Consumer Health Data Privacy Policy
Effective: September 2026. Who we are: Berrymore MB, Vilnius, Lithuania. Contact: hello@fivebite.app.
This policy is required by Washington's My Health My Data Act and similar state laws. It covers the website fivebite.app and the Fivebite app for iPhone. It sits alongside our general Privacy Policy, which describes everything else we collect.
What consumer health data we collect
On the website
Only what you type or tap into the quiz on fivebite.app:
- your protein target from your clinician, or your body weight if you don't have one;
- whether you take a GLP-1 medication and roughly for how long (never the drug name or dose);
- appetite level, textures that go down easiest, foods you avoid, how strong smells affect you, how often you have days when little goes down, when eating is easiest;
- how many times a day you manage to eat, your age range, and your wake and bed times.
On the website we do not collect diagnoses, symptoms, medication names or doses, weight history, or location.
In the Fivebite app
Your answers and entries are saved only after you agree on the screen "Your diary stays private". We collect:
- Eating and nutrition: your protein target from your clinician, or the body weight used to work one out; what is hardest about eating right now; your usual appetite and your appetite today; textures that go down easiest; foods you avoid; your food and water log; your saved foods.
- Body measurements: weight you enter in the app.
- How you feel: symptoms you pick or type, how strong they are, when they started, how long they lasted, what helped, and your notes.
- Bodily functions: bowel movement entries and notes.
- Medication: whether you take a GLP-1 medication and roughly for how long. Only if you choose to keep a medication log: the name as you chose or typed it, the form, your schedule, the dose text exactly as you typed it, the injection site, whether you took it, and your notes.
- Your daily routine: wake and bed times.
- Food photos and meal descriptions you give to the AI features, if you allow them. Photos are not stored on our servers.
- Information worked out from your entries: daily and weekly totals and counts, and the AI weekly reviews written from them.
- The App Store ad that led to your install, if there was one: campaign, ad group and search keyword. A search keyword can hint at a health interest, so we treat it as health data.
- Consent records: what you agreed to or withdrew, when, and which version of the text you saw.
The app does not ask for diagnoses or medical records, and it does not collect your location. What the app reads from Apple Health (your weight) stays on your iPhone and never reaches us.
Where it comes from
- From you, directly: in the website quiz and in the app.
- From your own entries: totals, counts and weekly reviews are worked out from what you logged.
- From Apple, through our subscription service RevenueCat: which of our App Store ads led to your install.
- From Apple Health, with your permission: your weight, shown on your iPhone only and never sent to our servers.
We do not buy health data, and we do not receive it from data brokers or anyone else.
Why we collect it and how we use it
- To calculate your protein floor and build your personal plan: which foods, in what portions, at what times.
- To keep your diary in the app: show your entries, add up your day and your week, and set the reminders you asked for.
- To estimate food from a photo, a label or your words, to suggest what to eat, and to write your weekly review. Only if you allowed that AI feature on its own consent screen.
- To keep your account and your subscription working, to keep the service secure, and to fix errors.
- To understand, in aggregate and without your identity, who the plan is for: for example, how many website visitors have a clinician's number.
- To measure which of our own App Store ads lead to installs.
- To meet our legal duties.
We do not use consumer health data to target ads, and we do not give it to advertisers.
How it is stored
Website. Quiz answers are stored without your name, email address, IP address, or device identifiers. Your plan is encoded in a signed link rather than stored under your identity. The one exception is a paid order: it keeps the parameters needed to rebuild your plan together with your email address, so we can deliver what you bought and send it again on request. Unpaid orders are deleted after 24 hours.
App. Your entries are stored in your account on Google Firebase, in the United States. The account is anonymous: a random ID with no name and no email address. Data is encrypted on its way to our servers, and access rules allow your diary to be opened only from your own account.
What we share, and with whom
We do not sell consumer health data. We do not share it with advertisers, advertising platforms or data brokers, and we have no affiliated companies that receive it.
The only companies that receive consumer health data are processors: companies that handle it for us, under contract, only for the purposes above.
For the website:
- Vercel (hosting and storage, United States): quiz answers and paid orders;
- Resend (email delivery, United States): the emails with your result or plan;
- Stripe (payment processing, until 22 September 2026): the email address, the amount, and an order number, never quiz answers. The website takes no payments now.
Google Analytics on the website receives page paths and step names only, never quiz answers or your email.
For the app:
Google (Firebase), United States. Holds your account and your diary, so it stores the categories listed above, with two exceptions. Food photos are not stored at all, and the ad that led to your install is kept at RevenueCat. Crash reports also go to Google, without diary contents. Google Analytics is not used in the app.
Anthropic, the AI provider, United States. Only with your separate consent for each AI feature:
- for AI food help: food photos, meal descriptions, saved foods, protein left today, appetite today, textures that go down easiest, foods you avoid, and the time of day;
- for the AI weekly review, counts that can include: protein, water, bites and check-in days; the symptoms you logged from the app's fixed list, on how many days, how strong they were, and how many entries fell within two days after a logged shot; and the days with a logged shot or pill.
Anthropic never receives your name, email, account ID, Apple Health data, notes or doses. It may not train its models on this data. It deletes it within 30 days, and keeps it longer only if it was flagged for a misuse review.
RevenueCat, subscription service, United States. Your account ID, your purchase history, which version of the subscription screen you saw, and Apple's ad attribution. Nothing from your diary.
Apple processes App Store purchases under its own privacy policy. If you connect Apple Health, the app saves the weight and water you log to the Health app on your iPhone, at your request.
Your rights and how to use them
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and get a copy of it;
- get a list of any third parties or affiliates we shared or sold it to. Today there are none: we use only the processors named above;
- withdraw your consent;
- have your data deleted.
In the app. Change or delete any entry yourself. Withdraw your AI consents under Me → Privacy. Delete everything under Me → Account → Delete account and all data. Your diary, your account, your app events and your RevenueCat record are deleted right away, and in any case within 30 days. Anthropic deletes what it received within 30 days, as described above. Entries the app saved to Apple Health stay in the Health app on your iPhone; you can remove them there.
By email. Write to hello@fivebite.app. For the website, write from the email address you used; we delete your data, including orders. For the app, accounts are anonymous, so we will ask a few questions to find the right account and to make sure the request is really yours. If we cannot match an account to you, we will tell you, and help you use the app's own delete button instead. You can use email even if you no longer have the app.
We answer within 30 days, usually much sooner. Using these rights costs nothing, and we will never treat you differently for using them.
If we say no: how to appeal
If we turn down a request, we will tell you why. You can appeal by emailing hello@fivebite.app with the word "Appeal" in the subject line. We will answer in writing within 45 days and explain what we did or did not do, and why.
If your appeal is turned down, or if you believe your rights under Washington's My Health My Data Act have been violated, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint. If you live in another state, you can contact your own state's attorney general.
Changes
The effective date at the top changes when this policy changes. If we ever want to collect or use consumer health data in a new way, we will ask for your consent first.
Contact
Berrymore MB, Vilnius, Lithuania. Email: hello@fivebite.app.