Privacy policy

capi is made by Good Enough Labs ("we"). This policy covers the capi app for iOS and Android and the servers it talks to. The short version: we keep what the app needs to work, we don't sell your data, the app has no ads and no tracking, and you can delete your account and everything in it from inside the app.

What we collect

• Your account. You sign in with Apple or Google. We receive the account identifier, name and email address that Apple or Google shares with us (Apple may give us a private relay address). To keep you signed in we store a session with the IP address and basic information about the app and device it came from.
• Your profile and plan. What you answer when you set up: your name, goal, sex, birth date, height, weight, target weight and date, activity, pace, diet and focus, obstacles, motivations, what you've tried before, how you heard about capi, your country, language and units. We use them to calculate your calorie and macro goals and to show your plan. You can change them in settings.
• Your meals. The words you write or say for each meal, its date, time and time zone, and what capi makes of it: each food with its amount, grams, calories, macros and micronutrients, which table it came from, how sure capi is, the alternatives it offers and any corrections you make.
• Your weight. The weigh-ins you log, and the ones you bring in from Apple Health or Health Connect if you turn that on (below).
• Groups. If you use groups: the groups you create or join, their names, who invited whom, invite codes, what goes on a group's wall (a meal you choose to post, what you write, and the posts capi adds for milestones like a closed day), reactions, nudges, stickers you give, challenges, and what you chose to show each group. Group members always see whether you logged something today; they see your streak and the day's calories only if you choose to show them, and they never see your weight.
• Your avatar. A capi character, or a photo you pick. The photo is made small on your phone before it's sent, and only you and the people in your groups can see it.
• Progress. Streaks, rest days, levels, quests, stickers, packs and celebration cards, which come from what you log.
• Subscription status. If you subscribe to capi+, Apple or Google tells us the product, the store, its expiry and a transaction identifier or purchase token. We never see your card or payment details.
• A notification token, only if you allow notifications. We keep it with your device's platform and language so we can tell you when friends nudge you, react or join your group. Signing out deletes it. Meal reminders are scheduled on your phone and don't need our servers.
• App usage. The steps of setup you went through, when you open or close the capi+ screen and which plan you pick, the meals you log and how (words, voice, photo or by hand), invites and cards you share, a random identifier for your device that is linked to your account when you sign in, your phone's system and the app version. These never include your name, email, meal words, weight or other body numbers.

Voice and photos

Voice. When you say a meal out loud, your phone's speech recognition (Apple's on iPhone, Google's on Android) turns it into words. Only the words reach our servers: we never receive or keep the recording. Depending on your phone and language, Apple or Google may process the audio on their own servers to do this, under their privacy policies.

Photos of a plate. When you log a meal with a photo, the app makes it smaller on your phone and sends it through our servers to our AI provider, which lists the foods it sees. We use the answer and don't store the photo.

Share cards. Cards you make to share (a streak, a sticker, a day) are made on your phone, along with any photo you put behind them, and are never uploaded to us. They go only where you send them, such as Instagram or your photos.

Apple Health and Health Connect

Connecting Apple Health (iPhone) or Health Connect (Android) is optional and off until you turn it on. When it is on:

• capi writes the meals you log (calories, protein, carbohydrates and fat, and on Apple Health the meal's words as its name) and your weigh-ins, from the day you turned it on.
• capi reads your weight from other apps and scales, and those weigh-ins become capi weigh-ins on our servers.
• If you turn it on, capi reads the active energy you burned, to show it in your diary. That stays on your phone and never reaches our servers.

Data from Apple Health or Health Connect is used only to run these features. It is never used for advertising or marketing, never sold, and never sent to our analytics or AI providers. You can turn each switch off in capi's settings and revoke access in the Health app or Health Connect at any time.

Who processes it

We use a few providers to run capi. Each one gets only what its job needs.

• Hosting and storage providers run our servers and store your account and everything described above, as needed to run capi.
• AI service providers process the words of a meal or a correction, and the photo of a plate, to list the foods and amounts, pick the matching food from the nutrition tables and check the amounts. With them go the language and short descriptions of the foods that could match, and never your name or email. Where they offer it, we ask them not to store these requests.
• Public nutrition databases get only the words that name a brand, or the barcode you scan, to find a packaged product. Nothing about you goes with them. The other nutrition tables we use live on our servers.
• Product analytics providers receive the app usage described above, so we can see which features work.
• Subscription service providers show the capi+ screens and help us handle purchases with the App Store and Google Play. They receive your account identifier, your app language, whether you finished setup and whether capi+ is on, basic device information, which screens you saw, and the store's notifications about your subscription.
• Notification services, along with Apple and Google, deliver the notifications you turned on, using the token above.
• Apple and Google handle sign-in, payments, speech recognition and the health apps under their own privacy policies.

These providers may process data outside your country, including in the United States. We don't sell your data, we don't share it for advertising, and we don't use it to train AI models. capi has no ads and doesn't track you across other companies' apps or websites.

How long we keep it

We keep your data while your account exists. Deleting a meal, weigh-in or post removes it right away. Deleting your account (you → settings → delete account and data) removes your account, profile, meals, weigh-ins, goals, groups you created, your posts, avatar, progress and notification tokens from our database at once. Copies in our database provider's recovery history expire within 30 days.

Some data stays with others: what capi wrote to Apple Health or Health Connect stays there until you delete it in those apps; usage events stay with our analytics provider, tied to random identifiers, without your name or email (write to us and we'll delete them); and providers may keep request logs, or data used to prevent abuse, for a short time under their own policies. Deleting your account doesn't cancel a subscription: cancel it in the App Store or Google Play.

Your choices and rights

• Delete your account and all your data from inside the app, at any time.
• Change or delete any meal, weigh-in, goal or answer, and change your avatar.
• Choose what each group sees, leave a group, or stop receiving nudges in settings.
• Turn off microphone, camera, notification or health access at any time in your phone's settings; you can still log meals by typing.
• Ask us for a copy of your data, or to correct it, by writing to hi@goodenoughlabs.com. We answer within 30 days.

Depending on where you live (for example Brazil, the EU, the UK or California), you may have more rights under local law, such as those under Brazil's LGPD. Write to us and we'll honor them.

Children

capi is not meant for children under 13, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date above. If the change is significant, we'll also tell you in the app.

Contact

Good Enough Labs · hi@goodenoughlabs.com