Privacy Policy

Effective: September 2026. Who we are: Berrymore MB, Vilnius, Lithuania (the "we" in this policy). Questions and requests: hello@fivebite.app.

This policy covers the website fivebite.app, the emails we send from it, and the Fivebite app for iPhone. The website and the app work differently, so each has its own part below. It is written to be read, not skimmed. The website part is short because the website collects little. The app part is longer because a diary holds more.

The short version

• We collect what you give us to build your plan and keep your diary, and very little else.
• We never sell your data, never give it to advertisers, and never use it to target ads.
• There are no advertising trackers in the app and no advertising pixels on the website.
• What the app reads from Apple Health stays on your iPhone.
• The AI features are optional. They start only after you say yes on a separate screen that names the AI provider, Anthropic.
• You can delete your account and everything in it at any time, inside the app.

Part 1. The website

What we collect and why

Quiz answers. Your protein target or weight, whether you are on a GLP-1 medication and for roughly how long (no drug names, no doses), appetite level, textures that go down easiest, foods you avoid, and your wake and bed times.

Some visitors see a longer quiz. It also asks things like how often you have days when almost nothing goes down, how food smells affect you, how many times a day you manage to eat, when eating is easiest, who makes your food, your grocery budget and your age range.

We use the answers to build your plan. We store them without your email address, IP address, or device identifiers, and only in aggregate form (for example, how many people answered "almost no appetite") to understand who the plan is for.

Waitlist. If you ask us to notify you about the app, we keep your email, the platform you chose and the date, and use them only to send that notification (and one delay notice if needed). We delete them 30 days after the notification, or right away if you unsubscribe. This list is stored separately from any test answers.

Email address (until 22 September 2026). The website used to email you your result. For anyone who asked for it we still hold the address, the time and version of the consent given, and the ad campaign they arrived from. We no longer send those emails, and you can have the record deleted at any time by writing to hello@fivebite.app. Every email we send has an unsubscribe link.

Orders (until 22 September 2026). The website used to sell a 7-day plan for $9. It is no longer for sale. For the people who bought it we still store the order: email address, the parameters needed to rebuild the plan, the amount, the time, and the payment identifier from Stripe, so that we can deliver what they paid for. Write to hello@fivebite.app to have an order deleted.

Funnel steps. Which screens were shown, counted on our own server with a random per-tab identifier that disappears when you close the tab. There are no advertising pixels on this site, and Meta receives nothing from it.

Google Analytics. On the website we use Google Analytics 4 to count visits and which screens people reach. It sets Google's analytics cookies and sends Google the pages you view and the step names of the funnel.

Page addresses go to Google without the part of the link that holds your answers. Google signals and advertising personalization are switched off. Google Analytics does not receive your quiz answers, your email address, or your order. You can block it with a browser setting or extension; the site works the same without it. Google Analytics is used on the website only, never in the app.

Payment on the website

The website no longer sells anything and takes no payments. Until 22 September 2026 payments for the 7-day plan were processed by Stripe on Stripe's pages; we never saw or stored card numbers. Subscriptions in the app are billed by Apple, as described below.

What we never ask on the website

On the website we do not ask which medication you take, your dose, your diagnoses, or your weight history. We do not collect precise location. The only cookies on the site are the Google Analytics cookies described above.

Where website data lives

The site is hosted on Vercel and data is stored in Vercel's storage (United States). Emails are sent through Resend (United States). Past payments were handled by Stripe.

Part 2. The Fivebite app

The app is a food planner and a personal diary. It keeps more than the website does, because keeping your entries is what a diary is for. Here is all of it.

Your account

When you first open the app, it creates an anonymous account for you automatically, using Google's Firebase Authentication. The account is a random ID. It has no name, no email address and no phone number.

Sign in with Apple is optional. It lets you keep your diary when you change phones. We do not ask Apple for your name or your email address. Apple gives us only a private identifier, so that we can recognize your account when you sign in again.

The app does not ask for your name, email address, phone number, age or sex. It does not ask for your location or your contacts, and it does not use an advertising identifier.

What the app saves to your account

Your answers and your entries are saved only after you agree on the screen called "Your diary stays private". They are saved to your account on Google Firebase (the Cloud Firestore database), on servers in the United States:

• Your setup answers: what is hardest about eating right now, your protein target or the weight used to work it out, your usual appetite, the textures that go down easiest, the foods you avoid, your wake and bed times, and whether you take a GLP-1 medication and for roughly how long.
• Your food log: what you ate, when, the portion, and the protein, calories, fiber and fluid counted for it; your saved foods; and how each entry was added (for example from your plan, by hand, or with AI).
• Water you log, and your appetite today.
• How you feel: the symptoms you pick or type, how strong they are, when they started, how long they lasted, what helped, and your notes.
• Bowel movement entries, with any note you add.
• A medication log, only if you choose to keep one: the name as you chose or typed it, the form (shot or pill), your schedule, the dose text exactly as you typed it, the injection site, whether you took it, and your notes.
• Weight you enter in the app.
• Consent records: each consent you gave or withdrew, with the date and the version of the text you saw.
• AI weekly reviews written for you, if you use that feature.
• Settings and counters: units, text size, water goal, whether Fivebite Plus is active, and how many AI requests you made today (the AI tools have daily limits).
• App events, described below.

