gushealth

GusHealth Privacy Policy

Last updated: June 18, 2026 (v0.6.0)

GusHealth is a personal health tracker that stores data locally on your device and optionally syncs it to your own private iCloud database. This policy describes what data the app handles and where it goes.

Data the app collects and stores on your device

• Profile information you provide during onboarding: date of birth, biological sex (male/female), height, and initial weight.
• Daily logs: meals (calories + protein + optional title), exercise sessions (intensity + duration + optional title), weight measurements, and “not missed” day markers.
• Targets and preferences: daily calorie target, protein target, goal slider position, tracking week start day, unit system (metric/imperial), theme preference, “show remaining” toggle.
• Favorites: saved meal and workout templates with sort order.

All of the above is stored on your device using Apple’s SwiftData framework (for logs and favorites) and UserDefaults (for profile, targets, and preferences).

Automatic data retention limit

To keep the local database lean, entries (meals, exercise, weight, tracked-day markers) older than 5 years are automatically deleted at app launch. Profile, targets, and preferences are not affected. If you want to keep a deeper history, use Settings → Data → Export my data periodically.

iCloud backup (optional)

If you enable iCloud backup in Settings:

• Your meals, exercise sessions, weight entries, tracked-day markers, and favorites are synced to your private CloudKit container (per-Apple-ID storage hosted by Apple).
• Profile fields, targets, and preferences (the items in UserDefaults) are NOT replicated to iCloud — they remain on each device.
• Sync happens automatically in the background.
• Your CloudKit private container is accessible only to apps you authorize on devices signed in to your iCloud account. Without Advanced Data Protection enabled, Apple holds the encryption keys for the private container and could be compelled to access it under lawful process; with Advanced Data Protection enabled, even Apple cannot access it. The GusHealth developer cannot access it under either configuration.
• You can disable iCloud backup at any time in Settings → iCloud backup, or erase the iCloud copy via Settings → Data → Erase all GusHealth data → “Erase logs + iCloud copy”.

AI Assist (optional Google Gemini or Anthropic Claude integration)

GusHealth’s optional “AI Assist” feature lets you describe a meal or workout in plain English and get an estimated calorie/protein/intensity/duration breakdown. Starting in v0.6.0, you choose which AI provider powers it: Google Gemini (free for personal use; the default) or Anthropic Claude (paid; does not train on your inputs). The choice is made in Settings → AI Assistant → Provider.

When you use AI Assist:

• The description text you type is sent directly from your device to the API of your selected provider, authenticated with your own API key for that provider (one you obtained from the provider’s developer console).
  • If your selected provider is Google Gemini: the request goes to generativelanguage.googleapis.com over HTTPS, using your Google Gemini API key from Google AI Studio.
  • If your selected provider is Anthropic Claude: the request goes to api.anthropic.com over HTTPS, using your Anthropic API key from the Anthropic Console.
• The communication is between you and the provider. GusHealth does not operate a server, does not proxy this request, and does not log or store the description anywhere outside your device.
• Your weight, profile, meal history, exercise log, and other app data are NOT sent to either provider. Only the specific description you typed for that single AI Assist invocation is sent.
• Provider data-handling differences:
  • Google may use the input you submit to improve their services on the free tier of the Gemini API. Google’s handling is governed by Google’s privacy policy and Gemini API Terms (policies.google.com/privacy, ai.google.dev/gemini-api/terms).
  • Anthropic does NOT use API inputs to train their models per their Commercial Terms (anthropic.com/legal/commercial-terms, anthropic.com/legal/privacy).
  • All four links are also surfaced inside the app under About → Privacy & terms.
• AI Assist is opt-in — the feature is unavailable until you provide an API key for your selected provider. Removing the key in Settings → AI Assistant disables it (for that provider).

Where your API keys are stored

Your API keys (Google Gemini and/or Anthropic, if you’ve set them up) are stored in the iOS Keychain on your device with these protection attributes:

• kSecAttrAccessibleWhenUnlockedThisDeviceOnly — keys are readable only when the device is unlocked.
• “This device only” — keys are NOT backed up to iCloud Keychain, are NOT included in encrypted device backups, and do NOT sync to your other devices.
• The two providers’ keys are stored in separate Keychain entries, so removing one does not affect the other.

Widget data sharing

GusHealth includes a home-screen widget. The widget reads only today’s calorie/protein totals, the corresponding targets, and the “show remaining” preference from a shared App Group container so it can display them. No personally identifying information (date of birth, weight, height, meal descriptions, etc.) is ever written to the shared container.

Data we do NOT collect

GusHealth does not include:

• Any third-party analytics, telemetry, or crash-reporting SDK.
• Any advertising network or tracking pixel.
• Any account system, login, or user database.
• Any server operated by the developer.
• Any export or upload of your data anywhere other than (a) your own private iCloud, with your consent, and (b) your chosen AI provider’s API (Google Gemini or Anthropic Claude), only when you initiate an AI Assist request with your own typed input and your own API key.

The developer of GusHealth has no servers, no analytics dashboard, and no way to see what any user logs.

Your rights and controls

• Delete entries individually: swipe-left on any meal, exercise, or weight entry; tap Delete.
• Delete a date range: Settings → Data → Delete data by date range.
• Export all your data (right to portability): Settings → Data → Export my data. Produces a single JSON file with every meal, exercise, weight, favorite, profile field, and preference. Use the share sheet to save it to Files, Mail, AirDrop, etc.
• Erase logs only (keep profile / targets / preferences): Settings → Data → Erase all GusHealth data → “Erase logs only”.
• Erase logs + iCloud copy (when iCloud backup is enabled): same flow → “Erase logs + iCloud copy”.
• Erase EVERYTHING (full reset to first-launch state — wipes profile, targets, preferences, both AI keys in Keychain, the provider preference, the widget cache, and re-enters onboarding on next launch): same flow → “Erase EVERYTHING”.
• Disable iCloud backup: Settings → iCloud backup toggle.
• Switch AI provider: Settings → AI Assistant → Provider.
• Remove an API key (per provider): Settings → AI Assistant → tap the provider row → Remove stored key.
• Delete the entire app: standard iOS app deletion. Removes all local data and Keychain entries. If iCloud backup is enabled, the iCloud copy is preserved (use “Erase logs + iCloud copy” first if you want it gone too).

Children’s privacy

GusHealth is not directed at children under 13. It does not knowingly collect data from children under 13. The app’s onboarding requires a date of birth specifying age ≥ 13.

Changes to this policy

If this policy changes in a meaningful way, the new version will be reflected in the in-app About sheet’s changelog and the “Last updated” date above will be revised.

Contact

For questions about this policy: gustavo.murad.psi@gmail.com