GBTracker privacy policy
Last updated 19 October 2026
GBTracker is a food diary. This page explains what it stores about you, who handles that data, and how to delete it. GBTracker has no ads, no tracking and no analytics, and never sells your data.
What GBTracker stores
- Your account: username, email address and password. The password is stored only as a secure hash. Your email is used to confirm your account and reset your password; it is never shown to anyone else.
- Your diary: the foods you log and their amounts, foods you add, recipes, saved meals, favourites, recent items, targets and settings.
- Meal photos, photos of your own exercises, form-check videos and progress photos and videos you choose to add.
- Your training and body measurements: workouts (exercises, sets, weights and reps), your own exercises, training days and weekly plan, and the weight and body-fat readings you enter.
- Your plan details, if you answer the questions that work out your targets: your goal, sex, age, height, weight, goal weight, training days, eating style and what's made tracking hard. They're used only to work out your targets on your device.
- Invites, if you use them: which account invited yours, and the Apple offer codes given to you for a free month.
- A copy on your device, so the app works offline. Signing out removes it.
So nothing is lost to a mistake or a fault, a record of each change you make (what was added, and the previous version of anything changed or deleted) is kept for 60 days, then removed automatically. You can see it and undo changes in Settings → Activity log; only you can read it, and deleting your account removes it straight away.
Each account's data can only be read or changed by that account. This is enforced by the database itself, not only by the app. All data is encrypted in transit (HTTPS) and at rest.
How long it's kept
Your account and everything in it is kept until you delete it. Previous versions of changed items are kept for 60 days. A count of how many AI features you used each day is kept to apply the daily limit, and is deleted with your account. Problem reports are deleted with your account.
Label photos
When you choose to fill in a food from a photo of its nutrition panel, and only after you allow it, the photo is sent to Anthropic, which makes the Claude AI, to read the values. Only the photo is sent, nothing from your diary. GBTracker does not keep the photo; only the values you check and save are stored. Anthropic does not use it to train its models, and may retain it for a limited time under its own privacy policy.
Voice logging
When you tap "Tap and talk", GBTracker records your voice until you tap the tick (or the cross to throw it away). The recording is sent to OpenAI, whose speech recognition turns it into text, which appears in the box for you to check. GBTracker doesn't keep the recording, and OpenAI doesn't use it to train its models; it may retain it for up to 30 days for abuse monitoring under its own privacy policy. Where that service isn't available, your phone's built-in speech recognition is used instead (on iPhone, Apple's; on Android, Google's).
When you tap "Find these foods" (or "Fill in my workout"), the text and a list of candidate names (foods from the food database and your own foods, or your exercise list) are sent to Anthropic, whose Claude AI matches them. Your diary isn't sent.
Meal photos and stories
Photos you add to a meal are kept in your account in private storage that only you can reach, until you delete them or your account. When you tap "Make a story", that photo is sent to OpenAI, whose image model restyles it; GBTracker then adds your foods, weights and totals itself. OpenAI doesn't use it to train its models and may retain it for up to 30 days for abuse monitoring under its own privacy policy. The story image is made on your phone and only shared where you choose to share it.
Progress photos
Photos and turn-around videos you add to a weigh-in are kept in your account in private storage that only you can reach, until you delete them or your account. They aren't sent to any AI, and nothing made from them leaves your phone unless you share it.
Form-check videos
Videos you add to an exercise in a workout are kept in your account in private storage that only you can reach, until you delete them or your account. They aren't sent to any AI. A Reel or post made from one is made on your phone, without sound, and only shared where you choose to share it.
Reporting an AI result
Every result from Claude (a label read, a web lookup or a voice match) has a "Report a problem with this result" button. A report stores your comment, the kind of result, and what the AI returned (with the words you said or the barcode number), so it can be checked and improved. Reports can't be read back through the app and are deleted with your account.
Barcodes
Scanning uses your camera only while the scan screen is open; nothing from the camera leaves your device except the barcode number. A barcode you haven't added before is first looked up in the foods other GBTracker users have shared, then on Open Food Facts, a public food database. If it isn't there and you tap "Search the web for it", the barcode number is sent to Anthropic, whose Claude AI searches shop and brand websites for the product. Nothing else is sent.
Shared foods
You can share a food you've added (its name, brand, barcode, nutrition values, serving sizes and where the values came from) so other GBTracker users can find it when they scan or search. Only what's listed is shared, never your diary or anything else about you, and your name and username aren't shown with it. Foods you add that have a barcode are shared this way automatically, unless you turn off Settings → Share scanned foods. You can stop sharing any food at any time, which removes it from the list. If you delete your account, foods you shared stay in the list without any link to you. Anyone can report a shared food; a food reported by several people is hidden until it's checked.
You can also hide every food from one sharer. GBTracker does this with a random tag attached to each sharer's foods, which doesn't say who they are; they aren't told.
Friends and posts
Your username, and the name and profile photo you choose to add, can be seen by other signed-in GBTracker users, so friends can find you. Nothing else about you is shown. Someone who wants to be friends sends you a request; only once you accept do you see each other's posts. You can decline a request or remove a friend at any time, and they aren't told.
When you post a meal, recipe or food to your friends, what you post (its name, foods or ingredients with their amounts and nutrition values, any photo or cooking video you add, and your caption) is stored in your account and shown to your friends. Friends can copy it into their own diary or library; those copies are theirs and stay if you delete the post. Delete a post at any time from its page.
You can block anyone: you stop being friends, they can't find you or ask to follow you again, and you don't see their posts. They aren't told. Anyone who sees a post can report it; a post reported by several people is hidden until it's checked. Deleting your account deletes your profile, your posts and their photos and videos, and every friendship you're part of.
Reporting content and contact
To report a shared food, a post or anything else inappropriate, use "Report this shared food" or "Report this post" on it, or email hey@gbtracker.com. Reports are looked at and content that breaks the rules is removed. The same address is for any question about GBTracker or your data.
When you use "Snap a meal", the photo is sent to Anthropic, whose Claude AI lists the foods it can see with an estimated amount of each; you check every item before it's added. The photo is then kept with that meal in your account, like any meal photo, until you delete it.
When you add an exercise with "Look it up", only the name you typed is sent to Anthropic, whose Claude AI searches the web for what the exercise trains, how to do it and form tips. The page it used is shown so you can check it.
Who handles your data
| Service | What for | Where |
|---|---|---|
| Supabase | Accounts, sign-in emails, your diary, meal photos, form videos and progress photos | Singapore |
| Vercel | Serves the app's pages | Global network |
| Anthropic | Reads label photos, sees what's in meal photos you snap, matches foods and exercises you log by voice, and searches the web for barcodes and exercises, only when you use those features | United States |
| OpenAI | Turns voice recordings into text, and restyles a meal photo for a story, only when you use those features | United States |
| Open Food Facts | Looks up scanned barcodes | France |
| Google Fonts and jsDelivr | Load the app's typefaces and code libraries | Global network |
Your choices
- Export: Settings → Export backup downloads everything in your account as a file.
- Delete: Settings → Delete account permanently deletes your account and everything in it straight away. See how to delete your account, including from a web browser.
- Correct: you can edit or delete any entry, food, recipe or meal in the app.
Health information
Your food diary can say something about your health. GBTracker uses it only to show you your own totals and history. GBTracker is a tracking tool, not medical or dietary advice.
Children
GBTracker is not meant for children under 13, and doesn't knowingly collect information from them.
Contact
Questions or requests about your data: bleggett.ic@gmail.com. GBTracker handles personal information in line with the Australian Privacy Principles.