We use your answers and your diary to run the app for you: to build your plan, show your entries, add up your day and your week, and set the reminders you asked for.

The app also keeps a copy of your diary on your iPhone, so it works without internet. That copy is left out of iCloud backups; our server is the backup.

Apple Health

Connecting Apple Health is optional, and the app asks first. With your permission, the app reads your weight from Apple Health, and it saves the weight and water you log in Fivebite to Apple Health. Nothing else is read or written.

What the app reads from Apple Health stays on your iPhone. It is never sent to our servers, to the AI provider, to crash reporting or to analytics. We do not use Apple Health data for advertising, and we do not sell it or pass it to anyone.

If you delete a weight or water entry in Fivebite, the app also removes the copy it saved to Apple Health. If you delete your whole account, entries already saved to Apple Health stay in the Health app, because they are yours. You can remove them there.

Voice, camera and photos

Voice. When you say what you ate, your words are turned into text on your iPhone by Apple's on-device speech recognition. The sound is not sent to us or to the AI provider. Only the text is used, the same as if you had typed it. If your iPhone cannot do this on the device, the app offers the keyboard's dictation instead, which is an Apple feature.

Photos. The app uses the camera, or a photo you pick, only when you tap a photo feature. Before a photo leaves your iPhone, the app makes it smaller and removes the location and other hidden details saved inside it. Photos are used only for the AI food features described next. They are not stored on our servers.

AI features, only if you say yes

The AI features are optional and come with Fivebite Plus. The AI provider is Anthropic, an AI company in the United States. Each feature has its own consent screen in the app, and nothing is sent until you tap Allow. Requests go from the app to our own server, and from there to Anthropic. There is no chat with the AI.

AI food help counts protein from a photo, a label or your words, and suggests what to eat. If you allow it, we send Anthropic:

• photos you take or pick for food logging: your plate, a nutrition label, your fridge or shelf, a restaurant menu;
• meal descriptions you type or say (as text, never the sound), and a list of foods you have at home, if you type one;
• your saved foods: name, portion and protein;
• how much protein is left today, and your appetite today;
• for food ideas, also the textures that go down easiest, the foods you avoid, and the time of day.

AI weekly review puts your week's numbers into plain words. If you allow it, we send Anthropic your week in counts. They can include:

• your protein and water goals, and on how many days you reached them;
• your average protein, and your average bites a day;
• how many days you checked in;
• the symptoms you logged from the app's fixed list: on how many days, how strong they were, and how many entries fell within two days after a logged shot;
• how many shots or pill days you logged.

Never sent to Anthropic: your name, email address, account ID, Apple Health data, your notes, your doses, the name of your medication, your weight, or your bowel movement entries. A symptom name you typed yourself is never sent; it is only counted as "another symptom". For the food features, the app never adds how you feel or your medication log to a request.

What you type, say or photograph for the food features is sent as it is, so please keep it about food.

Anthropic handles this data only on our behalf, under contract. It may not use it to train its models. It deletes it within 30 days, and keeps it longer only if it was flagged for a misuse review. We do not store your photos on our servers. What you save from an AI result becomes a normal diary entry, and your weekly review is saved in your account so you can read it again.

You can withdraw either consent at any time in the app under Me → Privacy. The app works without AI: you can add food from the food list, from your saved foods or by hand, and your week is still shown in numbers.

App events and crash reports

To see which screens work and where people get stuck, the app records events. An event is a screen or step name, a yes or no on a consent or permission screen, a purchase step (for example "saw the subscription screen" or "started a purchase"), the kind of entry that was saved (for example "food" or "water"), or whether an AI request worked.

Events carry your account ID and the app version. They never carry the contents of your entries: no food names, grams, symptoms, doses, notes or setup answers. Events start when you first open the app. They are stored in our own database at Google Firebase, not with an analytics company. We do not use Google Analytics in the app.

If the app crashes, a crash report goes to Google's Firebase Crashlytics so we can fix the problem. It holds technical details such as the iPhone model, the iOS version, the screen you were on, an error code and where in the code the crash happened. It holds no diary contents and no AI answers, and we do not attach your account ID to it.

Our server logs record technical details only, such as whether a request worked and how long it took. They never record what you typed, said or photographed.

As with any app that talks to a server, the companies listed below see your IP address and basic technical details, such as the app version and the iOS version, when the app connects. We do not use them to locate you or to follow you anywhere.

Subscription and purchases

Fivebite Plus is bought through Apple's App Store. Apple takes the payment; we never see or store your card details. To know whether your subscription is active, we use RevenueCat, a subscription service. RevenueCat receives your account ID, your purchase history for Fivebite, which version of the subscription screen you saw, and Apple's ad attribution token (explained next). It receives nothing from your diary or your answers.

