Privacy Policy
Aharn helps you log meals by photo, barcode or search and track calories, macros and weight. We built it to work without an account: your food diary, goals and body details stay on your iPhone. This policy explains what leaves your device, why, and the choices you have.
1.Data that stays on your device
The following is stored only on your iPhone (in the app’s local database and, for the home-screen widget, in a shared app container on the same device). We do not upload it to our servers:
- Your food diary: meals, servings, calories, macros, custom foods and recent foods
- Your profile and goal: age, sex, height, weight, activity level, target weight and daily targets you set during onboarding
- Weight entries, streaks and progress charts
- App settings such as language, units and reminder times
Meal reminders are scheduled as local notifications on your device; no notification data is sent to us.
2.Data that leaves your device
Meal photos (AI food recognition)
When you scan or choose a meal photo, the image is sent over an encrypted connection to our backend (Google Firebase Cloud Functions), which passes it to an AI model provider — Google Gemini, or OpenAI as a fallback — to identify the dish and estimate its nutrition. The result is returned to your device and saved only in your local diary.
- Photos are used only to produce your result. We do not use them for advertising and do not sell them.
- Along with the photo we send a random app-install ID (generated by the app, stored in your device’s Keychain, and not linked to your name, email or Apple ID) plus your device model, iOS version and app version. We use these to prevent abuse, enforce free-scan limits and fix errors.
- The AI providers process the photo under their own terms: Google, OpenAI.
Only photos you choose to scan are sent. Aharn never reads your photo library in the background.
Barcode lookups
When you scan a barcode, only the barcode number is sent to Open Food Facts, a public food database, to fetch the product’s nutrition.
App integrity
We use Firebase App Check (with Apple App Attest/DeviceCheck) to confirm requests come from the genuine Aharn app. This exchanges a device-integrity token, not personal information.
Advertising (free version)
The free version shows ads from Google AdMob. AdMob may collect your device’s advertising identifier (IDFA), IP address and ad-interaction data to show and measure ads.
- Aharn asks for your permission through Apple’s App Tracking Transparency prompt before your IDFA can be used for tracking. If you decline, you will still see ads, but they will not be personalized using cross-app tracking.
- You can change this any time in Settings → Privacy & Security → Tracking.
- See Google’s advertising privacy policy.
Subscribers (Aharn Unlimited) do not see ads.
Subscriptions
Purchases are handled by Apple. We use RevenueCat to check your subscription status; it receives an anonymous app-user ID and your purchase receipt details (product, price, dates), never your payment card. See RevenueCat’s privacy policy.
3.Apple Health
If you turn on Apple Health in Settings, Aharn can:
- Read your latest body weight, to keep your plan accurate
- Write the meals (energy and macronutrients) and weight you log
You can change or revoke access in Settings → Health → Data Access & Devices → Aharn.
4.Camera and photos
The camera is used only while you are scanning a meal or barcode. Photo library access is used only for the photo you pick. You can change these permissions in iOS Settings at any time.
5.What we don’t do
- We don’t require an account, name, email or phone number.
- We don’t sell your personal data.
- We don’t share your diary, body details or Health data with anyone.
6.Data retention and deletion
- On your device: your diary and profile remain until you delete individual entries in the app, or delete the app, which removes all of it from your iPhone.
- Meal photos: processed to return your result. [Confirm and state how long your backend or AI providers keep request logs, e.g. “We do not store your photos after the result is returned; request logs (install ID, device model, time) are kept for up to 30 days.”]
- To ask us to delete any request logs linked to your install ID, contact us at the email above.
7.Children
Aharn is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has used AI scanning and want related logs removed, contact us.
8.Security
Data sent from the app uses encrypted HTTPS connections. Requests to our backend are verified with Firebase App Check. No method of transmission or storage is completely secure, but we work to protect your information.
9.Your rights
Depending on where you live (for example under Thailand’s PDPA or the EU/UK GDPR), you may have the right to access, correct, delete or object to processing of your personal data. Because most of your data never leaves your device, you control it directly in the app. For anything else, contact us and we’ll respond within 30 days.
10.Changes to this policy
We may update this policy as Aharn changes. We’ll post the new version at this address with a new effective date, and notify you in the app for significant changes.
11.Contact
Sai Tawng Pha
Email: [email protected]
Website: pldev.top/ios