Privacy
The full policy is being written. This page states what the app does today, and that part will not change when the document lands.
What is collected
The answers you give during setup, your weight and measurement logs, your workouts and what you eat. All of it exists so the weekly review has something to read. If you sign in with Google, your email address arrives with it, and it identifies your account and nothing else. If you describe a meal or add a photo of one, the foods and amounts you add are kept like any other food you log, with a note of which way you added them. NextForm does not store the photo in your account or database. Foods and meals you save for reuse are kept until you remove them or delete your account.
What is not collected
Signing in with Apple does not request your email address, so Apple never sends one. There is no advertising identifier and no third-party analytics in the app.
Where it lives
On Supabase, a hosted database service, which stores and processes it on our behalf and for no purpose of its own. The database is in Frankfurt, Germany, in the European Union, and the app's own server processing runs there too, apart from the outside services named on this page. Nothing is sold.
Searching for food
When you search for a food, the words you type are sent to two public food databases, USDA FoodData Central and Open Food Facts, so they can be looked up. Only the search text goes. Your account, your targets and what you have eaten stay here.
If you told us you eat a particular way, that answer is used to order the results and is never sent anywhere. Food figures come from those databases as published, and they can be wrong.
USDA FoodData Central is public domain. Open Food Facts is published under the Open Database License, and we credit it here as that license asks.
Describing a meal or adding a photo
When you describe a meal in words, the sentence you type is sent to Anthropic, whose AI model reads it and estimates the foods and amounts. When you add a photo of a meal, the app makes the photo smaller on your phone and sends it to Google's Gemini API, whose AI model does the same. Only the meal description or resized photo is sent to Anthropic or Google: your name, email address, account, targets and history are not.
NextForm does not store the photo in your account or database. The local copy stays on your phone while you review the result and is deleted when you add the food, choose another photo or leave. Location and other details stored inside a photo, such as the camera used and when it was taken, are removed before it is sent.
Anthropic and Google process these requests on our behalf. Neither uses them to improve its products or train its AI models, except that Google may use them in its tools for detecting misuse. Both keep requests for a limited time to detect and prevent misuse: Anthropic deletes them within 30 days, or keeps them for up to two years if its safety systems flag them, and Google keeps them for up to 55 days, during which authorised staff may review them for that purpose only. These services may process requests outside the European Union, including in the United States.
The app asks for camera access only when you choose to take a photo. Choosing a photo from your library uses the iPhone's own picker, which gives the app only the photo you pick, so the app never asks for access to your photo library.
Who can read it
No other user. Every table is restricted at the database level to the account that owns the row, so one account cannot read another's data, even if the app asked it to. People with authorised administrative access to the project can reach it, the app's server functions work with it to run the app, and Supabase processes it on our behalf. Anthropic and Google receive the descriptions and photos described above, only to read them.
Deleting it
You can delete your account in Settings. That deletes your account and the data the app holds about you straight away. Copies in our hosting provider's logs and backups can remain for a limited time before they expire. Anything in Apple Health stays in your own Apple Health account.
Contact
Questions or requests about your data: support@nextformapp.com