Privacy Policy

Last updated: July 29, 2026

1. Service Status

Baaha is an early-stage service under active development. We work to keep your data safe and available, but features may change and occasional interruptions can occur while the Service matures. You can delete your account and data at any time (see Data Retention & Deletion below).

2. Information We Collect

When you use Baaha, we collect the following types of data:

  • Account information: name, email address, and authentication credentials when you create an account.
  • Self-reported nutrition data: food descriptions, estimated calories, macronutrients, micronutrients, and beverage/alcohol intake that you choose to log.
  • Self-reported body data: weight measurements you choose to log.
  • Profile information: dietary goals, calorie targets, and preferences you provide during onboarding.
  • Usage data: timestamps of interactions and technical metadata needed to operate the Service.
  • Apple Health data (iOS app, optional): if you choose to connect Apple Health, the iOS app can read weight, steps, active energy, and workouts from HealthKit and write your logged nutrition and weight back to HealthKit. This sync is off until you grant permission and can be turned off at any time in the app or in iOS Settings.

3. How We Use Your Data

We use your data to:

  • Provide and operate the nutrition tracking service.
  • Display your nutrition history, trends, and progress toward goals.
  • Improve the accuracy of AI-generated nutritional estimates.
  • Communicate with you about your account or the Service.

4. Health Data Classification

Some of the data you provide, including dietary intake, weight, and nutritional information, may be classified as consumer health data under applicable state laws (including the Washington My Health My Data Act, California Consumer Privacy Act, and similar legislation). We treat all nutrition and body-related data with heightened care and do not sell this data to third parties.

Data obtained from Apple HealthKit is used only to provide the sync features you enable. We never use HealthKit data for advertising or marketing, never sell it, and never share it with third parties for their own purposes, consistent with Apple's HealthKit guidelines.

5. Third-Party Data Processing

Your data may be processed by the following categories of third parties in order to provide the Service:

  • Backend infrastructure: Convex (database and server functions).
  • Hosting and deployment: Vercel.
  • Authentication: Third-party auth provider for account login.
  • AI processing: When you log food via natural language, your food descriptions may be processed by AI language models to estimate nutritional content. This processing occurs through MCP (Model Context Protocol) client interactions.
  • AI assistants you connect: when you connect Baaha to an AI assistant (such as Claude or ChatGPT), the data you request through that assistant, including your logs, stats, profile details, and recommendations, is returned to it and then handled under that assistant provider's own terms and privacy policy. Baaha only sends data to an assistant in response to requests you make in it.

We do not sell your personal or health data. We do not share your data with advertisers.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can permanently delete your account and all associated data at any time, directly in the app:

  • iOS app:Profile → Delete Account. This immediately revokes your access tokens and permanently deletes your profile, food logs, weight history, health data, workouts, and account records.
  • By request: you can also email us (address below) and we will delete your data within 30 days.

Deletion is permanent and cannot be undone. Data you exported to Apple Health remains in Apple Health under your control and can be removed via the Health app.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

  • Access: Request a copy of your personal data.
  • Deletion: Request deletion of your personal and health data.
  • Correction: Request correction of inaccurate data.
  • Portability: Request your data in a portable format.
  • Withdraw consent: Withdraw consent for data processing where applicable.

To exercise any of these rights, please contact us using the information below.

8. Data Security

We implement reasonable technical and organizational measures to protect your data. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Baaha is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@baaha.ai.