Covers the Bioma iOS application and the service behind it. Version 2026-10-01, last updated October 1, 2026.
The short version. Bioma keeps what you log, which is your meals, your photos, your profile and your weight, so it can measure your day against your own targets. Meal photos, descriptions and voice notes are analyzed by AI, using Google Gemini and OpenAI, and neither of them gets your name or email. We do not sell your data and there is no advertising inside Bioma. We use AppsFlyer to learn which of our own ads brought people to the app, and Firebase Crashlytics to see crashes. Your meals, photos, body data and anything from Apple Health never go to them, and ads are matched to you personally only if you allow tracking when your iPhone asks. You can delete everything from inside the app at any time.
The data controller is Humblebee Solutions Limited, registered in the Republic of Cyprus under number HE 449911, registered office Vasili Michailidi 9, 3026 Limassol, Cyprus. You can reach us at privacy at humblebee dot ltd.
| Data | Why we hold it | Legal basis |
|---|---|---|
| Email address | It is your account. Signing in is passwordless, so the address is how we know it is you. We also use it for sign-in codes and service messages, such as a reminder before a free trial ends. | Contract |
| Display name, avatar, short bio, handle | Your public card, shown to friends in the feed. All optional. | Contract |
| Profile: sex, date of birth, height, weight, body fat if you give it, activity level, goal, dietary preferences, life stage such as pregnancy or breastfeeding | Daily energy and nutrient targets cannot be worked out without them. This is the difference between a calorie counter and a plan. | Explicit consent |
| Body weight over time | Targets follow the trend we can actually see, instead of a formula’s guess about you. | Explicit consent |
| Meal photos, descriptions and voice notes | The input to the analysis. A photo you attach to a meal can appear in the feed, visible to people you are connected with. | Explicit consent |
| Diary entries, analyses, supplements, streaks, badges, quests | The record of your days and how you are getting on. | Explicit consent |
| Friends, followers, likes, comments, shared meals | The social features do not work without a social graph. | Contract |
| A hashed contact identifier | See “Finding friends” below. | Contract |
| Your consent record: which version of these documents you accepted, when, from which installation of the app, and for users aged 13 to 15, that a parent or guardian agreed | To show that we asked before processing your data, and to ask again when the documents change. | Legal obligation |
| Product events: which screens you reached and which steps you completed, tied to a random installation ID and, once you sign in, to your account | To see where people get stuck and fix it. These events stay with us. See “Product events” below. | Legitimate interest |
| Subscription status from Apple: product, trial and renewal dates, transaction identifiers | To know whether you have access. We never see your card or payment details. | Contract |
| Messages you send us, with a screenshot if you attach one | To answer you and to make Bioma better. A reason you give for leaving is stored without your name or email. | Legitimate interest |
| Reports and blocks you make | To remove abusive content and keep people you blocked away from you. | Legitimate interest |
| Technical logs | Keeping the service running and working out what went wrong when it does not. | Legitimate interest |
Your weight, age, sex, pregnancy status and what you eat count as data concerning health, which European law treats more carefully than ordinary personal data. We process it only to provide the service you asked for, and only on the basis of your explicit consent. You give that consent in the app right after you create your account, with two separate check boxes: one for our Terms of Use and this policy, and one for the AI processing described below. The app will not continue until both are checked, and we do not store your profile or send anything to an AI provider before that. To show you your plan before you sign up, the app sends your questionnaire answers to our server once. The server works out the plan, sends it back and stores nothing.
You can withdraw your consent at any time by deleting your account. The app cannot work without this information, so withdrawing consent and deleting the account come to the same thing. Withdrawing does not make the processing that happened before it unlawful.
Bioma uses two outside AI providers. Each one receives only what its task needs, and neither receives your name, email address or account identifier.
| Provider | What it does | What it receives |
|---|---|---|
| Google (Gemini API) | Recognizes food and estimates nutrition in meal photos and meal descriptions. Reads supplement labels you photograph. | The photo or text being analyzed, and the language to answer in. |
| OpenAI | Turns your voice notes into text. Writes your daily tips, weekly and monthly reviews and short food lessons, and checks that food names are in your language. | The voice recording. For tips and reviews: the meals and nutrient totals of the period, your goal and life stage, such as pregnancy, so that advice is safe for you. |
We use the paid APIs of both providers. Under their terms, neither provider may use this data to train its models. Each may keep it for a limited period to detect abuse, as its terms allow, and then deletes it.
