Privacy Policy

Account information. If you create an account we store your name and email address. Sign-in is handled by email verification code, Sign in with Apple, or Google sign-in — we never see your Apple or Google password.

Cycle and check-in data. Period dates, cycle settings, and daily symptom check-ins you log.

Nutrition data. Meals and foods you log by text, barcode, photo, or voice — including descriptions, quantities, nutrition estimates, and meal times.

Photos and voice. Meal photos and voice recordings you submit are processed to generate your food log. Meal photos stay on your device and are not uploaded to your cloud account.

Goals and profile. Optional details you give during onboarding or calibration, such as your goal, weight, and activity level, used to personalize daily targets.

Technical data. Basic information needed to run and debug the service, such as app version and error logs.

We use your information to provide the app: logging and analyzing your food, computing your Cycle Score and nutrient estimates, tracking your cycle, syncing your account across your devices, and sending sign-in and service emails. We do not sell your data, show advertising, or use your health data for marketing.

We use a small number of providers to operate Grapefruit, and they process your information only as needed to run the service:

• Supabase — account authentication and cloud storage of your synced data.
• AI providers — food descriptions, photos, and voice recordings are processed to estimate nutrition and transcribe voice notes.
• Vercel — hosting for our website and API.
• Email providers — delivery of verification codes and service emails from hello@trygrapefruit.com.

You can use Grapefruit without an account — data then stays on your device. If you have an account, you can permanently delete it and its stored data from within the app: open Profile → Account → Delete account. Deletion removes your account record and synced data and cannot be undone. You can also email us at hello@trygrapefruit.com to request deletion or ask about your data.

We use reasonable technical and organizational measures to protect your information, including encrypted transport and account-scoped storage. No system can be guaranteed completely secure.

Grapefruit is not directed at children under 13, and we do not knowingly collect their information.

If this policy changes we will update it here and revise the date above.

Questions about this policy or your data? Email hello@trygrapefruit.com.