Last updated 19 July 2026.
Berrywell is a weight-loss and nutrition app for iOS. This policy explains what the app collects, why, who it is shared with, and how to get it deleted. It covers the Berrywell iOS app and the Berrywell API at api.berrywellapp.com.
| Data | Why |
|---|---|
| Email address and a hashed password. If you sign in with Apple or Google, the identifier and email those services return. | To create and secure your account. |
| Profile details: display name, avatar, time zone, locale, and your onboarding answers. | To personalise the app. |
| Health and body data you enter: sex, age, height, weight, activity level, goal weight, pace, and your calorie and macro targets. Also dietary restrictions, disliked foods, and supplements if you fill those in. | To calculate your plan and daily targets. |
| Meal entries: photos of your meals, any text or voice description you add, and the resulting calorie and macro figures. | To log and analyse what you eat. |
| Weigh-ins and, if you enable it, body weight and step count read from Apple Health. | To draw your weight trend and estimate your activity. |
| Workout entries, if you use the gym log. | To record your training. |
| Device push token and notification preferences. | To send the reminders you turn on. |
| Session records: IP address, user agent, device name, and platform for each sign-in. | Security, and so you can see and revoke sessions. |
| Purchase records, if paid features are added, via RevenueCat. | To unlock what you paid for. |
The app asks for camera, microphone, and photo library access only when you use those features, and for Apple Health access only if you turn on weight or step sync. You can withdraw any of these in the iOS Settings app at any time.
We use a small number of service providers, and only for the purposes below.
| Provider | What it receives |
|---|---|
| Google (Gemini API) | Your meal photos and meal descriptions, for calorie and macro estimation. For coaching messages, a summary of your recent meals, targets, and weight trend. |
| AssemblyAI | Voice recordings you make when describing a meal, for transcription. The recording is used for that transcription only. |
| Apple (APNs) | Your device push token and the text of notifications you have enabled. |
| RevenueCat | A pseudonymous purchase identifier and subscription status, if paid features are in use. |
| Backblaze B2 | Encrypted off-site backups of the database, kept for 72 hours on a rolling basis. |
| Cloudflare and Hetzner | Network delivery and server hosting. |
Your account data is stored in a single database on a server in Germany, operated by Hetzner. Meal photos are stored on that same server's disk in a private area and are served to your app only through short-lived signed links. Encrypted database backups are replicated to Backblaze B2 with a 72-hour retention window. All traffic between the app and the server is over HTTPS.
We keep your data for as long as your account exists. When you delete your account, your profile, meals, meal photos, weigh-ins, and workout entries are removed from the live database. Encrypted backups age out within 72 hours.
You can ask us to give you a copy of your data, correct it, or delete it. To do any of those, email [email protected] from the address on your account. We will act on the request within 30 days. If you are in the UK, EU, or California, you also have the right to complain to your local data protection authority.
Berrywell is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.
If this policy changes in a way that materially affects you, we will update the date at the top of this page and notify you in the app before the change takes effect.
Berrywell · [email protected]