Privacy policy
Last updated 11 November 2026
This policy covers the Fodmi iPhone app and this website, fodmi.app. Your meal journal, check-ins and symptoms stay on your iPhone. Meal photos and descriptions go to our server only to be analysed and to improve that analysis, and symptoms only in a report you choose to create. If you connect Apple Health, Fodmi also adds what you log there, on your iPhone. We don’t sell your data, show ads or track you across other companies’ apps or websites.
Who we are
Llorenç Bauza runs Fodmi and is the data controller. Contact: [email protected].
What we collect, why and on what basis
| Data | Why | Legal basis |
|---|---|---|
| Meal photos and descriptions, typed, dictated or said to Siri, and food label photos | To identify the ingredients and estimate the meal’s FODMAP content | Your explicit consent, asked before the first analysis |
| A photo you search with Visual Intelligence, when you choose Fodmi’s results | To name the foods in it and show their FODMAP levels | Your explicit consent, asked before the first analysis |
| Your country, from your iPhone’s Region setting or, without one, from your IP address, sent with each meal analysis | To read a dish the way it is usually made where you live, since the same name can mean different food in different countries | Your explicit consent, asked before the first analysis |
| Your thumbs up or down on a meal’s analysis, and what you write or say in Fix result | To improve how Fodmi reads meals | Our legitimate interest in a more accurate app |
| Symptoms and check-in answers in a PDF report you choose to create | To make the report, which comes back to your iPhone | Your explicit consent |
| Food searches | To find foods in our database | Contract (providing the app) |
| What you type in food search, the foods it shows and what you open, log or read as a meal, up to 80 characters of your words | To see what people look for and improve search | Our legitimate interest in improving search |
| What you type in food search, if you allowed AI | To put the results in the most useful order and tell you when your words look like a meal | Your explicit consent, which you can withdraw in Profile › About Fodmi; without it, search works and doesn’t use AI |
| An anonymous account ID, created by the app | To keep your session with our server | Contract |
| Your IP address, or for IPv6 the network it belongs to | To limit abuse: sign-ins and AI analyses from one network | Our legitimate interest in keeping the service available |
| Subscription status, product, trial and renewal dates | To unlock paid features | Contract, and tax law for purchase records |
| The Apple Search Ads campaign, ad group, keyword and ad, if any, that led to the install | To see which of our ads work. We don’t use the advertising identifier (IDFA) | Our legitimate interest in measuring our ads |
| Usage and error events: onboarding steps reached, three onboarding answers (how far along you are with the low-FODMAP diet, whether you accepted check-ins, how you confirmed your commitment), whether notifications are on, whether the subscription offer was shown, features used, whether a meal was logged in the app or through Siri, app version, country derived from your IP address, and app errors and crashes | To fix bugs and improve the app | Our legitimate interest in a working, improving app |
| Your email address and message, if you write to us | To answer you | Our legitimate interest in answering you |
| Feature requests, comments and votes you post in Profile › Request a Feature, the display name you choose there, and the posts you report and people you block | To collect ideas for Fodmi, show them to other subscribers once we approve them, and keep the board safe | Contract (providing the board you choose to use) |
You don’t have to give us any of this, and Fodmi has no sign-up. Without meal photos or descriptions the app can’t analyse a meal, and without a subscription the paid features stay locked. Fodmi makes no automated decisions that have legal or similarly significant effects on you.
Thumbs and corrections are kept with the meal they’re about. We read them to find where the analysis goes wrong and fix it.
Feature board. Only subscribers can post and vote. The app proves this with Apple’s signed record of your subscription, and the board knows you by that subscription’s original transaction ID, not your Fodmi account ID. It runs on Feedbapp, a service we run ourselves at feedbapp.beltech.es. New requests and comments stay visible only to you until we approve them; approved ones, with your display name if you set one, can be read by anyone who has the board’s link. You can delete your own posts at any time, report a post or block its author.
Siri, Shortcuts and iPhone search. Fodmi adds its food list, your meals from the last 90 days and the foods you saved to iPhone search (Spotlight), so you can find them there and Siri can open them. That index stays on your iPhone and isn’t sent to us; check-ins and symptoms are never in it. Turn it off with Show in iPhone search in Profile → Siri & Search; deleting your account clears it. When you use Siri, Apple handles your voice under its own privacy policy, and Fodmi receives only the request, such as the food you asked about.
Usage and error events are a fixed event name with a few functional details, such as a count or which screen they came from; our server rejects anything else. Search events are the one exception on words: they hold up to 80 characters of what you typed in food search, so avoid personal details there. Events never include photos, symptom answers, the names of your own meals, or your name or email address, and we don’t record your screen. App errors include crashes: after a crash, iOS gives the app a report with the error type and where in the app’s code it happened, which the app sends with its other events on the next launch. If you share crash reports with app developers in iOS Settings → Privacy & Security → Analytics & Improvements, Apple also sends us anonymous crash logs.
Apple Health. Connecting Apple Health is your choice, and you pick what to share in iOS’s own permission sheet. Change it at any time in iPhone Settings → Health → Data Access & Devices → Fodmi.
- What Fodmi adds: water you log; bloating, abdominal cramps, nausea and heartburn you log, with their severity; and a “not present” entry for each of those symptoms when you log No symptoms. Your stool type and the rest of your check-in stay in Fodmi.