How we measure our App Store ads

We advertise Fivebite in the App Store. If you install the app after tapping one of our ads there, Apple tells us, through RevenueCat, which campaign, ad group and search keyword led to the install. It is kept with your account record at RevenueCat, so we can measure which ads work. We share it with no one else. This does not follow you across other companies' apps or websites, which is why the app never shows Apple's "Allow tracking?" question.

Reminders

Reminders are set up on your iPhone itself. They are not sent from our servers. They never show a medication name or a symptom on your lock screen.

Who receives app data

Only these companies, and only for the jobs listed. Each one works for us under contract, except Apple, which you deal with directly.

• Google (Firebase), United States: sign-in (Authentication), the database that holds your account (Cloud Firestore), our server code (Cloud Functions), app settings (Remote Config), a check that requests come from the genuine app (App Check), and crash reports without diary contents (Crashlytics).
• RevenueCat, United States: subscription status, as described above.
• Anthropic, United States: only what is listed under AI features, and only if you gave that consent.
• Apple: payments and subscriptions through the App Store. Apple Health and speech recognition run on your iPhone.

There are no advertising SDKs in the app. We do not sell your data, we do not give it to data brokers or advertisers, and we do not use it to target ads.

Where app data lives, and for how long

App data is stored in the United States. We keep your diary for as long as you keep your account. You can delete single entries at any time, and you can delete everything at once.

Me → Account → Delete account and all data deletes your diary, your account, your app events and your customer record at RevenueCat right away. Our promise is that all of it is gone from our systems within 30 days at the latest.

If you signed in with Apple, the app also asks Apple to disconnect Fivebite from your Apple Account. Data already sent to Anthropic is deleted on the schedule described above. Crash reports are not tied to your account; Google deletes them after about 90 days.

Three things to know:

• Deleting the app from your iPhone does not delete your account or your diary from our servers. To erase them, use Delete account and all data first.
• Entries the app saved to Apple Health stay in the Health app. You can remove them there.
• Deleting your account does not cancel a subscription, because Apple manages it. Cancel in iPhone Settings → your name → Subscriptions. Apple keeps its own record of your purchases.

If you no longer have the app, email hello@fivebite.app and ask us to delete your data. Because accounts are anonymous, we will ask a few questions to find the right one. If we cannot match an account to you, we will tell you, and help you delete it from the app instead.

For both the website and the app

Health information and your consent

Much of what you give us may count as consumer health data under some laws, including Washington's My Health My Data Act. We handle it only with your consent.

On the website, you give it by taking the quiz, and we use your answers only to build your plan and to understand our audience in aggregate.

In the app, you give it on the screen "Your diary stays private", and again on a separate screen for each AI feature. Without the first consent the app cannot build a plan or keep a diary, so it does not go further.

We use health information only for the purposes described in this policy. We do not sell it, we do not share it with advertisers, and we do not use it to target ads. You can withdraw consent at any time: by switching off an AI feature, by deleting your account, or by asking us to delete your data. More detail is in our Consumer Health Data Privacy Policy.

Fivebite is not a medical provider, a pharmacy or a health insurer, so the US medical privacy law known as HIPAA does not apply to it. The promises in this policy, and the consumer health data laws, do apply.

How we protect your data

Data is encrypted on its way between your device and our servers. Access rules on the servers make sure your diary can be opened only from your own account, never by another user. The secret keys to the services we use are kept on our servers, never inside the app. No system is perfectly secure, and we do not claim otherwise.

If a security breach ever affects your health information, we will notify the people affected and the regulators as the law requires, including the FTC's Health Breach Notification Rule.

If the law requires it, or the company changes hands

We may have to hand over information if a law or a court order requires it. We would hand over only what is required. If Fivebite is ever sold or merged, your data would stay protected by this policy, and we would announce the change on this page.

Your rights

You can get a copy of what we hold, correct it, delete it, or withdraw your consent.

• In the app: change or delete any entry yourself; withdraw AI consents under Me → Privacy; delete everything under Me → Account.
• By email: write to hello@fivebite.app. For the website, write from the address in question; deleting your email also deletes your orders. You can unsubscribe from our emails with the link in any of them. For the app, we may need your help to find your account, because we do not hold your name or email.

We answer within 30 days, usually much sooner. Using these rights costs nothing, and we will never treat you differently for using them.

Because our company is in Lithuania, European data protection law (the GDPR) also applies to how we handle your data. Under it, we handle health information on the basis of your consent. We handle account, purchase and technical data because we need them to provide the service you asked for, to keep it secure, and to understand in general how it is used.

You can complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or, if you live in the EU or UK, to your own data protection authority. If you live in Washington State, the Consumer Health Data Privacy Policy explains how to appeal and how to reach the Attorney General.

Adults only

Fivebite is for adults aged 18 and over. The app is offered only in the United States App Store. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has used Fivebite, email us and we will delete the data.

If you email us

We receive your email address and whatever you choose to tell us, and we use them only to answer you. Please do not send card numbers or passwords.

Changes

If this policy changes, the date at the top changes with it. If a change is important, we will announce it on this page before it takes effect, and by email if we hold your address. If we ever want to use health information in a new way, we will ask for your consent first.

Contact

Berrymore MB, Vilnius, Lithuania. Email: hello@fivebite.app.