Privacy Policy

Gramoza for iPhone, iPad and Apple Watch · Last updated: 1 October 2026

In short: Gramoza has no ads, no analytics and no tracking. Your food diary, photos, body log and training log stay on your own devices; we never receive them. Two optional features use our server: the community, if you join it, and AI meal logging, if you use it. This page says exactly what each one sends. We never sell your data.

Who we are

Gramoza is provided by Anas Alradhwan, an individual developer based in Kuwait (“we”). For any privacy question or request, use the contact form on our support page.

What stays on your devices

Your food diary: foods, portions, calories, protein, carbs, fat, fiber, sugar, saturated fat and sodium, meals, dates, daily goals, saved meals, recipes and your own foods.
Photos you attach to meals and labels, and your progress photos. Before they are saved, the app shrinks each photo and re-encodes it, which removes its original metadata such as location.
Your training data: the name you give, answers from setup, routines, workouts, sets, personal records and settings.
Your body log: weigh-ins and measurements.
Water, fasting timers, reminders and streak freezes.
If you choose to track calories, the sex, birth year, height and activity level you enter for the calorie estimate.
Backups and spreadsheets you export yourself, which go wherever you choose to save them.

This data lives in the app’s private storage on your device. iOS may include it in your normal iCloud or computer backup, which Apple and you control. We cannot see any of it. Deleting the app deletes it, except backups you exported or kept yourself and anything in your own iCloud (below).

What is processed on your device

Food photo suggestions, nutrition-label reading and barcode detection use Apple’s on-device Vision framework. Photos are never uploaded to us or to any AI service.
Dictation for describing a meal uses Apple’s on-device speech recognition.
Reminders and rest-timer alerts are scheduled on your device. Siri and Shortcuts requests are handled by Apple.
Workout files you import (for example an export from another training app) are read on your device and never uploaded.

Optional features between your own devices

iCloud sync (off until you turn it on). Your food diary (with its meal photos, your own foods and your daily goals), your training log (routines, workouts, records and settings, but not your bodyweight; records for pull-ups, dips and other bodyweight moves sync as the added load only), your water log, your fasting timer and history, and your streak freezes are kept in Gramoza’s private iCloud storage under your Apple Account, so your iPhone and iPad stay in step. Apple stores it under your Apple Account; we cannot access it.
Never stored in iCloud, even with sync on: your body log (weigh-ins and measurements), progress photos, your bodyweight, the details you enter for calorie estimates, and anything Gramoza reads from Apple Health. They stay on the device where you entered them. Reminders and alerts are set on each device and are not synced.
Apple Health (off until you turn it on). Gramoza writes the calories, protein, carbs, fat, fiber, sugar, saturated fat and sodium you log, the water you log, your workouts and your weigh-ins to Health, and reads your latest weight to offer it as a suggestion. Data read from Health is never sent to us and never used for advertising.
Apple Watch, widgets and Live Activities. Your iPhone shares today’s numbers and your workout with them directly, on your devices.

The community (only if you join)

You can use every other part of Gramoza without an account. If you join the community, you sign in with Apple and we store:

A stable identifier Apple gives us for Gramoza, which we keep only as a one-way hash. We do not ask for, and do not receive, your name or email address.
Your nickname, your avatar (a Gramo character and colour; there are no photos in the community), your bio and your privacy settings.
What you post: posts, comments and cheers, and the summaries you choose to share (a workout, a personal record, a protein day or a badge).
Who you follow, who follows you, and who you block.
Your level, streak, total XP and this week’s XP, which show on your profile and, if leagues are on, in your league.
When you accepted the community rules (which is where you confirm you are 18 or older), and, to let us revoke Gramoza’s Sign in with Apple access when you delete your account, the access token Apple gives us, stored encrypted.
Reports you make, and notifications about activity on your posts.

Nothing from your diary, photos, body log or training log is sent unless you post it. A private account shows your posts to approved followers only. People you block cannot see you.

We review reported content and remove what breaks our community rules. Content reported by three people is hidden until we review it.

Deleting your account. In the app, go to Profile → Community account → Delete account. This removes your profile, posts, comments, cheers, follows, blocks and league history at once, and we ask Apple to revoke Gramoza’s Sign in with Apple access. If Apple cannot be reached, we keep only an encrypted token to retry that, for up to five weeks. If an account was banned for breaking the community rules, we keep a one-way hash of its Apple identifier so the ban still applies. Notifications and settled reports are deleted after 90 days, and weekly league tables after 8 weeks.

AI meal logging (only if you use it)

“Describe your meal” asks before its first use. When you use it:

The app sends only the meal text you typed or dictated. With it goes a random ID created for this install, used to count your free tries, or, if you have Pro, Apple’s signed proof of your subscription. Your photos, diary and identity are never sent.
Our server asks Google’s Gemini to list the foods in the text; if Gemini is unavailable, Anthropic’s Claude does it instead. Both are used under their business API terms, which do not let them use the text to train their models; each may keep it briefly to prevent abuse.
The nutrition values come from USDA FoodData Central. Our server sends it only food names, and keeps which USDA record matched each food name for up to 30 days, with no text or ID attached. Our server reaches Gemini, Claude and USDA through our own AI service, which also runs on Cloudflare and keeps only daily call counts.
We do not store your meal text. We keep the list of foods that was returned, with no text and no ID attached, for 30 days under a one-way hash of the text, so the same sentence gets the same answer. We also keep counts of use per install ID, per subscription and per network address, and store the network address only as a one-way hash.

Other services the app talks to

Open Food Facts (open food product database). A barcode lookup sends only the product number to world.openfoodfacts.org, and a food search sends only the words you type to search.openfoodfacts.org. The requests carry no identifier for you; like any website, Open Food Facts receives your IP address to answer. Their privacy policy applies to those requests.
Apple. Subscriptions are bought, renewed, cancelled and restored through your Apple Account; we never receive your payment details. Sign in with Apple is described above.
Cloudflare hosts this website, the support form, our server and the community’s database.
Links to nutrition sources and Open Food Facts product pages open in your browser only when you tap them.

What we never do

Gramoza contains no analytics, advertising or tracking code, and we do not use the advertising identifier. We do not sell or rent your data, and we never use health or fitness data for advertising.

Your choices and rights

See, edit or delete any entry in the app at any time, and export a full backup or a spreadsheet from Settings.
Turn iCloud sync and Apple Health off at any time in Profile → Data & backups → Sync & Apple Health. To delete Gramoza’s iCloud data, use your device’s iCloud storage settings.
Delete your community posts and comments, edit your profile, or delete your whole community account, in the app.
Delete everything on your device by deleting the app.

To ask about, correct or delete community data, write to us through the support form. If you contact us, we receive the email address and message you type, plus your name, the app version and the device model if you add them, and the country the message came from (worked out by Cloudflare from the network, not your location). We use them only to reply, and they are deleted within 12 months. To stop spam, the form keeps a one-way (hashed) counter of your network address for one hour.

Children

Gramoza is for people aged 18 and over only. It is rated 18+ on the App Store and is not directed at children. The community is only for people aged 18 and over.

Changes

If this policy changes, we update the date above. If a future version sends any new kind of data off your device, we will say so here and in the app before it happens.