Privacy Policy

Without an account. Everything you enter stays on your device. The App sends nothing about you to our servers except what is needed to answer a lookup you ask for (a barcode or a label photo, as described below).

Information you give us.

• Email address, when you sign up for our newsletter or contact us.
• Account information, when you create an account: your name, email address, and a password (stored only in hashed form).
• Profiles. An account can hold more than one diary, for example for a child or someone in your care. Each profile has a display name and its own entries. By creating a profile for someone else you confirm you are entitled to record that information.
• Preferences and targets: the nutrients you choose to track, your daily targets, your unit of measure, your theme, and your notification settings.
• Food and nutrition entries: the foods you log, the portion, the computed nutrients (including amino acids such as phenylalanine and tyrosine), the meal and time of the entry, any notes you add, and your favorites and recipes.
• Body and activity: height, weight and the body mass index derived from them, and exercise you log. In the Web App you can also enter your sex, birth year and activity level, and log water.
• Photos. When you photograph a nutrition label, the image is sent to our servers and to our AI provider only to read it. We do not keep it unless you choose to keep it with the food you create, in which case it is stored with your account until you delete the food. Our AI provider deletes the images it receives within 30 days.
• Co-op and rewards choices: whether you have opted in to the data co-op, which elections you made under the Data Reuse Consent, and, if you connect an account to withdraw rewards, the identifier of your Stripe account and whether it is enabled. We never see or store your bank details.
• Researcher requests: if you ask for a researcher account, the fact of the request and its outcome.

Information from devices and services you connect.

• Bluetooth kitchen scale: weight readings go directly to your device and are saved only as the portion on an entry you log.
• Bluetooth body scale: a weight you read in becomes the weight on your profile, marked as coming from a scale.
• Apple Health and Health Connect: if you connect them, the App reads your steps to show on your Today screen. We read only; we never write to them. Data read from Apple Health or Health Connect is shown to you on your device, is not stored on our servers beyond what the feature needs to display it, and is never sold, licensed, used for research, or used to train anything. This applies whatever elections you make in the co-op.

Information we collect automatically.

• Usage data: privacy-friendly, aggregate analytics on the Site. Our analytics are cookieless and are not used to identify you. The App and Web App carry no analytics or tracking SDK.
• Technical data: standard server and device information, such as IP address, browser or device type, and log data, used to operate and secure the Services.
• Audit records of security-relevant actions on your account (sign-ins, consent changes, deletions), kept to protect you and to show that your choices were honored.

• To send you the Phebe newsletter (product news and tips), if you signed up for it on the Site or chose it in the App or the Web App. Every newsletter has an unsubscribe link, and an account holder can turn it off in Account.
• To create and operate your account, keep your diary and targets, and keep them the same on your phone and the Web App.
• To compute nutrients from food data and the portions you confirm.
• To run the co-op and the rewards program as described in sections 3 and 4.
• To send account email, such as verification codes, password resets and notices about your account or our terms. These are sent whether or not you get the newsletter.
• To operate, secure, support and improve the Services.
• To comply with law and protect the rights and safety of our users and Phebe.

We do not sell or rent information that identifies you, and we do not share it for advertising.

Members may opt in to the Phebe data co-op. Opting in is a separate choice from using the Services; nothing in the App depends on it. If you opt in, you accept the Data Reuse Consent, which controls how your records may be reused and which elections you can make (commercial licensing, scientific research, or neither).

Only de-identified data is ever reused: your name, contact details and every other identifier are removed, dates become day offsets, free-text notes are dropped, and anything read from Apple Health, Health Connect or another vendor is excluded entirely. Recipients agree not to attempt to re-identify anyone. The de-identified data lives in a separate database from your account.

You can opt out at any time in the App or the Web App. Opting out stops further reuse of your records; data already disclosed under your election has no link back to you and cannot be recalled.

