GiBuddy

Privacy Policy

Last updated: July 24, 2026

This Privacy Policy explains how GiBuddy ("GiBuddy", "the app", "we", or "us") handles information. GiBuddy is designed to keep most journal information stored locally on the user's device.

Information stored on your device

Health and journal information you enter, including symptom logs, daily check-ins, notes, medical records, medication schedules, and locally attached images, is stored on your device by default. We do not have access to information that remains stored only on your device.

Information leaves your device only when you deliberately export a backup, use an optional cloud AI feature after granting permission, or make or restore an App Store purchase, as described below.

Information we do not require

GiBuddy does not require an account. The app does not collect your name, email address, precise location, advertising identifier, or other direct account identifiers through normal journal use. We do not use advertising or tracking services, and we do not sell personal data.

Optional Food AI

If you choose Food AI and grant permission, the selected food photo is sent through GiBuddy's cloud service to OpenAI. OpenAI processes the image to identify foods and suggest editable nutritional information.

Food AI permission is separate from Guide permission. If you choose "Not Now," the image is not sent. After granting permission, you may withdraw it under You/Settings -> Privacy & AI.

Optional Guide AI

If you choose Guide and grant permission, GiBuddy creates a privacy-filtered summary of recent journal information and sends it through GiBuddy's cloud service to OpenAI to generate the Guide response you requested.

The summary may include dates, symptoms, stool information, meals, sleep, mood, stress, fatigue where logged, medication names, condition type, and medical-record context. It does not include raw notes, images, attachments, medication doses, weight, or user or device identifiers.

Guide permission is separate from Food AI permission. If you choose "Not Now," the summary is not sent. After granting permission, you may withdraw it under You/Settings -> Privacy & AI.

Cloud processing and retention

GiBuddy's cloud service and OpenAI process submitted information only to provide the optional AI feature requested by the user. GiBuddy does not use this information for advertising, tracking, or marketing.

OpenAI processes API requests under its applicable privacy, security, and data-protection terms. OpenAI does not use API inputs and outputs to train its models by default unless the API customer explicitly opts in. OpenAI may retain limited request data temporarily for abuse prevention, security, or legal compliance, depending on the applicable service configuration.

Based on the current GiBuddy server code, GiBuddy's cloud service does not intentionally store submitted food images, Guide summaries, AI responses, request bodies, or IP addresses in an app database. The service uses Vercel KV only for app-level rate limiting, storing shared app-token rate-limit counters and timestamps for up to about 62 minutes for Food AI and up to about 24 hours and 2 minutes for Guide. These rate-limit records are not unique to a user, device, or app installation and are not stored with submitted health content. Limited infrastructure, operational, or security logs may still be processed by the hosting provider and service providers under their own applicable terms.

Purchases and Subscriptions

If you purchase GiBuddy Premium, payment is processed by Apple through the App Store. GiBuddy uses RevenueCat to validate purchases, restore purchases, and manage Premium entitlement status.

GiBuddy does not receive your payment-card details, Apple ID password, or full billing information. Apple and RevenueCat process purchase information under their respective privacy and security terms.

Photos and attachments

Photos attached to journal entries or medical records remain stored on your device unless you deliberately select a photo for an optional cloud AI feature and grant permission to send it.

Managing your information and permissions

You may delete locally stored GiBuddy data from Settings. You may also withdraw Food AI or Guide permission under You/Settings -> Privacy & AI. Withdrawing permission prevents future information from being sent through that feature unless you grant permission again.

Children's privacy

GiBuddy is not directed to children below the minimum age stated for the app in the applicable App Store region. We do not knowingly collect personal information from children in violation of applicable law.

Changes to This Policy

We may update this Privacy Policy when our practices change. We will update the date above and provide additional notice or request renewed permission where required.

Contact

If you have questions about this Privacy Policy, contact us at support@flawfinder.ai.