Draft. This text hasn’t been reviewed yet and may change before Bloatie launches.
Privacy Policy
Bloatie is made by Kali Winkler, an independent developer. This policy explains what Bloatie keeps about you, where it lives, and what you can do about it. The short version: what you log is yours, it isn’t sold or used for ads, and you can export or delete it at any time.
What Bloatie keeps
Your account: your email address, your name if you give it (or Apple or Google share it when you sign in with them), and which sign-in method you used. If you use a password, it is stored by our sign-in provider in hashed form — Bloatie never sees it.
What you log: meals and the foods in them, portion sizes, symptom check-ins and notes, the FODMAP groups you mark as triggers, your goals and journey stage, and the foods you search for. Some of this is health information, and Bloatie treats it that way.
Your settings, such as your name and meal reminder times.
Bloatie does not collect your location, contacts, photos, or advertising identifiers, and it contains no analytics, advertising, or tracking tools.
Where it lives
Your logs are kept on your phone and saved to your Bloatie account, so they come back if you reinstall the app or switch phones. Your account and its records are stored with Supabase, the service Bloatie uses for sign-in and its database.
Meal reminders are scheduled on your phone. Nothing is sent to a server to deliver them.
How it’s used
Only to run Bloatie for you: to show your history, stack the foods in a meal, and keep your settings.
Your information is never sold, never used for advertising, never shared with data brokers, and never used to train AI models.
Who else is involved
Supabase hosts Bloatie’s accounts and database. Apple or Google are involved only if you choose to sign in with them, and then only for that sign-in. Sign-in and confirmation emails are sent through an email delivery service.
These providers handle your information only to provide their service to Bloatie. Bloatie may also disclose information if the law requires it.
Your choices
In Settings you can export everything you’ve logged, delete meal logs or check-ins separately, delete all your logs while keeping your account, or delete your account. Deleting logs removes them from your phone and your account.
Deleting your account removes it, and everything stored with it, from Bloatie’s servers straight away, and clears your phone. Copies can remain in the database provider’s routine backups for a short period before they expire.
Depending on where you live, you may have further rights over your information — to access, correct, or delete it, or to withdraw consent. To use them, or with any privacy question, email hello.bloatie@gmail.com.
Security
Information sent between the app and Bloatie’s servers is encrypted in transit, and the database only lets each account read its own records. What’s on your phone is protected by your phone’s own lock and security.
No system is perfectly secure. If a breach ever affects your information, you will be told as the law requires.
Children
Bloatie is not meant for children under 13, and doesn’t knowingly collect information from them. If you believe a child has created an account, email us and it will be deleted.
Not a medical service
Bloatie is a personal tracking and education tool. It is not a healthcare provider, and your information is not a medical record.
Changes
If this policy changes in a way that matters, Bloatie will tell you in the app before the change applies.