Privacy Policy
Last updated: August 17, 2026
What we collect
- Profile data you enter: age, sex, height, weight, goal, activity level.
- Meals you log, including photos you capture for analysis.
- Workouts you log and health data you add (bloodwork values, resting heart rate). HealthKit data is only read with your explicit permission and is never sold or used for advertising.
- Anonymized usage analytics (screens viewed, features used) and crash reports (device model, OS version).
Where it lives
Your data is stored on your device first. It is mirrored to our backend (Google Firebase) under your account ID for backup and multi-device restore, encrypted in transit.
AI processing
Food photos, meal descriptions and bloodwork documents are sent to our AI providers — xAI (Grok) and Anthropic (Claude) — solely to produce your nutrition or health extraction. They are not used by those providers to train their models. Brasa does not retain the copies sent for normal AI processing after that processing is complete.
Optional “Help improve Brasa” program
If you explicitly join this optional program in Settings, Brasa retains de-identified copies of meal scan images together with the model’s estimate and the nutrition result you accepted or corrected. We use these samples only to evaluate and improve Brasa’s food recognition and calorie estimation. Joining is not required to use any app feature.
Before upload, Brasa re-encodes contributed images to remove embedded metadata such as GPS location, capture date and device details. Dataset records omit your name, email, account ID, profile and device identifiers. Visible pixels can still show surroundings or people, so avoid contributing images that contain private information.
Contributed samples may be retained for up to 24 months. They are not sold, used for advertising or provided to third-party model-training programs. You can turn the program off at any time in Settings to stop future contributions. Turning it off does not automatically delete samples already accepted into the de-identified dataset; you may contact us using the address below with any privacy request.
What we never do
Sell your personal data. Share health data with advertisers. Use your bloodwork for anything except showing you your own results.
Accounts
Brasa works anonymously by default. If you link Sign in with Apple, we store the identifier Apple provides (and your email only if you choose to share it) to let you restore your data on any device. Deleting your account revokes the Apple token and erases your cloud records.
Your rights
Export your data as a PDF report anytime from Settings. Delete your account in Settings — this erases local data and cloud records. For any privacy request (access, correction, deletion), email marianovalle13@gmail.com. If you are in the EU/EEA, UK, Brazil or California, you may have additional statutory rights; the same email handles them.
Children
Brasa is not directed at children under 13 and we do not knowingly collect their data.
Changes
Material changes to this policy will be shown in the app or on this page.