Your data and AI

On your device, unless you choose otherwise. When you sign in, BasalFit asks once whether to save your tracking to your account. Until you say yes, your log, weight and goals stay in your browser. You can also sync through your own Google Drive instead.

Each record is encrypted with AES-256 before it's stored, using a key made just for your account. The master secret is kept apart from the database, so a copy of the database alone can't be read. Health data has its own database, and only one small part of the code can reach it, which automated tests enforce. Everything travels over an encrypted connection.

Not by default, because BasalFit can do more for you when it can read what you save. If you'd rather it couldn't, you can lock it under You, then Privacy, with a recovery code BasalFit never sees. Your data is then sealed on your device before it's sent, and BasalFit can't open it, so nobody can recover it if you lose the code and all your devices. Features that need BasalFit to read your history won't work on locked data. You can turn the lock off again at any time. BasalFit can still see when records change and which days they're for, but not what's in them.

Yes, unless you lock it. BasalFit can read and analyze what you save, and will never sell it. Moderators and admins have no screen for your log, weight or goals, and your records never go into our logs or analytics.

No. BasalFit will never sell your data, to anyone, and never uses it for advertising. There are no advertising or tracking cookies. It's shared only if you ask, for example with an expert, and BasalFit asks you first.

Only the services BasalFit runs on. Your sign-in provider sees your name and email, and our payment provider handles your card if you buy Premium. Neither receives your health data.

Searches are recorded anonymously, with no IP address, account or device attached, to improve search. If you're signed in, we note which days you used BasalFit, and not what you did. Request logs are deleted after 7 days.

Yes, both under Account. Download your data gives you everything in one file. Deleting your account erases your saved tracking at once, and backups are gone within 30 days.

It's for people 18 and over. Under 18, tracking stays on the device, and food scans aren't offered. In the EU, the EEA, the UK and Switzerland, tracking stays on your devices for now.

We'd tell you and the regulators, as the law requires. Encrypting each record is there to limit what a breach could expose.

Only to read photos: food scans and, with Premium, Nutrition Facts labels and fridge photos. Nutrition numbers, goals, meal plans, search and your real burn rate are ordinary calculations.

Your device shrinks it, which also removes its location data, and sends it to be read. It's used for that one reading and then it's gone: never stored, never logged and never used to train AI.

No. It's read by the provider that already hosts BasalFit, and it isn't passed to a separate AI company.

No. It gets the photo, plus any words you type to correct it, and nothing else about you.

No. For a food scan, it only names the foods and guesses their weight, and the numbers come from USDA food data. A label photo copies what's printed on the panel. You check and can change everything before it's saved.

Treat them as a starting point. Published studies put photo estimates around 20 to 25% off for a meal on average, and worse for drinks, which is why you confirm every food and amount.

No. When you say what a dish really is, the words are recorded anonymously so we know which dishes to add. They're never tied to you.

Yes, if you choose to connect it. Whatever it reads from BasalFit then goes to that assistant, under its own terms.

No. BasalFit's estimates are general information. Talk to a doctor or registered dietitian before changing your diet, especially with a medical condition.