA & UK Residents (GDPR / UK GDPR)
Lawful bases: consent (HealthKit access, notifications), performance of a contract (providing the service and subscriptions), and legitimate interests (security, abuse prevention, product improvement).
You may access, correct, erase, restrict, or object to processing, request portability, and lodge a complaint with your local Data Protection Authority.
Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
For California Residents (CCPA/CPRA)
You may request the categories and specific pieces of personal information we hold, request deletion, and request correction.
We do not sell or "share" (as defined by the CPRA) your personal information.
We will not discriminate against you for exercising your rights.
You may access, correct, and erase your personal data, nominate a representative, and file a grievance with us or the Data Protection Board of India.
8. Children's Privacy
BrainFuel is not intended for children under 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at brainfuelaiapp@gmail.com and we will delete it.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last Updated" date and, where appropriate, notify you in the app. Your continued use of BrainFuel after changes are posted constitutes acceptance of the updated policy.