Privacy Policy
Last updated 14 August 2026 · Effective 14 August 2026
SquadBite is operated by GymBroLife LLC, a Texas limited liability company, United States. Contact: support@squadbite.com
The short version. SquadBite stores what you log — meals, weight, water, recipes and profile details — so it can show it back to you. It sends meal and menu photos, and recipe pages you import, to an AI provider to be read. It does not sell your information, does not show ads, and does not use your data for advertising. Notifications are off until you turn them on. You can delete your account and the personal data in it from inside the app, subject to the short backup and log retention described in section 9.
1. What we collect
Everything below is information you give SquadBite by using it. There is no tracking pixel, no advertising SDK, and no third-party analytics in the app.
| Category | What it includes | Why |
|---|---|---|
| Account | Email address, display name, and a one-way hash of your password. We never store the password itself. | To create and secure your account and to send you a verification code. |
| Profile | Date of birth, sex, height, current weight, goal weight, activity level, dietary preferences, time zone, unit preference, and any calorie or macro targets you set. | To calculate your daily targets. Age, sex, height and weight are the inputs to the standard BMR formula the app uses. |
| Logged data | Meals and their individual items, calories and macros, water, weight entries, supplements and supplement logs, and the dates attached to each. | This is the product. It is stored so it can be shown back to you and charted over time. |
| Content you add | Meal photos, recipe cover images, saved and imported recipes, meal plans, grocery lists, and your profile picture. | To store your cookbook and plans across devices. |
| Squad activity | Squads you create or join, membership, posts you share to a squad, reactions, and your answers and progress on shared goals. | To run the shared feed and goal tracking. |
| Fasting | The start and end time of each fast you record, the target length you chose, and whether a fast was closed by you or automatically. | To run the timer, your history, and any shared goal counting fasting days. |
| Pantry | Ingredients you add to your pantry, and any photo you take of a shelf or receipt to add them. | To suggest recipes you can cook from what you already have. Pantry photos are deleted automatically shortly after they are read — see section 9. |
| Device tokens | A push notification token issued by Apple and Expo for each device you enable notifications on, plus the time it was last seen. | To deliver the reminders you switch on. See section 5. |
| Subscription status | Whether you have an active premium entitlement, and an anonymous customer identifier from RevenueCat. | To unlock premium features. We never see your card details — Apple handles payment. |
| Technical | Your IP address at the moment you register, held briefly in memory; server logs of requests and errors; counts of how many scans and imports you have used. | To rate-limit sign-ups, enforce fair-use limits, and diagnose failures. |
2. How we use it
- To operate the features you use: logging, planning, importing, scanning, and squads.
- To calculate your daily targets, and — if you turn on adaptive targets — to estimate your energy expenditure from your own logged intake and weight trend.
- To send you a verification code, and to reply if you email support.
- To apply and enforce the free and premium usage limits.
- To keep the service running: detecting abuse, fixing bugs, and protecting accounts.
We do not use your data to train AI models, to build advertising profiles, or to sell to anyone. SquadBite contains no advertising.
3. AI processing of photos and recipes
Several features work by sending content to Anthropic, the provider of the Claude AI models, for analysis:
- Meal photos you scan, and nutrition label photos.
- Restaurant menu photos you scan.
- Recipe pages you import, or recipe text you paste.
- Ingredient lists, when you ask for a nutrition estimate.
- Your own saved recipes and macro targets, when you use Fill my week.
These requests are made through Anthropic's commercial API. They are not associated with your name or email address. Under Anthropic's commercial terms, content submitted through the API is not used to train its models. Anthropic's own privacy practices are described at anthropic.com/legal/privacy.
Imported recipe pages are cached for up to 90 days, keyed to the web address rather than to you, so that a page someone has already imported does not have to be fetched and read again.
Nutrition figures from AI are estimates. They are labelled as estimates in the app. They are not a substitute for a nutrition label, and they must not be relied on where accuracy matters medically — including allergens, and including anyone managing diabetes, kidney disease, or any other condition where intake is clinically controlled.