- What Fodmi reads: your steps, and water logged in other apps, to show them on Home. They stay on your iPhone: we don’t save them in your journal, send them to our server or put them in PDF reports.
- What we never do with it: data from Apple Health is never used for advertising or analytics, never sent to our AI providers and never shared or sold. Usage events only say whether you connected and whether adding symptoms and water is on or off.
- Where it lives: Apple Health keeps this data under your own settings, and Apple handles any sync of it. Apple’s Journal app can suggest summaries of it.
- Deleting: Profile → Delete account removes what Fodmi added to Apple Health unless you choose to keep it. If iOS doesn’t allow that, you can delete it in the Health app, under Fodmi in Sources. Deleting the Fodmi app alone leaves it in Apple Health.
Who receives it
These providers process data only on our behalf, under a data processing agreement.
| Provider | Data |
|---|---|
| OpenRouter, with DeepSeek, Google Gemini, Anthropic Claude, Typesafe and web-search providers it routes to | Meal and label text and photos, Visual Intelligence photos, food search words if you allowed AI, your country, ingredient names and amounts, and dish names with your country for a reference-recipe search; never your account ID |
| Cloudflare | Hosts our server and stores meal photos; forwards email to [email protected] |
| Tinybird (EU) | Usage and error events, including food search words and results, server events, AI usage and cost; this website’s page and button counts |
| Superwall | Your account ID, your iPhone’s vendor ID and the IP address of its requests, purchases, subscription status, device and app details, Apple Search Ads campaign, ad group, keyword and ad |
| Apple | Payments (we never see your card details) and crash logs you choose to share |
The AI models and Typesafe don’t keep what they read or train on it. Text and photos can still contain personal information, so avoid names, faces and documents in them. Photos are re-encoded to remove metadata, including location, before they leave your iPhone. Fodmi never asks for location access: the country is the one in Settings → General → Language & Region, or the one your IP address points to. You can withdraw consent to AI analysis at any time with Read meals with AI in Profile → About Fodmi.
Earlier versions also sent usage events to PostHog and crash reports to Sentry (both EU), and earlier Debloaty versions used RevenueCat for subscriptions.
International transfers
OpenRouter and the providers it routes to, Superwall and Apple may process data outside the EU, including in the United States. We rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep it
- Meal photos, descriptions, analyses, thumbs and corrections on our server: until you delete your account or ask us to; we delete them within 30 days of a request.
- How each meal analysis went, without your words or photos: the foods and amounts found, the result, the AI model, whether you gave a thumbs up or down and whether you used Fix result. When you delete your account we keep this to improve the analysis, under a random ID that isn’t your account ID, and delete the only record that ties that ID to you.
- PDF reports: not kept. Our server makes the report, sends it back to your iPhone and keeps nothing; it stays on your iPhone and wherever you share it.
- Visual Intelligence photos: not kept. Our server reads the photo, answers with the foods and keeps nothing.
- IP addresses on our server: about a day, to limit abuse.
- Usage and error events: 400 days, under a random ID that isn’t your account ID. Deleting your account deletes the only record that ties that ID to you; to have them deleted sooner, email us before you delete it (support email opened from the app includes your ID).
- What Superwall holds under your account ID: erased about 25 days after you delete your account. Deleting your account doesn’t cancel a subscription, so if yours stays active, Apple keeps sending Superwall its renewals until you cancel it in your iPhone’s Settings. Superwall data from earlier app versions that didn’t use your account ID can’t be matched to you, so it isn’t erased this way.
- Data held by PostHog and Sentry from earlier versions: up to 12 months and 90 days.
- Purchase records: as long as the subscription and tax and accounting law require. Apple keeps its own transaction records, which carry your account ID.
- Feature board posts, comments and votes: until you delete them. When you delete your account while your subscription is active, they stay on the board without your display name or anything that ties them to you or your subscription, and your blocks are removed; if your subscription has ended, email us to have this done. Delete any post you want gone before you delete your account.
- Support emails: up to 2 years after the conversation ends.
Your rights
You can ask us to access, correct, delete or export your data, to restrict or object to how we use it, and you can withdraw consent at any time without affecting what was done before. Email [email protected]; we reply within 30 days. You can also delete your account, server data and local journal in Profile → Delete account, with or without a subscription.
If you think we’ve mishandled your data, you can complain to your local data protection authority.
Fodmi is not for children under 16.
This website
fodmi.app uses no cookies and no third-party analytics or trackers. It counts two things about itself: that a page was viewed and that an App Store button was clicked. Each count carries the page’s address on this site, its language, the name of the site you came from (such as google.com, never the page), which button it was, and your country as Cloudflare reports it. It carries no cookie, no visitor ID and no IP address, so a visit can’t be linked to another visit or to you. The counts go to our own server and are kept with Tinybird (EU) for 400 days; your IP address is used only to limit abuse, as for any request. Nothing is counted if your browser sends Global Privacy Control or Do Not Track. The food diary saves what you write only in your browser. Cloudflare keeps standard server logs, such as IP address and pages requested, for security.
We’ll update the date at the top when this policy changes, and tell you in the app about significant changes.