Who we are
Grava ("we", "us") is a calorie-tracking app for iPhone, iPad, and Mac. This policy explains what information the app handles, why, and the choices you have. It applies to the Grava app and this website.
Information we collect
- Account information. You sign in with Sign in with Apple. We receive a unique account identifier and, if you choose to share them, your name and email address (Apple lets you hide your real email). We never see your Apple ID password.
- Profile details. To compute your calorie targets, the app asks for your biological sex, birth year, height, weight, and activity level.
- Your plan, if you set one. Your weekly pace, an optional target weight, and the weight you started from, used to estimate how you're tracking.
- Your food log. Each entry you confirm stores the food's name, the time it was logged, the calorie estimate (including its range), protein, carbohydrate, and fat estimates, how it was logged (camera, library, text, or manual), and whether you edited the estimate.
- App settings. Your preferences, such as your goal mode (cut, maintain, bulk), when your calorie day ends, which companion you have, and any names you give your companions.
- Purchases. Extra companions are one-time purchases made through Apple's App Store. Apple handles payment; the app only learns which companions you've unlocked. We never see your card or billing details.
- Anonymous usage analytics. Which screens and features get used, such as "a meal was logged from a photo" or "an estimate was adjusted." This is not linked to your account. See Usage analytics below.
- Error reports. When a cloud estimate fails, the app saves the error along with the app version, iOS version, and device model in your account, so we can fix the problem. They're deleted with your account.
What we don't collect
- Photos are never stored. Pictures you take or select are used only to produce the estimate in front of you, then discarded. They are not saved to your account or our servers.
- No advertising or ad tracking. The app contains no advertising SDKs, never reads your device's advertising identifier (IDFA), and doesn't track you across other companies' apps or websites.
- No location, contacts, or health-record access. Grava doesn't request them.
How food photos and descriptions are analyzed
When you ask Grava to estimate a food, the photo and/or text you provide is processed in one of two ways:
- Cloud analysis (default when online). The image and text are sent over an encrypted connection to Google's Gemini model via Firebase AI Logic, which returns the estimate. Grava does not store the photo or the request; Google processes it as a service provider under its Firebase privacy terms.
- On-device analysis (offline fallback). On devices with Apple Intelligence, the analysis runs entirely on your device using Apple's on-device models. In this mode, nothing you photograph leaves your device.
Where your data lives
Your profile, settings, and food log are stored in Google Cloud Firestore (part of Firebase), in a record tied to your account. Access rules ensure your data is readable and writable only by you when signed in. Data is encrypted in transit.
Usage analytics
To learn which parts of Grava are useful and which aren't, the app uses Google Analytics for Firebase, set up without advertising features. It records:
- which screens you open and which features you use, such as how a meal was logged, whether the cloud or on-device estimate was used, and whether you adjusted it;
- the app version, iOS version, device model, and language;
- an approximate region (country or city), which Google derives from your IP address;
- a random ID for this installation of the app, used to count daily users.
It never includes food names, descriptions, photos, calorie or macro numbers, your weight, your goals, or any other profile details. It isn't linked to your Sign in with Apple account, isn't used for advertising, and isn't shared with advertisers. Google keeps this data for 14 months.
To turn it off, go to Settings → Privacy → Share anonymous usage stats. Turning it off stops collection on that device and resets its random ID.
Website analytics
This website uses Google Analytics to count visits and see how people find Grava. It's a separate Google Analytics property from the app's, so nothing you do here is connected to the app or your Grava account. It sets Google Analytics' own first-party cookies on this site (their names start with _ga). They hold a random ID, so a return visit isn't counted as a new visitor, and they expire after two years. In the EU, the UK, and Switzerland, where those cookies need your consent, it doesn't set them: it runs in a cookieless mode (Google's Consent Mode with storage denied) and stores nothing on your device. It records:
- which pages you view, and the site or link that brought you here;
- your browser, device type, screen size, and language;
- an approximate region (country or city), which Google derives from your IP address;
- whether you tap through to the App Store.
Google signals and ad personalization are turned off, so it isn't used for advertising. Google keeps this data for up to 14 months. Everything else on this site, including the animation code, is served from this site itself; it loads no other third-party scripts or fonts. To opt out, block or clear cookies for this site, use your browser's tracking protection, or install Google's opt-out add-on.
How we use your information
Only to run the app: computing your targets, producing estimates, showing your history, and syncing across your devices. We do not sell your data, share it for advertising, or use it for marketing. Anonymous usage analytics are used only to decide what to improve, and website analytics only to understand how people find Grava. Our only service providers are Apple (Sign in with Apple, on-device analysis) and Google Firebase (authentication, database, cloud AI analysis, and Google Analytics for Firebase usage analytics), and Google Analytics for website visits.
Data retention and deletion
- Individual entries can be deleted in the app at any time, from any day in your history.
- Your account and all data can be deleted in the app under Settings → Delete Account, or by contacting us at the address below. This removes your profile, settings, entire food log, and error reports.
Security
All traffic between the app and our servers is encrypted (TLS). Authentication is handled by Apple and Firebase; database rules restrict your data to your signed-in account. No system is perfectly secure, but we keep the amount of data we hold to the minimum the app needs.
Children
Grava is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.
Health-related information
Your weight, body details, goals, and food log are health-related. We use them only to provide the app's features to you. We don't use them for advertising, don't share them with anyone except the service providers listed above, and don't sell them. The cut/maintain/bulk goal and your plan never reach usage analytics.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Everything Grava stores about you is visible in the app itself (your profile in Settings, your log in History); for a copy of your data or deletion, contact us and we'll handle it. Usage analytics aren't tied to your account, so we can't look them up by person; switching them off in Settings resets the device's random ID.
California residents. You have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; and not to be treated differently for exercising these rights. We do not sell or "share" personal information as California law defines those terms, and we don't use sensitive personal information to infer characteristics about you.
EU, EEA, and UK residents. We process your account, profile, and food-log data because you asked us to provide the app (performance of a contract). We collect error reports and anonymous usage analytics under our legitimate interest in keeping the app working and improving it; you can switch analytics off at any time in Settings. Google processes data in the United States and elsewhere under its standard contractual clauses. You can access, correct, export, delete, or object to processing of your data by contacting us. You can also complain to your local data protection authority.
Changes to this policy
If we change this policy, we'll update this page and its effective date. Material changes will be called out in the app.
Contact
Questions or requests: email support — or see the Support page.