4. Apple Health
If you grant permission, SquadBite reads your steps and active energy from Apple Health, and can write your meals, water and weight back to it. This is entirely optional and you can withdraw it at any time in the Health app under Sources.
- Health data is read on your device and used only to adjust your calorie allowance for the day and to keep your records in one place.
- We do not use Apple Health data for advertising, marketing, or any use-based data mining.
- We do not disclose Apple Health data to any third party, including our AI provider.
- We do not sell Apple Health data to anyone, including data brokers, insurers, or employers.
5. Notifications and your device
Notifications are off until you turn one on. When you do, your device is issued a push token by Apple, which we store against your account so we know where to send that reminder. It identifies a device, not a person, and it changes if you reinstall the app.
Reminders are delivered through Expo, which passes the message to Apple's Push Notification service. The notification text — for example that a supplement is due, or that someone shared a recipe with your squad — passes through both. Do not treat a notification as private: it may appear on a locked screen.
Some notifications never leave your phone at all. Fasting reminders, and the reminder to start a fast you planned, are scheduled locally by the app; we do not see them and they work with no network connection.
You can switch off any category, set quiet hours, or turn notifications off entirely, in the app under Profile → Notifications, or in iOS Settings. Turning them off in iOS stops delivery immediately; removing the last device from your account removes the stored token.
6. Data kept on your device
A few things are stored only on your phone and are never sent to us: which steps of a recipe you have ticked off while cooking, the time of a fast you have planned, and your local display preferences. They are removed when you delete the app.
When a recipe site refuses our server, the app can offer to fetch that page on your device instead. If you accept, your phone loads the public page in a hidden browser view and sends the resulting page text to us to be read for the recipe. It is not signed in to that site and carries no cookies from your other apps. Nothing is fetched this way unless you tap to allow it.
7. Who we share it with
We share only what a service needs to do its job, and only with these providers:
| Provider | What it receives |
|---|---|
| Anthropic (AI processing) | Meal, label and menu photos; recipe pages and text; ingredient lists; your recipe titles and macro targets when generating a plan. No name or email. |
| MongoDB Atlas (database) | Everything listed in section 1, stored at rest. |
| Render (application hosting) | Traffic to and from the app, including IP addresses in server logs. |
| Cloudflare (image storage and website hosting) | Recipe cover images and profile pictures you upload, stored as files. Also serves this website. |
| Resend (email delivery) | Your email address and the verification code, so the message can be sent. |
| RevenueCat (subscription management) | An anonymous customer identifier and your purchase receipt status from Apple. |
| Apple | All payment and billing information. We never receive your card details. |
| FatSecret (food and nutrition database) | The food name you search for, the partial text you have typed when search suggestions appear, and the barcode you scan. Nothing else — no account information, and nothing that identifies you. These requests are made by our server rather than by your phone, so FatSecret does not see your IP address. The one exception is a product thumbnail: where a search result has a photo, that image file is loaded directly from FatSecret's servers by your device, which reveals your device's IP address and browser identification to them in the same way that loading any image from the web does. |
| USDA FoodData Central, Open Food Facts, NIH Dietary Supplement Label Database | Only the food name or barcode you searched for. No account information, and nothing that identifies you. |
We may also disclose information if we are legally required to, or where it is necessary to investigate abuse or protect someone's safety. We will not otherwise hand your data to anyone. If SquadBite is ever acquired, your data may transfer to the acquiring party, and you will be told before that happens.
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law.
Expo (Expo, Inc.) delivers push notifications. It receives your device token and the text of the notification, for as long as it takes to hand the message to Apple. It does not receive your logged data.
8. Squads and what they reveal
Squads are private groups you create or join by invite code. Other members of a squad can see:
- Your display name and profile picture.
- Anything you explicitly post to the squad, including a meal and its photo if you choose to share it.
- Whether you hit a shared goal, and your daily yes-or-no answers on goals you have opted into.
- Your meal plan, only if you turn plan sharing on.
