Privacy policy
Last updated 21 October 2026
Fodmi is an iPhone app that helps people with IBS or a sensitive gut log meals, see their estimated FODMAP content and track symptoms. This policy explains what data Fodmi handles, why, and the choices you have. It covers the Fodmi iOS app and this website, fodmi.app.
The short version. Your meal journal and check-ins are stored on your iPhone. Meal photos and descriptions are sent to our server only so they can be analysed. We don’t show ads, we don’t sell your data, and we don’t track you across other companies’ apps or websites.
Who we are
Fodmi is run by Llorenç Bauza, who is the data controller for the data described here. You can reach us at [email protected] about anything in this policy.
What stays on your iPhone
Your journal (meals, check-ins, symptoms, stool type, notes, streaks and milestones) and your preferences are saved only on your device. Fodmi doesn’t sync them to other devices or to our server. You can export a copy as a file, or erase everything in Profile → Your data → Delete all local data. Deleting the app also removes them.
What we collect and why
| Data | Examples | Why we use it |
|---|---|---|
| Meal photos and descriptions | A photo of your plate, a typed or spoken description of a meal | To identify the ingredients and estimate the meal’s FODMAP content |
| Food searches | The words you search for | To find foods in our database |
| Health information | Symptoms and check-in answers you choose to log, and analytics events about how you use those features | To run the features you use and to understand which parts of the app help people |
| Identifiers | A random anonymous account ID created by the app, the app’s vendor identifier (IDFV) | To keep your session with our server and to count users without knowing who they are |
| Purchases | Your subscription status, product, trial and renewal dates | To unlock paid features and show the right offer |
| Apple Ads attribution | Which Apple Search Ads campaign, if any, led to the install | To measure which of our ads work. We don’t use the advertising identifier (IDFA) |
| Usage and diagnostics | Screens viewed, buttons tapped, app version, device model, OS version, approximate location derived from your IP address, crash reports and error logs | To fix bugs and improve the app |
| Support emails | Your email address and what you write to us | To answer you |
We don’t ask for your name, email address or phone number to use the app. Fodmi has no account sign-up: the app creates an anonymous ID the first time it talks to our server.
Session replay
To understand where people get stuck, the App Store version of Fodmi may record a small share of app sessions as screen replays with PostHog. Text fields, images and photos are masked in these recordings, so your meal photos and anything you type are not captured.
Who processes your data
We use these service providers. Each one processes data only on our behalf and under a data processing agreement.
| Provider | What it does | Data it receives |
|---|---|---|
| OpenAI | Recognises ingredients in meal photos and descriptions (using EU data residency) | Meal photos and descriptions |
| Our hosting provider and Cloudflare | Run and protect our server at api.fodmi.app | Meal photos and descriptions, food searches, anonymous account ID, IP address |
| Superwall | Shows the subscription offer and manages purchases and Apple Ads attribution | Purchase history, subscription status, device and app details, Apple Ads campaign data |
| RevenueCat | Lets our server check whether you have an active subscription | Anonymous app user ID, subscription status and purchase history |
| PostHog (EU servers) | Product analytics and session replay | Usage events, vendor identifier, Apple Ads campaign, device and app details, approximate location from IP address |
| Sentry (EU servers) | Crash and error reporting | Crash logs, device and app details. Sentry is configured not to collect personal data |
| Apple | App Store payments and Apple Ads attribution | Apple processes your payment. We never see your card details |
OpenAI does not use data sent through its API to train its models. We don’t share your data with anyone else, except where the law requires it.
Legal bases (EU, EEA and UK)
- Consent for health information you choose to log and for meal photos you send for analysis. You give it when you use those features and can withdraw it at any time by not using them, deleting your local data, or asking us to delete server data.
- Contract to provide the app and your subscription.
- Legitimate interests for security, crash reports, analytics and measuring our Apple Ads campaigns. You can object at any time by emailing us.
How long we keep data
- Your journal: on your iPhone until you delete it or the app.
- Meal photos, descriptions and analyses on our server: until you ask us to delete them. We delete them within 30 days of your request.
- Analytics and session replays: kept by PostHog for up to 12 months.
- Crash reports: kept by Sentry for up to 90 days.
- Purchase records: for as long as needed to provide your subscription and meet tax and accounting obligations.
- Support emails: up to 2 years after the conversation ends.
Your rights and choices
You can ask us to access, correct, delete or export your data, to restrict or object to how we use it, or to withdraw consent. Email [email protected]. Because Fodmi has no accounts and doesn’t know who you are, we may ask for details that help us find your server data, such as roughly when you analysed meals. We reply within 30 days.
You can also:
- Delete your local journal in Profile → Your data.
- Turn off notifications in Profile → Check-ins or in iOS Settings.
- Cancel your subscription in your Apple ID settings.
If you’re in the EU, EEA or UK and think we’ve mishandled your data, you can complain to your local data protection authority.
International transfers
Analytics (PostHog) and crash reports (Sentry) are stored in the EU, and OpenAI processes meal analysis with EU data residency. Superwall, RevenueCat and Apple may process purchase data in the United States. Where data leaves the EU, EEA or UK, we rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
Security
Data travels encrypted over HTTPS. Meal photos are stored privately on our server and are only returned to the anonymous session that uploaded them. No system is perfectly secure, but we limit what we collect and who can access it.
Children
Fodmi is not intended for children under 16, and we don’t knowingly collect their data. If you think a child has used Fodmi, contact us and we’ll delete their data.
This website
fodmi.app is a static website. It doesn’t use cookies, analytics or advertising trackers, and it loads its fonts from our own server. Our hosting provider keeps standard server logs (such as IP address and pages requested) for security.
Changes to this policy
If we change this policy, we’ll update the date at the top. If the changes are significant, we’ll tell you in the app.
Contact
Llorenç Bauza · [email protected]