Your health data is yours.

This application stores the assessment answers, consent history, calculation snapshots, plans, food and workout logs, measurements and conversations you choose to submit. These are sensitive personal records. We use them to provide the functions you request.

External services

Food search sends the food query to USDA FoodData Central. Barcode lookup sends the code to Open Food Facts. Those requests do not include your identity or health profile. Nutrition records retain source attribution.

Optional AI requests go to the provider configured by the operator. Photo analysis sends a resized, re-encoded image without original metadata. Tutor requests send your question, goal and calculation snapshot. Provider retention and training policies depend on the configured service and contractual settings; the operator must disclose the provider and its current policy before a production launch. No separate training opt-in is implemented, and this application does not authorize training on photos.

Configured provider: None — external AI unavailable. Live processing is blocked until provider identity and policy are configured.

Photo handling

Original image bytes are processed in memory and discarded after the request. The app stores analysis text, candidates and corrections with your account. It does not create public photo URLs.

Your choices

External photo and tutor requests require separate explicit consent. Tutor context includes your question, goal, dietary preferences, allergies, calculated estimates, and limited saved meal/workout summaries; it excludes your full assessment and journal history. Revoke consent in Settings to prevent subsequent requests. Export records as JSON or delete your account from Settings. Account deletion cascades through private records in the active database; a minimal audit event remains without your identity.

Retention & security

Assessment and journal records remain until you delete them. Photo analysis text retention is configured to 90 days and chat retention to 90 days when the documented pruning task is scheduled. This deployment keeps encrypted database backups with a 7-day retention window, checked daily. Deleted records may remain in a restricted backup until that archive expires. Browser caches store static assets only, never private health API responses. Health entries are not stored in localStorage; only your display theme is saved there.

Production deployment requires HTTPS, restricted database access, encrypted disks and backups. Application authentication and ownership checks protect requests; engineering controls are not a claim of regulatory certification.

Scope

FORM supports adult wellness planning. It does not provide medical diagnosis or emergency services. Automated plans are restricted for health risks, pregnancy, breastfeeding, eating disorder concerns and unsafe goals. Navigation includes English, Mongolian and Chinese; detailed guidance currently uses English.

Return to settings