Squads deliberately do not expose your weight, your calorie or macro numbers, or your individual logged meals unless you post them yourself. If you leave a squad, posts you already made are removed with you; a post made by someone who has since left keeps the name and picture it had when it was posted.
Squad members may be notified when you share a recipe to the feed or create a shared goal, if they have that notification switched on. The notification names you and what you did — it never contains your macros, your weight or anything you logged.
9. Retention and deletion
We keep your data for as long as your account exists, because the entire point of the app is the history.
Deleting your account. Open Settings in the app and choose to delete your account. You will be asked for your password to confirm. Deletion is immediate and irreversible, and it removes your profile, meals, water, weight, supplements and supplement logs, recipes and cover images, meal plans, grocery state, goal progress and answers, usage counters, profile picture, and your squad posts. Image files are deleted from our image storage at the same time, not just the records that point at them. Squads you own are deleted along with their posts and goals; squads you merely joined lose you as a member.
Pantry photos are the exception to keeping things. A photo taken to add ingredients to your pantry is deleted automatically a short time after it has been read — the ingredients it produced stay, the image does not.
Records of which reminders were sent to you are kept for 30 days and then removed automatically. Device push tokens are removed when you sign out of that device, when Apple tells us the token is dead, or when you delete your account.
Deleting your account also removes your fasts, your pantry, your device tokens and your notification settings, alongside everything listed above.
After deletion, residual copies may persist in encrypted database backups for up to 30 days before being overwritten on the normal backup rotation. Server logs containing IP addresses are retained for up to 30 days. Anonymised, non-personal caches of food and recipe data are not linked to you and are not removed when you delete your account; each expires on its own schedule.
10. Security
- All traffic between the app and our servers is encrypted with TLS.
- Passwords are hashed with bcrypt. They are never stored or logged in a readable form, and we cannot recover one for you.
- Sign-in uses a signed token that expires after 30 days.
- Data at rest is encrypted by our database and image storage providers.
No system is perfectly secure. If a breach affects your personal data, we will notify you and any regulator we are required to notify, without undue delay.
11. Your rights
Wherever you live, you can access, correct, export or delete your data. Most of it you can do yourself in the app: edit anything you have logged, change your profile, or delete your account outright. For anything else, email support@squadbite.com and we will respond within 30 days.
If you are in the EU or the UK
You have the right to access, rectify, erase, restrict, port and object to processing of your personal data. Our legal bases are: performance of a contract for operating the features you asked for; consent for Apple Health access and for optional email; legitimate interests for security, abuse prevention and fixing bugs. Health-related data such as weight is special-category data, processed on the basis of your explicit consent, which you may withdraw at any time by deleting your account. You may also complain to your local supervisory authority.
If you are in California
You have the right to know what personal information we collect and how it is used, to request deletion, to request correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information, so there is no opt-out to exercise. The categories we collect are listed in section 1 and include identifiers, health and fitness information, and photographs.
12. Children
SquadBite is not intended for children under 13, and we do not knowingly collect information from them. If you are between 13 and 17, you may use SquadBite only with a parent or guardian's permission.
SquadBite will not generate an automated calorie target for anyone under 18. Growth makes the underlying model unreliable at those ages, and we would rather show nothing than show a number that could encourage under-eating during development. If we learn we have collected data from a child under 13, we will delete it. Contact support@squadbite.com if you believe this has happened.
13. International transfers
SquadBite is operated from the United States, and our hosting, database and AI providers process data there. If you use SquadBite from outside the United States, your information will be transferred to and processed in the United States, which may not offer the same level of data protection as your own country. Where required, we rely on the European Commission's Standard Contractual Clauses with our providers.
14. Changes
If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your data, we will tell you in the app or by email before it takes effect. Continuing to use SquadBite after a change means you accept the updated policy.
15. Contact
Questions, requests, or anything that looks wrong: support@squadbite.com.
By post: GymBroLife LLC, Smith County, Texas, United States. Email us at the address above and we will provide a full postal address if you need to write to us.