Privacy Policy

• Account. Your email address, used to create and secure your account (handled by our authentication provider, Supabase).
• Profile & goals. Information you provide during onboarding — such as sex, age range, body weight (optional), your chosen focus, dietary pattern, and any allergens you ask us to avoid. We use these to personalize your targets, picks, and food answers.
• Food activity.The foods you log, your streaks, and your “Should I get this?” questions.
• Photos you capture. When you snap a food, the image is sent to our food-recognition and AI services solely to identify the food and answer your question. Images are processed transiently for that request and are not used to build an advertising profile.
• Usage & device data. Basic, privacy-respecting product analytics (e.g. which screens are used, anonymized events) to improve the app.

• Personalize your goals, daily picks, and food answers.
• Identify foods from your photos and estimate how they fit your goal.
• Send the meal and picks reminders you opt into.
• Operate, secure, debug, and improve the app.

Brimly provides general nutrition guidance and is not medical advice; AI estimates are not a substitute for a professional.

We use trusted processors to run Brimly. They only handle data to provide their service:

• Supabase — authentication and database hosting (your account and app data).
• Google (Gemini API)— AI food recognition and the “Should I get this?” answer, from the photo and your goal context.
• PostHog — product analytics.
• Apple & Google — app distribution and, where applicable, in-app purchases (subscriptions are managed by the app stores and RevenueCat).
• Resend — transactional and waitlist email.

We do not sell your personal information.

We keep your account and app data while your account is active. Food photos are used transiently to fulfill a request and are not retained as a long-term profile. When you delete your account, we delete or anonymize your personal data, except where we must retain it to meet legal obligations.

• Access & deletion. You can request a copy of your data or deletion of your account by emailing us (below).
• Camera. Granted per-use and revocable any time in your device settings; the app works without it.
• Notifications. Opt in or out at any time in the app or device settings.
• Depending on where you live (e.g. EEA/UK GDPR, California CCPA), you may have additional rights to access, correct, port, or delete your data. Contact us to exercise them.

Brimly is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.

We use industry-standard measures (encryption in transit, access controls, row-level security) to protect your data. No method of transmission or storage is 100% secure, but we work to safeguard your information.

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice.

Questions or requests? Email [email protected].