Privacy Policy

Last updated October 15, 2026

Overview

Protein Tracker is a local-first nutrition journal. No account is required for the core app. This notice explains data stored on your device, optional Apple services, food lookup requests, AI estimates, and product analytics controls.

Nutrition and journal data

Entries, food names, goals, reminders, history, corrections, and provenance are stored locally using Apple platform storage. They remain until you edit them, delete them, or use Delete All Data. Raw CSV and JSON export are available from Settings.

Photos, voice, and recognition

Recognition starts only after your action and permission. Temporary photos, audio, and transcripts are removed after the editable draft flow unless you explicitly request otherwise. Apple Speech may process speech on device or through Apple depending on device, language, and system availability.

AI estimates

Photo, Label, Voice, and Estimate with AI send what you choose to analyze — a meal photo, a label photo, a food name, or your voice transcript — over an encrypted connection to our server, hosted on Cloudflare, which passes it to Google's Gemini AI to estimate nutrition. Our server does not store it. Google does not use it to train its models and may keep it for a limited time only to detect abuse, under its Gemini API terms. Nothing is sent before you agree in the app. Without a connection, Label and Voice fall back to reading on this device.

Service protection

To keep AI estimates for genuine copies of the app, the app registers an Apple App Attest key with our server. The server keeps that key and a daily request count. They are not linked to your name, Apple ID, or journal.

Food search and barcode lookup

When you use Search or Barcode, the query or barcode and ordinary network metadata are sent to Open Food Facts to return product information. Do not enter personal or medical information into search. Open Food Facts handles its service data under its own terms and privacy policy. Manual logging remains available offline.

Optional Apple services

StoreKit processes purchases and subscription status through Apple. Apple Health access is opt-in and uses Apple permissions. Family Sharing may share subscription eligibility, but Protein Tracker does not share nutrition journal content with family members. Apple's privacy terms apply to those services.

Product analytics

If anonymous product analytics is enabled, Protein Tracker records only allowlisted technical and product events such as app version, OS major/minor, locale/country, tracking mode, source type, entitlement category, anonymous install/session IDs, experiment assignment, plan, and selected Pro feature. Exact grams, calories, goals, food names, barcodes, transcripts, photos, and Health values are prohibited. In this release the bounded analytics journal stays on this device and has no network uploader.

Retention, deletion, and security

Local journal data remains until you delete it. The analytics journal is bounded and rotated on device. Delete All Data removes local nutrition content, temporary recognition media, caches, allowance state, and the anonymous analytics install ID; it does not cancel an App Store subscription. Files use Apple data protection where available. No system can guarantee absolute security.

Your choices and contact

You can disable analytics, revoke permissions in iOS Settings, export raw data, delete local data, and manage subscriptions through Apple. Privacy requests or questions can be sent to support@yolkpal.com. Rights may also apply under the law where you live.

Changes

Material changes to data handling require an updated notice, privacy manifest review, and an appropriate in-app disclosure before the changed processing begins.