Privacy Policy
Ghosty, a nutrition diary for iPhone.
Last updated 25 August 2026.
Ghosty is made by BIXU STUDIO. This policy describes exactly what the app collects, where it goes, and how to get rid of it. It is written to be read rather than to be survived, and it describes the app as it actually behaves.
The short version. Your diary is stored so it can sync between your own devices. What you type and photograph is sent to an AI service to be turned into numbers, and is not kept there or here. There is no advertising, no tracking, no analytics SDK, and nothing is sold or shared with anyone who is not listed on this page.
What Ghosty stores
| What | Why |
|---|---|
| Your email address and an account identifier | To sign you in and to attach your diary to you. If you use Sign in with Apple and choose Hide My Email, Ghosty only ever receives Apple's relay address and that is what is stored. |
| Your diary — the foods and meals you log, your saved foods and recipes, your daily targets, your taste preferences and allergies, your chosen tone, and your conversation with Ghosty | This is the app. It is stored so it survives a lost phone and appears on your other devices. |
| Monthly usage totals — how many requests you made and what they cost, in tokens and credits | To show you the credit meter and to enforce the monthly allowance. This records amounts only. The content of your messages is not part of it. |
| Purchase records — Apple's transaction identifier, the product bought, and whether it was a sandbox or production purchase | To unlock what you paid for and to make sure a purchase is credited exactly once. |
| Crash and hang reports — app version, iOS version, and diagnostic details of the failure | To find and fix the crash. These are not linked to your identity for any other purpose and are not used to build a profile of you. |
What Ghosty deliberately does not store
- Your body. If you use the calculator during setup to work out a calorie target, the height, weight, age, sex and activity level you type are used to compute the number on your device and then discarded. They are never saved, never synced, and never sent anywhere. Only the resulting target is kept.
- Your meal photos. A photo you send is transmitted for processing and the result comes back as numbers. The photo itself is not stored on Ghosty's servers.
- An advertising identifier. Ghosty does not request the IDFA, does not use the App Tracking Transparency framework, and does not track you across other apps or websites.
- Analytics. There is no analytics or attribution SDK in the app. There are no third-party libraries in the app at all.
The AI, and what reaches it
Turning "two eggs on toast" into calories is done by a large language model run by Anthropic. When you send a message that needs it, the following is transmitted for that request:
- The message you typed, and any photo you attached.
- A short summary of your day so the answer makes sense in context: your calorie and macro targets, today's running totals, the foods you have already logged today, a brief note of yesterday, and the most recent turns of the conversation.
- The names of foods you log often, so a food you have eaten before is recognised rather than re-estimated.
- Your taste preferences and allergies, when you ask for a recipe or a plan.
Your name, your email address and your account identifier are not included in what is sent to the model. Ghosty's own server identifies you only to count the request against your credits.
Not everything goes to the AI. Barcode scans, foods matched from your own history, and corrections you make by hand are handled without it.
Who else is involved
| Service | What it does |
|---|---|
| Anthropic | Runs the language model that reads your messages and photos and returns nutrition estimates. It processes this data on Ghosty's behalf to serve your request. |
| Supabase | Provides the sign-in service and the database your diary is stored in. The database is hosted in AWS's Asia Pacific (Sydney) region. |
| Vercel | Hosts Ghosty's server, which sits between the app and the two services above. |
| Apple | Handles Sign in with Apple, and every payment. Ghosty never sees your card details. |
| Open Food Facts | Receives a barcode number when you scan a product, and returns that product's nutrition information. Nothing about you is sent with it. |
| Only if you choose to sign in with a Google account, and only to sign you in. |
Nobody on this list is paid for your data and nobody receives it for advertising. Ghosty does not sell personal information.
Deleting it
Open Settings inside the app and tap Delete my account. This erases your synced records and your account itself. It is immediate and it cannot be undone.
Export my data, in the same screen, gives you a copy of your diary before you go.
Deleting the app without deleting your account leaves the synced copy in place, so that reinstalling brings your diary back. If you want it gone, delete the account first.
Children
Ghosty is not directed at children under 13 and is not intended for their use. If you believe a child has created an account, write to the address below and it will be removed.
Your rights
Depending on where you live you may have the right to access, correct, export, or erase the personal information held about you, and to object to its processing. The export and delete controls in Settings cover access, export and erasure directly. For anything else, write to the address below.
Changes
If this policy changes in a way that materially affects what is collected or who receives it, the app will say so before the change takes effect. The date at the top of this page always reflects the current version.
Contact
Questions, requests, or a privacy problem you would like fixed: bixustudio@gmail.com.