Privacy policy

Last updated November 10, 2026

This policy covers the FiberKit iPhone app and this website, made by Kurt Higa (“we”). It explains what stays on your iPhone, what leaves it, and why.

On your iPhone

Your food log, check-ins, favorites, recipes, saved meals, meal photos, settings and the profile you enter (sex, date of birth or age, height, weight, why you use FiberKit and any health conditions you choose) are stored on your iPhone. They’re never sent to our server or our analytics. Like other app data, they’re included in your iPhone’s backups.

iCloud sync

iCloud sync is on by default. It keeps a copy of the data above in your private iCloud database, using Apple’s CloudKit, so it’s on your other devices and comes back if you reinstall. Only you can access your private database. We can’t.

• Turning off Settings › iCloud sync stops syncing but leaves the iCloud copy.
• Settings › Reset all data deletes your data on this iPhone, and in iCloud while sync is on.
• You can also delete FiberKit’s data from iCloud storage in the Settings app.

Food search and barcodes

When you type a search (from the third letter) or scan a barcode:

• Your iPhone sends the words or barcode to Open Food Facts, a free food database, which also sees your IP address.
• It sends them to our server too, which looks them up in our USDA food list and at fatsecret, and for some barcodes at USDA FoodData Central. Those services get the words or barcode from our server, never your IP address.
• Our server doesn’t keep or log your searches or barcodes. USDA results for barcodes are cached, not linked to anyone.
• Product photos are loaded from Open Food Facts.

AI meal scans and label reading

• When you scan a meal, the photo (made smaller, with location data removed), your language setting and any note you add go to our server, which sends them to Google’s Gemini API to estimate the fiber.
• When you photograph a nutrition label, the photos go to our server, which sends them to Anthropic’s Claude API to read it.
• We don’t store these photos or notes. Google and Anthropic process them under their API terms, which may let them keep them for a limited time, for example to prevent abuse.
• The photo of a meal you log stays in the app, and in your iCloud with sync on.

Our server

Our server runs on Amazon Web Services in the US. It has no accounts and doesn’t know who you are. To stop the AI features being abused, the app uses Apple’s App Attest to prove each request comes from a real copy of FiberKit. The server keeps a random key for your install and how many free scans it has used. It isn’t linked to your name, Apple Account, purchases or analytics. Daily usage counters are deleted after a few days, and error logs, which never contain photos, notes, searches or barcodes, after 30 days.

Purchases

• Apple handles payment. We never see your card, name or email.
• RevenueCat manages subscriptions for us. It gets an anonymous ID, your FiberKit purchases from the App Store, the analytics ID below, and Apple’s ad attribution token, which says whether you came from an App Store ad.
• The FiberKit Pro screen loads its images from RevenueCat.

Usage stats

We use PostHog to learn how the app is used: app opens and updates, which setup steps are seen, the FiberKit Pro screen and purchases, and whether iCloud sync is on. Events carry a random ID made when you install the app, plus the app version, device model, iOS version, language, time zone and screen size. PostHog receives your IP address and uses it to estimate your country and city. PostHog also tells the app which version of some features to show.

Usage stats never include what you eat, your profile or health details, your searches, barcodes or photos. There are no screen recordings and no advertising IDs.

Email

If you email us, we use your address and message only to reply.

This website

This website uses no cookies and stores nothing in your browser. We use PostHog to count visits: the pages you view, the site that sent you here, and taps on the App Store links, with where on the page they were. Visits carry your browser, operating system, device type, language, time zone and screen size. PostHog receives your IP address and uses it to estimate your country and city and to tell one day’s visits apart. It doesn’t keep a profile of you.

The fiber calculator runs in your browser, and nothing you type is sent anywhere. Our web host keeps standard server logs, such as IP addresses, for security.

What we don’t do

• We don’t show ads, and we don’t sell or share your data for advertising.
• We don’t track you across other companies’ apps or websites, and FiberKit never asks for your advertising identifier.
• We don’t keep a profile of you. There are no accounts.

How long we keep data

• Your log and profile: until you delete them, on your iPhone and in your iCloud.
• The device key and scan count on our server: no set end date. They aren’t linked to you.
• Daily counters: a few days. Server error logs: 30 days.
• Usage stats: kept in PostHog, not linked to your name, email or Apple Account.

Your choices and rights

• Delete your data with Settings › Reset all data, or delete the app.
• Stop iCloud sync with Settings › iCloud sync.
• Deleting the app also resets the random analytics ID.

Depending on where you live, you may have the right to see, correct or delete personal data held about you, and to complain to a data protection authority. Because we don’t know who you are, we usually can’t match data to you, but email us and we’ll help where we can.

Children

FiberKit is for people aged 13 and over. We don’t knowingly collect personal data from children under 13.

Services we use

• Apple: iCloud sync, purchases, App Attest
• Amazon Web Services: hosts our server, in the US
• Google (Gemini API): AI meal scans
• Anthropic: reading nutrition labels
• fatsecret: food search and barcodes
• Open Food Facts: food search, barcodes, product photos
• USDA FoodData Central: barcodes (no personal data)
• RevenueCat: subscriptions
• PostHog: anonymous usage stats, in the US

Changes

If this policy changes, we’ll post the new version here and update the date at the top.

Contact

Kurt Higa, California, USA. andagilabs@gmail.com