Every number the AI gives you is an estimate. It is never the basis of a decision with legal or similarly significant effects on you, and you can correct any meal by hand.
Connecting Apple Health is optional, and you choose each type of data in Apple’s own permission screen.
You can sign in with a one-time code sent to your email, with Sign in with Apple, or with Google. We store only a hash of the emailed code and never the code itself. If you use Sign in with Apple with a private relay address, we hold the relay address and never learn your real one.
To match people you already know, the app works out a salted SHA-256 hash of an email address and compares hashes on our server. Raw addresses and phone numbers from your address book never reach us. We cannot turn those hashes back into contact details, and neither can anyone who somehow obtained them from us.
When a friend sends you an invitation link, two things help the invitation reach the app after you install it. The invitation page may place the invite code on your clipboard, and the app checks the clipboard once, the first time you open it, only for that code. The page also stores a salted hash of your IP address, screen size, language and time zone for 24 hours, so the app can recognize the same phone and connect you with your friend. That hash cannot be turned back into any of those details and is deleted after 24 hours.
The app records steps such as “finished the questionnaire”, “logged a first meal” or “opened the subscription screen”, with a random ID created when the app is installed. They go to our own server. A few of them (finished the questionnaire, created an account, logged a first or second meal, finished the tour, opened the subscription screen, sent an invite, started a trial or a subscription, with its price) also go to AppsFlyer, as described below. Events never contain your email address, your name, the content of your meals, your photos or your body or health data.
We advertise Bioma on other apps and websites, such as Instagram, TikTok, Google and the App Store. To know which ads work, the app uses AppsFlyer, a mobile measurement service. AppsFlyer receives the fact that the app was installed and opened, the events listed above, the country and language of your phone, its model and iOS version, your IP address, an ID AppsFlyer creates for this installation, Apple’s vendor ID for our apps, and our own random account ID. When your subscription renews or is refunded, our server tells AppsFlyer the amount, so we can see what each ad really earned.
Your iPhone asks whether Bioma may track you. If you allow it, AppsFlyer also receives your device’s advertising ID (IDFA) and can tell the ad network that showed you our ad (for example Meta, TikTok or Google) that you installed or subscribed, so they can measure and improve our campaigns. If you do not allow it, the advertising ID is never read, and ads are measured only through Apple’s privacy-preserving systems (SKAdNetwork and AdAttributionKit), which report totals per campaign without saying who you are. Ads from Apple Search Ads are measured through Apple’s own attribution service either way. You can change your answer at any time in Settings, Privacy & Security, Tracking. The app works exactly the same whatever you choose.
If the app crashes or hits a serious error, Firebase Crashlytics (Google) receives a technical report: what the code was doing, the phone model and iOS version, the app version, the last few screens and actions in the app, an installation ID and our random account ID. It never contains your meals, photos, messages or health data. We use it only to fix bugs.
If you allow notifications, Apple gives the app an address for your phone, and the app sends it to our server together with the app language and your time zone. We use them only to send the notifications you have switched on, in your language and not during the night: likes, comments and other news from friends, medals and reviews. Reminders about meals, your streak, supplements and weigh-ins are scheduled on your phone and do not pass through our server. Every kind of notification can be turned off in Settings, Notifications. When you sign out, the address is removed from our server, and it is deleted with your account.
Subscriptions are sold and billed by Apple. Apple tells us the product you chose and the dates of your trial and renewals, and we use that only to give you access. We never receive your card details. Cancel from your Apple account settings at least 24 hours before a renewal to avoid being charged for the next period. If you start a free trial, we may send you an email shortly before it ends.
You can report a meal, a comment or a person, and block anyone. A report is sent to our team and reviewed by a person. We keep a report, with what was reported and why, even after the reported account is deleted, because we may need it as evidence. The reports you made yourself are deleted with your account.
