Privacy Policy
Alusa is a calorie tracker with an AI body analyzer. This policy explains exactly what happens to your data. The short version: almost everything stays on your phone, and the only data that leaves it is what is needed to analyse a photo you asked us to analyse.
No account, no sign-up
Alusa does not ask you to create an account. We do not collect your name, email address, phone number or postal address. We have no way to identify you personally.
When you first use an AI feature, an anonymous identifier is generated so our servers can tell one device's request from another's. It is a random string. It is not linked to your identity and we cannot use it to contact you.
What stays on your device
The following never leaves your phone unless you use an AI feature:
- Your onboarding answers: goal, biological sex, age, height, weight, target weight and date, activity level, dietary preference, and the obstacles you selected.
- Every meal you log, including its name, calories, macronutrients and its photo.
- Every weight you record.
- Every body scan, including its photographs and any resulting scores.
This data is stored in the app's private storage on your device. Photographs are copied into the app's own document folder so that iOS does not delete them. We do not upload, back up or synchronise any of it. Deleting the app deletes all of it permanently, and it cannot be recovered by us or by you.
What leaves your device, and when
Only when you actively use an AI feature:
- Meal scan. The photograph of your meal is sent for analysis, together with your dietary preference, so the estimate can exclude foods you do not eat.
- Body scan. The photographs you captured are sent for analysis, together with your biological sex, age, height and weight, which are needed to interpret them.
These photographs are processed and discarded. They are not stored on our servers, and they are not used to train any model.
About body photographs. We understand these are the most personal thing the app handles. They are only ever sent when you take a body scan yourself. They are never sent in the background, never attached to an identity, never stored on our servers, and never shared with anyone other than the processors listed below.
Who processes your data
- Supabase hosts the function that receives your photograph. The project is hosted in the European Union (Paris). The photograph passes through it and is not retained.
- OpenRouter routes the request to the AI model that performs the analysis, and the model provider it routes to processes the image to produce the estimate.
- Apple handles your subscription payment. We never see your payment details, your card, or your Apple ID.
- RevenueCat records whether your subscription is active, so the app knows what to unlock. It receives the anonymous identifier and your subscription status, never your photographs or your health data.
What we do not do
- We do not sell your data. There is nothing to sell and no arrangement to sell it.
- We do not show advertising and we do not share data with advertisers.
- We do not track you across other apps or websites.
- We do not use your photographs to train AI models.
Your rights
Under the GDPR you have the right to access, correct, delete and export your personal data, and to object to its processing.
Because Alusa holds your data on your own device and cannot identify you, the fastest way to exercise deletion is directly in the app: Settings → Clear meals and body data, or by deleting the app, which removes everything. If you would like to exercise any other right, or you believe we hold data about you, contact us at the address below and we will respond within one month.
You also have the right to lodge a complaint with your national data protection authority. In France this is the CNIL.
Children
Alusa is not intended for anyone under 16. We do not knowingly process data from children. If you believe a child has used the app, contact us and we will help remove their data.
Changes to this policy
If we change how data is handled, we will update this page and change the date at the top. If the change is significant, we will say so in the app before it takes effect.
Contact
Questions about this policy or about your data: contact@bsrlabs.xyz