Fuel8 — Privacy Policy

Last updated 4 August 2026

Applies to the Fuel8 iOS app (bundle identifier com.owenmorton.fuel8), all versions from 1.0.

The short version

Fuel8 has no account, no sign-in, no analytics, no ad networks and no cloud sync. Nothing you log is collected by the developer, because there is nowhere for it to go.

Fuel8 does promote one thing — the 8 Week Transformation Challenge, a separate paid programme, on its own tab. That is described under The Challenge tab below. It is not advertising sold to a third party, and nothing you log reaches it.

Everything you record — every meal, weight, target and photo — stays on this iPhone. Two things leave it, both described below, and one of them only if you switch it on.

What Fuel8 stores on this iPhone

Your food log, your weight and body-fat history, your profile and the calorie and macro targets built from it, your saved plates, and the foods you have used recently.

All of it is held in Fuel8's private container and encrypted with iOS file protection, which means it is unreadable while the phone is locked. CloudKit is switched off on the database and the app has no iCloud entitlement, so none of it is in iCloud.

If you supply an API key for an AI provider — Anthropic, OpenAI or Google — it is held in the iOS Keychain, device-only, in a separate item per provider, and is never included in an iCloud Keychain sync or a device backup.

One thing is not encrypted at rest: a small preferences file holding which AI provider and model you chose, and which providers you have given permission to, a count and rough cost of the estimates you have made, and your Challenge invite codes. It holds no food, weight or health data.

The developer cannot see any of this. There is no mechanism to read, recover or restore it, which also means that if you delete the app the log is gone. There is no account to restore from.

Open Food Facts

When you scan a barcode, Fuel8 asks world.openfoodfacts.org about that barcode. The request carries the barcode digits, a fixed list of the nutrition fields the app uses, and the app's name and version. That is all.

It carries no device identifier, no advertising identifier, no account and nothing from your log. Fuel8 refuses cookies from this host and keeps no copy of the response on disk, so one lookup cannot be tied to the next. As with any request over the internet, Open Food Facts sees the address your connection comes from.

Open Food Facts' own privacy policy is at https://world.openfoodfacts.org/privacy. Product data returned is licensed under the Open Database Licence and is credited in Settings → About.

Photo estimates and your own API key

Fuel8 can estimate a meal from a photograph. It is off unless you turn it on, and turning it on takes two deliberate steps: accepting a consent notice, and pasting an API key for the AI provider you choose, which you obtain and pay for yourself.

This is the one case where something personal leaves your phone. If you have done both, taking an estimate sends the photograph, a fixed instruction asking what food is in it, and your key to the provider you have chosen: api.anthropic.com (Anthropic), api.openai.com (OpenAI) or generativelanguage.googleapis.com (Google) — a third party, under your own account and on your own bill. Fuel8 asks for your permission separately for each provider, and switching provider does not carry that permission across.

The photograph is redrawn before it is sent, which removes GPS coordinates, capture time, camera make and model and every other metadata tag. Fuel8 never writes the original to disk.

Nothing else goes with it. Not your weight, targets, goal, age, name or anything read from Apple Health — the request has no field able to carry them.

What that provider does with the image is governed by their terms and the settings on your own account with them. Fuel8 is not a party to it and never receives your key. Requests to OpenAI are sent with response storage disabled.

Settings, then Photo estimates, then Revoke & delete removes the key and the consent record together, in one tap.

Anthropic's privacy policy is at https://www.anthropic.com/legal/privacy. OpenAI's privacy policy is at https://openai.com/policies/privacy-policy. Google's is at https://policies.google.com/privacy.

The Challenge tab

The Challenge tab links out to a separate paid programme. Tapping it opens the sign-up page in Safari; the address carries an invite code and a tag naming the screen you tapped from, and nothing else.

No email, no name, no device identifier and nothing from your food log. The Challenge features are built as a separate module that cannot refer to a meal, a weight or a Health value at all — the app does not compile if anyone tries.

Apple Health

Fuel8 works fully without Apple Health and asks only when you first use a feature that needs it.

With your permission it reads your body weight, active energy and steps, and writes the calories, protein, carbohydrates and fat of the meals you log. An estimate from a photo is never written to Health unless you confirm it first.

What is read stays on this iPhone. It is never sent to a server, never used for advertising or marketing, and never reaches the Challenge module. Settings, then Apple Health, shows exactly what is read and written, and can remove the samples Fuel8 wrote — only ever its own.

Camera, microphone and speech

The camera and photo library are used only to obtain a meal photograph for an estimate. Fuel8 saves no photograph to your camera roll and keeps none of its own.

Speech recognition runs on this iPhone. Fuel8 refuses to start dictation on a device that cannot recognise speech locally, so your voice is not sent to Apple or to anyone else. The recognised words become a log entry and the audio is discarded.

What Fuel8 does not do

No accounts, no sign-in and no email address collected. No analytics, telemetry, crash reporting or attribution. No third-party advertising, no ad networks and no ad identifiers. No tracking across apps or websites, which is why you are never shown a tracking prompt.

No third-party libraries of any kind. Nothing is sold, rented or shared, because there is nothing held to sell.

Deleting your data

Settings, then Delete all my data, erases in one screen and with no network connection: the whole food log, your weight history, targets and profile; every saved plate and cached food; every AI provider API key you have saved and the record of your consent to each; the estimate counters; your Challenge invite codes, and any email opt-in written by an earlier version of the app.

It offers separately to remove the Health samples Fuel8 wrote, so you can wipe the app and keep your Health history. Deleting the app from your iPhone removes the container and the Keychain entries with it.

Age

Fuel8 is for adults. Calorie tracking is not appropriate for under-18s without clinical supervision, and the app is not designed or intended for children.

Changes to this policy

If a future version changes what leaves this device, this page changes first and the app tells you before the new behaviour applies. Any new destination or new category of data is presented for you to accept rather than buried here.

Contact

Fuel8 is published by Grow More Services L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. (licence 2425146.01).

Questions or corrections about this policy: marketing@letsgrowmore.com.

There is nothing to request a copy of — no copy of your data exists outside this iPhone — and deletion is the one-screen button described above rather than something you have to write in and ask for.

Your rights under UK and EU data protection law

Not repeated in the app, because it would be a wall of legal text on a phone to say "none of this applies".

Fuel8 collects no personal data and operates no server, so there is no data controller holding information about you and no processing to object to. The rights the law gives you — access, rectification, erasure, portability, restriction, objection — are exercised directly on the device: the app shows you everything it holds, lets you edit any of it, and deletes all of it in one screen.

The exception is the photo-estimate path. If you enable it, you send images to the AI provider you chose under your own account; your relationship there is with that provider and your rights are exercised through them.

Appendix — what someone with your locked phone can obtain

Included because a policy that only lists good intentions is not much use, and because the honest answer is not "nothing".

Your food log, weight history, targets and profile are stored with iOS Complete Data Protection. While the phone is locked, those files are encrypted with a key that is not in memory. The same class is now the default for every file the app or the system creates on its behalf, including the screen images iOS records for the app switcher — and the app covers its own interface before those are taken, so the picture is of a logo rather than of your dinner.

Each AI provider's API key is in the Keychain, in its own item, as WhenUnlockedThisDeviceOnly: unavailable while locked, and excluded from iCloud Keychain and from device backups.

What is readable on a locked-but-previously-unlocked phone is the preferences file: a provider and model name, the date you gave each provider permission, some counters and two invite codes. It reveals that the app is installed and roughly how often the photo-estimate feature was used. It contains no food, no weight and no health data.