Keeping a diary earns streak rewards. To withdraw rewards you connect an account through our payments partner, Stripe, which collects your bank details and any identity information the law requires. Stripe handles that information under its own privacy policy; Phebe receives only the identifier of your connected account and whether it is enabled, and records the rewards it has paid. Withdrawing rewards requires co-op membership.

Researchers who license data through the Web App pay through Stripe. Phebe stores the subscription status and the email used for billing.

The App uses an AI service to read the nutrition labels you photograph. The AI suggests what the label says; Phebe computes the nutrients. Images are processed only to return your reading and are not used to train AI models. We do not keep them unless you keep them with a food; our AI provider deletes them within 30 days. Readings are approximate.

Food search runs against a database bundled with the App. A barcode you scan is looked up with Open Food Facts and the USDA; the barcode is the only thing sent.

We use a small number of providers that process data on our behalf, under agreements that limit their use of it:

• Cloudflare runs the App backend and stores label photos you keep.
• Neon provides the databases: one for accounts and diaries, a separate one for de-identified co-op data.
• Vercel hosts the Site and the Web App and provides cookieless analytics for the Site.
• Resend delivers account email and the newsletter, and keeps the newsletter list, including who has unsubscribed.
• Anthropic provides the AI service that reads label photos.
• Stripe handles rewards payouts and researcher payments.
• Open Food Facts and the USDA answer barcode lookups.
• MailerLite holds newsletter sign-ups made before August 2026.
• Apple and Google distribute the App through their stores.

We use only the minimal, essential cookies needed to run the Services. The Web App keeps your session and preferences in your browser’s storage. Our analytics are cookieless, and we do not use advertising or cross-site tracking cookies.

• Newsletter list: your address, until you unsubscribe or ask us to remove it. After you unsubscribe we keep the address marked as unsubscribed, so that we do not email you again. Deleting your account also takes you off the newsletter.
• Your account, profiles and entries: until you delete them or delete your account. Section 9 sets out what deleting an account removes and the little that is kept.
• Label photos: we delete them after the reading unless you keep one with a food; then until you delete the food or the account. Our AI provider deletes its copy within 30 days.
• De-identified co-op data: as described in the Data Reuse Consent; it is not linked to you.
• Audit and technical logs: for a limited period, to operate and secure the Services.

• Use Phebe without an account, and keep everything on your device.
• Export your diary and exercise as files from the Web App at any time.
• Delete an entry, a date range, a profile, or your whole account, as set out in section 9.
• Opt in to or out of the co-op, and change your elections, in Settings.
• Unsubscribe from the newsletter with the link in any newsletter, by turning off Product news in Account, or by emailing us.
• Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act, other US state privacy laws, the Washington My Health My Data Act, the EU and UK GDPR, and applicable health-data laws. We honor these rights and do not discriminate against you for exercising them.

The Services are available internationally. If you use them from outside the United States, your information may be processed in the United States, where privacy laws may differ from those in your country.

If you are located in the European Economic Area or the United Kingdom, you have rights under the EU and UK GDPR, including the rights to access, correct, delete, restrict and port your data, and to object to certain processing. Our legal bases for processing are your consent, the performance of our agreement with you, and our legitimate interests in operating and securing the Services. You may lodge a complaint with your local supervisory authority. We have not appointed a representative in the European Union or the United Kingdom; you may reach us about these matters at info@phebe.life.

The Services are intended for adults 18 and older. A profile for a child may be kept only by an adult account holder responsible for that child. We do not knowingly collect information directly from children. If you believe a child has provided us information, contact us and we will delete it.

We take reasonable measures to protect your information, including encryption in transit, hashed passwords, access controls, audit logging, and keeping de-identified data apart from accounts. No method of transmission or storage is completely secure, but we work hard to keep your data safe.

We may update this policy from time to time. The effective date above reflects the latest version. If we make material changes, we will provide notice through the Services.

Phebe Corporation
30 N Gould St, Ste R, Sheridan, WY 82801
info@phebe.life