BitoNo account, no analytics
Nothing to sign up for, no tracking and no advertising.
Legal
Privacy Policy
On your device
Your logs stay on your iPhone or iPad. Health data stays in Apple Health.
AI only recognizes food
It runs on your device, and data from connected apps is never given to any model.
1. Who we are
Bito is made by Yuşa Sarısoy, an independent developer, who is responsible for this policy. You can reach him at yusasarisoy@icloud.com.
2. The short version
- Bito has no account, no server that stores your data, no analytics, no advertising and no tracking.
- Everything you log stays on your device. Weight and workouts live in Apple Health.
- Food recognition runs on your device. AI is used only to recognize food, never to set your targets.
- Data from Hevy, WHOOP, Oura and Polar is never given to any AI model.
- The app connects to the internet for three things only: looking up a barcode in Open Food Facts, talking to the apps you chose to connect, and a small service that completes the sign-in to WHOOP, Oura and Polar.
We do not collect personal data on any server of our own, because there is none.
3. What stays on your device
The following is stored only on your iPhone or iPad, inside the app’s own storage, which widgets and controls on the same device can read:
- Your profile: sex, age, height, weight, goal, pace, training week and units.
- Your food logs, your own foods, favorites and recent foods.
- Your targets, weekly scores, goals, streaks and achievements, if you turned them on.
- Your settings.
- Barcode results you looked up before, so they work offline.
The Hevy API key and the sign-in tokens for WHOOP, Oura and Polar are kept in your device’s Keychain.
Bito does not sync between devices. If you use an iPhone backup, your device includes the app’s data in that backup as it does for any app; that backup is handled by Apple and your device settings, not by us.
4. Apple Health
With your permission, Bito reads workouts, steps, active energy and body weight, and writes the energy and macronutrients of the meals you log and the weigh-ins you enter. Workouts decide whether a day is a training day. Active energy is shown to you but never changes your target.
You choose each permission yourself and can change it any time in the Settings app under Health. Data from Apple Health is never sent to a server, never used for advertising, never sold and never given to an AI model. When you delete an entry in Bito, the matching sample is removed from Apple Health too.
5. On-device intelligence
On supported devices, Bito uses Apple’s on-device foundation model to turn a sentence such as “2 eggs, tea” or a meal photo into food entries, and Apple’s Vision framework to read nutrition labels and barcodes. All of this happens on your device. Your photos and sentences are not uploaded.
AI is used only to recognize food. Your targets come from fixed rules that you can inspect on the Why? screen. Data from connected apps (Hevy, WHOOP, Oura, Polar) is never passed to this model or to any other.
6. What leaves your device, and why
| When | Where it goes | What is sent |
|---|---|---|
| You scan a barcode that is not already saved on your device | Open Food Facts (world.openfoodfacts.org) | The barcode number |
| You connect Hevy and while it stays connected | Hevy’s API | Your Hevy API key, to fetch your workouts |
| You connect WHOOP, Oura or Polar and while they stay connected | That service’s API | Your sign-in token, to fetch your workouts and activity |
| You connect WHOOP, Oura or Polar, and when a sign-in needs renewing | Bito‘s token exchange service, which runs on Cloudflare | A one-time sign-in code or renewal token, exchanged for access tokens |
Like any web request, each of these also reveals your device’s IP address to the server that receives it. The sign-in to WHOOP, Oura and Polar happens on their own page; Bito never sees your password.
The token exchange service only exists because those services require a secret that cannot be kept inside an app. It passes the tokens back to your device and keeps no copy of them. Cloudflare processes the request as the host of that service.
Nothing else leaves your device. There is no crash reporting SDK. If you chose to share analytics with app developers in your device settings, Apple may share crash reports with us; you can turn that off in the Settings app under Privacy & Security.
Each connected service has its own privacy policy. You can disconnect any of them in Bito under You, then Connected, and revoke access on the service’s own site.
7. Purchases
Bito Pro is sold through the App Store. Apple processes the payment; we never see your payment details or your identity. The app only learns whether Pro is active on your Apple Account.
8. Your choices and your rights
Because your data is on your device and not with us, you are in control of it directly:
- Export: You, then Your data, then Export as CSV. Free, every log included.
- Delete: You, then Your data, then Delete all data. This also removes what Bito wrote to Apple Health. Deleting the app removes everything it stored on that device.
- Withdraw permissions: Apple Health, camera and photo access can be turned off in the Settings app at any time.
You have rights under the laws that apply to you, such as the GDPR, the UK GDPR, KVKK in Türkiye and the CCPA in California, including access, correction, deletion and objection. Since we hold no personal data about you, there is usually nothing for us to hand over or erase, but you can always write to us with a question or a complaint, and you can also contact your data protection authority.
9. Children
Bito is meant for adults and is not directed at children. As we collect no personal data on our side, no child’s data reaches us.
10. Changes to this policy
If this policy changes, the new version will be published on this page with a new effective date. If a change affects what leaves your device, we will also say so in the app’s release notes before it applies.