Besides the AI providers above, we use a small number of providers, each for one job. They act on our instructions and may not use your data for their own purposes.
| Provider | What it receives |
|---|---|
| Render | Hosting for the application server and the database, and therefore everything stored in it. |
| Cloudinary | Meal and profile photos, for storage and delivery. |
| Resend | Your email address, to deliver sign-in codes and service messages. |
| Apple | Payment and subscription records, Sign in with Apple if you use it, and the text of the notifications we send you, to deliver them to your phone. Apple is also a controller in its own right for your purchases. |
| Google sign-in, if you use it. | |
| AppsFlyer | Installation and app events, device and network details, our random account ID, purchase and renewal amounts, and, only if you allow tracking, your advertising ID. To measure our advertising, as described in “Measuring our advertising”. |
| Google Firebase Crashlytics | Crash and error reports, as described in “Crash reports”. |
| USDA FoodData Central | Food names only, to look up reference nutrition values in a public database. No personal data. |
We do not sell personal data, and Bioma contains no advertising. Ad networks learn about you through AppsFlyer only if you allow tracking, and only the events described above, never your meals, photos or health data. We may disclose data if the law requires it, or to a buyer of the business, who would be bound by this policy.
Your display name, avatar, bio and handle are visible to people who find you in the app. Meals appear in the feed only when a photo is attached, and only to people you are connected with. The leaderboard shows avatars and scores, and deliberately not names. A note you write on a meal becomes its first comment, visible to the same people. People you block no longer see you, and you no longer see them.
You can delete your account from inside the app, and you do not have to ask us or wait for us. Open Settings from the You tab, scroll to Delete account, read what the screen tells you and confirm.
Deletion runs as a single operation, so it either completes or nothing is touched. You will not be left with half an account. Once it is done it is permanent, we cannot restore it, and we keep no copy for ourselves. Deleted data disappears from routine backups as those rotate.
Deleting your account does not cancel a subscription. Subscriptions are held by Apple, not by us, and only you can cancel one from your Apple account settings. If you delete the account and leave the subscription running, Apple will keep charging you.
Comments you left on other people’s meals go too. That is the correct outcome under data protection law, but it does mean a conversation someone else remembers may lose your side of it.
If you have been using Bioma since before subscriptions existed and have free access for that reason, that access belongs to the deleted account. A new account is a new account.
The in-app route is faster and entirely in your hands, but you are welcome to email privacy at humblebee dot ltd from the address you signed up with. We will do it and confirm when it is done.
Our servers and database are run by Render in the United States, and Google, OpenAI, Cloudinary and Resend also process data outside the European Economic Area, including in the United States. Those transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, or on the European Commission’s Standard Contractual Clauses.
We keep your diary for as long as your account exists, because a food diary that forgets last month is not a diary. Sign-in codes expire within minutes. Invitation hashes are deleted after 24 hours. Technical logs are kept only as long as they help us diagnose problems. When you delete your account, everything listed above goes at once. The only exception is a report someone else made about you, as explained under “Reports and blocks”.
All traffic between the app and our server is encrypted. Your session is kept in the iOS Keychain. Access to the database is limited to the people who run the service. No system is perfectly secure, and if a breach affects your data we will tell you and the regulator as the law requires.
You can ask us for access to your data, for it to be corrected, for it to be erased, for our processing to be restricted, or for a portable copy. You can object to processing based on our legitimate interest, and withdraw your consent at any time. You can also complain to a supervisory authority, which in our case is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, or to the authority where you live. We answer requests within one month.
If you live in California or another U.S. state with a privacy law, you have similar rights to know, correct and delete your data. We do not sell personal information. If you allow tracking on your iPhone, the app events described in “Measuring our advertising” are shared with ad networks to measure our ads, which some state laws call “sharing”. To opt out, choose “Ask App Not to Track” or turn tracking off in Settings, Privacy & Security, Tracking, or write to us. We do not use sensitive personal information, including health data, for advertising or for anything other than providing the service.
Bioma is for people aged 13 and over. The app asks for your date of birth and does not let anyone younger continue. If you are 13, 14 or 15, the app asks you to confirm that a parent or guardian has read these documents and agrees, and we record that confirmation. If you believe a child under 13 has created an account, or that a teenager used the app without a parent’s agreement, write to us and we will delete the account.
If this policy changes in a way that matters, the app will show you the consent screen again and ask you to accept the new version before you continue. The version and date at the top always reflect the text you are reading.
Humblebee Solutions Limited, Vasili Michailidi 9, 3026 Limassol, Cyprus. Email privacy at humblebee dot ltd.