Privacy policy.
Hold the Bun is a keto dining app. This policy explains what information we collect, why, who we share it with, and the choices you have. “We” and “us” mean Hold the Bun’s developer: the person named as the seller on the App Store and Google Play.
The short version: we collect only what the app needs to work, we never sell your information or use it for ads, and you can delete your account and everything in it from Settings at any time.
What we collect
Information you give us:
- Account: your email address and how you sign in (Apple). If you use Sign in with Apple and hide your email, we get a private relay address from Apple instead.
- Profile: your name, @handle and profile photo if you add them, and your Bun’s color.
- Goals and body details: your net carb, protein, fat and calorie goals. If you use the goal calculator, also your sex, age, height, weight, activity level and whether you want to lose, keep or gain weight.
- Weight: the weigh-ins you log or bring in from Apple Health, and your goal weight if you set one.
- Fasting and water: when each fast starts and ends, your fasting plan, how much water you log each day, and your water goal.
- Ketone readings: any blood or urine strip readings you choose to log.
- Food log: the foods you log, with their amounts and nutrition.
- Bun’s answers and your chat: the results of your menu, place and plate scans, your thumbs up or down on them, and your messages with Bun.
Information the app uses while you use it:
- Photos you scan: menu, place and plate photos go to our server and to Google Gemini so Bun can read them. We don’t keep them on our server; they stay on your phone.
- Barcodes: the number on a product you scan, to look up its nutrition.
- Face Card, only if you use it: the photos you take of your face stay on your phone. They never go to our server, to Google Gemini or to anyone else, and we never scan, measure or score your face. If your phone backs up to your own iCloud or Google account, that backup may include them.
- Apple Health, only if you turn it on (iPhone): we add the food you log to Apple Health (carbs, fiber, fat, protein and calories), we read your weigh-ins from it to show in Progress, and we read your latest weight and height when you ask to fill in the goal calculator.
- Request counts: how many scans and questions you make each hour, so no one can overload Bun. We delete these counts after two days.
- Basic technical logs: like most online services, our hosting providers may briefly keep details such as your IP address and the time of a request, for security and fixing problems.
We don’t use advertising, ad tracking or third-party analytics.
How we use it
- To run the app: save and sync your log and goals, and give Bun’s estimates and answers.
- To keep Hold the Bun safe: limit requests.
- To answer you when you contact us.
We don’t sell your information, share it for advertising, or use it to build a profile of you for anyone else.
Who we share it with
Only the companies that help run the app, and only what each one needs:
- Supabase stores your account, profile, goals, weigh-ins, fasts, water, ketone readings, log, scans and chat.
- Google Gemini reads the photos you scan and your messages to Bun, along with your goals, today’s totals and the dishes from your last scan, so Bun’s answers fit your day. We ask for your okay before the first time, and you can turn it off in Settings.
- USDA FoodData Central and Open Food Facts look up the barcode numbers you scan. They get nothing else about you.
- Apple signs you in.
- Expo runs our server.
Your profile photo is stored at a web address that isn’t listed anywhere, but anyone who has the address can open it.
We may also share information if the law requires it, to protect someone’s safety, or as part of a sale or merger of Hold the Bun, in which case this policy still applies to it.
How long we keep it
We keep your information until you delete it or your account.
When you delete your account (Settings → Delete account), we delete your account, profile, goals, weigh-ins, fasts, water, ketone readings, food log, scans and chat from our servers, and everything on your phone. Copies in our providers’ backups are erased as those backups expire.
If you’re signed out, your log, weigh-ins, fasts, water and ketone readings stay only on your phone, and deleting the app deletes them.
Face Card photos stay on your phone until you delete them, sign out, delete your account or delete the app. Any of those deletes them for good, and we can’t bring them back because we never have a copy.
Your choices and rights
- See and change your goals, weigh-ins, fasts, water, ketone readings, log and profile in the app.
- Delete any or all of your Face Card photos in Face Card.
- Stop sending anything to Google Gemini in Settings → Bun’s brain. Scans and Ask Bun stop until you allow them again; everything else keeps working.
- Turn off camera access anytime in your phone’s settings. The rest of the app keeps working.
- Delete your account and all your data in Settings → Delete account.
Depending on where you live (including Indiana, California and other states), you may have the right to know what we hold about you, get a copy, correct it, delete it, and opt out of its sale, targeted advertising or profiling. We don’t sell information, show targeted ads or profile you, and we give these rights to everyone. To ask, email us at hello@holdthebun.com. We’ll answer within 45 days. If we say no, you can appeal by replying to our answer, and we’ll respond within 60 days.
Health information
Your goals, body details, weigh-ins, fasts, water, ketone readings and food log are private. They’re never shown to other people, and we use them only to run the app for you. Hold the Bun isn’t a medical service, and Bun’s numbers are estimates, not medical advice. That includes Bun’s ketosis estimate, which is an educated guess from what you log, not a medical test.
Apple Health: you choose in Apple’s own screen what Hold the Bun may add and read, and you can change it anytime in the Health app (tap your picture, then Apps). We use Apple Health data only to give you the app’s features. We never use it for advertising, never sell it, and never share it with anyone else. The only Apple Health data that leaves your phone is your weigh-ins (if you’re signed in) and a weight or height you fill in from it and then save with your goals; those are stored privately with your account like anything you type there, and deleting your account deletes them. Turning off Apple Health in Settings stops new weigh-ins from coming in. Deleting your account doesn’t remove food already added to Apple Health; you can delete it in the Health app.
Age requirement
Hold the Bun is for people 18 and older. We don’t knowingly collect information from anyone younger. If we learn we have, we delete it.
Security
Information travels over encrypted connections, and our database lets each person read and change only their own private information. No system is perfectly secure, but we work to protect yours, and we’ll tell you if a breach affects you, as the law requires.
Where it’s stored
Our providers store and process information in the United States and other countries where they operate.
Changes to this policy
If we change this policy, we’ll update the date at the top. For big changes, we’ll tell you in the app before they take effect.
Contact us
Questions or requests about your privacy: hello@holdthebun.com.