Privacy Policy

Effective 1 October 2026

We do not sell your health data. Not to advertisers, not to data brokers, not to anyone, ever. We do not share it for advertising, and we do not show ads. What you log is yours.

GramLogic is a food and weight tracker made by BassMetrik Labs LLC. This policy says, in plain words, what the app collects, what it does with it, who can see it, and how to get rid of it. The plain words come first; the legal definitions are at the end and mean the same thing.

What we collect

What	Why	Where it lives
Your email address and a password	So your history survives a new phone, so an invite you send can be matched to the right person, and so we can send you the Day 5 trial reminder	Our server
The name and email address of someone you invite	So the invitation reaches them and only they can accept it	Our server; deleted 30 days after the invitation is accepted, withdrawn or expires, or with your account if that comes first
Your profile: sex (optional), date of birth, height, weight, activity level, goal, diet preset, targets you edit	To calculate your calorie and protein targets	Your phone and our server
Whether you are pregnant or breastfeeding, if you choose to say	To set your targets for that time	Your phone only: never sent to our server, never in analytics or failure reports, not in your phone's backup; a new phone asks again. The daily targets it produces are stored like any other targets, and anyone you share targets with sees those numbers
What you log: food, water, weekly weigh-ins, saved foods and meals, and any text you type or say to log them	That is the app	Your phone and our server
Photos you take to log food	Sent to our server once to be read, then discarded there. Saved pictures stay on your phone only	Your phone
Speech, when you use Speak	Recognised on your phone by Android. No audio leaves the phone. Speak is offered only on phones that can do this	Your phone
Reminder times, units, water target, drink swaps, a fasting plan and your other settings	To run the app the way you set it	Our server, so they come back when you sign in on another phone; the colour theme stays on your phone. Your time zone is kept with them, so the reminder email names the right day and the people you share with see your day
Product analytics: which screens and features are used, how long things take, whether a request failed	To see what works and fix what does not	Our server, under a random per-install id. Never linked to your account
Failure reports: when something goes wrong, what failed, where in the app, the phone model and Android version, whether you were online, and the text you had typed at that moment	So we can find and fix the problem without guessing	Our server, kept 90 days, then deleted. While you are signed in a report carries your account id, so we can find yours if you write to us
What you send from Profile → Request a feature: your words, the app version and phone model	So we can read it	Our server and our support inbox. Kept if you delete your account, with no link to it
Subscription status from Google Play, and the code Google issues for your plan, stored encrypted	To know whether your trial or plan is active, and to check it with Google	Our server. Google handles payment; we never see your card

What we do not collect

No advertising identifier. There are no ads and no ad network in the app.
No contacts, no location, no precise device identifiers.
No sleep, workouts, heart rate or steps, even when Health Connect is on. We do not ask for them.
No third-party analytics or crash-reporting service. Everything above is written to our own database and nowhere else.

Health Connect

Health Connect is Android's health app. It is off in GramLogic until you switch it on in Profile, and it has two separate switches. Write food and weight out copies what you log here into Health Connect on your phone. Read weight in lets a smart scale fill in your weekly weigh-in. Each one asks Android's own permission first, and you can turn either off at any time, in the app or in Health Connect.

Data read from Health Connect is used only to fill the weigh-in on screen. It is never used for advertising, never sold, never transferred to a third party, and not used for any purpose other than the one you switched on. This is our commitment under Google's Health Connect policy as well as this policy.

Sharing with people you choose: My Circle

You can invite someone to follow your progress. They see only the things you tick for them, they can never change your numbers, and you can change what they see or remove them at any time. Nobody sees anything of yours without an invitation from you. An invite link works once, only for the address it was sent to, and expires after 14 days. If you share your weight trend but not your weigh-ins, they see the trend line, never a weigh-in.

Who else sees data

Our server runs on Supabase, a hosting provider, in the same way a website runs on a hosting provider; they process the data on our behalf and under our instructions. Food photos and typed food descriptions are sent to an AI service to be read into foods and amounts, and typed food descriptions to a second AI service that turns them into search terms. Both receive them without your name, email or account id, and neither uses them to train its models. The emails we send — the Day 5 trial reminder and Circle invitations — go out through an email delivery service, which receives the address and the email itself; so do the feature requests you send, on their way to our own inbox. Google Play handles your subscription. That is the complete list. We never transfer your data to a data broker, an advertiser, or any other third party for their own use.

How long we keep it

Your account, profile and logs: for as long as you have an account.
Failure reports: 90 days.
Product analytics: 24 months, tied to a random install id.
Invitations: until 30 days after they are accepted, withdrawn or expire.

Deleting your account

Profile → Delete account removes everything: your logs, water, weigh-ins, profile, saved foods and pictures, your subscription record on our side, every invite you sent, and every Circle connection in either direction. People who were following you stop seeing your numbers at that moment. The app then clears its own storage on your phone. Failure reports lose their link to your account. Product analytics were never linked to it and stay under the random install id. Feature requests you sent stay, with no link to your account, so we still know what was asked for. Copies in our server backups roll off within 30 days. Your subscription is Google's and is not cancelled by deleting the account; cancel it on Google Play first.

Without the app, follow gramlogic.app/delete-account.

You can export everything as a PDF or spreadsheet files from Profile before you delete.

Your choices

Sign out at any time. Nothing is deleted; sign back in and it all comes back.
Turn Health Connect, reminders and notifications on or off in Profile.
Export your data from Profile.
Delete your account from Profile.
Ask us anything at support@gramlogic.app.

Children

GramLogic is not for anyone under 16, and we do not knowingly hold data about anyone under 16. If you believe we do, write to us and we will delete it.

Security

Data travels encrypted, is stored encrypted at rest, and is guarded on the server by per-account access rules: your account can read only its own rows, and a follower reads only the things you ticked. Paid services are never called from the phone directly.

The legal words

Under the California Consumer Privacy Act as amended (CCPA/CPRA) and similar state laws, "sell" means exchanging personal information for money or other value, and "share" means disclosing it for cross-context behavioural advertising. We do not sell or share your personal information, and have not in the past twelve months. We do not use or disclose sensitive personal information for any purpose beyond providing the service you asked for. You have the right to know what we hold, to correct it, to delete it, and to a copy of it; the app itself provides each of these, and support@gramlogic.app handles anything the app cannot.

If you are in the European Economic Area or the United Kingdom, the legal basis for processing your account and log data is the contract between us; for analytics and failure reports it is our legitimate interest in running and fixing the app, and you can object by writing to us. You may also complain to your local data protection authority.

Changes

When this policy changes, the date at the top changes and the app tells you before the change applies to you. The commitment at the top does not change.

BassMetrik Labs LLC · support@gramlogic.app · Terms and conditions