Buzzo Privacy Policy

Effective date: October 22, 2026

This policy explains what information the Buzzo iPhone app ("Buzzo") uses, where it is kept and who receives it. Buzzo is provided by Niayesh Arastooeian, the individual who publishes Buzzo on the App Store ("we", "us").

The short version

What you log in Buzzo (meals, weight, progress photos, workouts, Coach conversations and your profile) is stored on your iPhone. Buzzo has no accounts, and we don't upload what you log.
The one thing that leaves your iPhone is a meal photo you choose to scan. It goes to Buzzo's photo service, which sends it to Anthropic to identify the foods and estimate portions. Buzzo doesn't store the photo or the recognition result.
Calories and nutrients are calculated on your iPhone from Buzzo's own food data, not by Anthropic.
Buzzo has no advertising, no tracking and no third-party analytics, and we don't sell personal information.
Payments are handled by Apple. Apple Health data stays on your iPhone.
Buzzo is for ages 13 and over. For ages 13 to 17, Buzzo works in teen mode, in which nothing they log leaves the iPhone: photo recognition, Apple Health and the coach are off, and no install identifier is created or sent.

Information stored on your iPhone

Buzzo keeps the following in its own storage on your iPhone. iOS Data Protection protects it, so the files can't be read while your iPhone is locked with a passcode.

Profile: your age (to choose the features for your age) and units. For adults, also your weight goal, your starting and goal weight, your daily calorie and nutrient targets, and, if you enter them, your height, the sex used for the calorie estimate and your usual daily steps.
Food log: the meals you log (food names, amounts and the nutrition Buzzo calculated), saved meals and favorite foods.
Weight: the weigh-ins you enter, and any you choose to import from Apple Health.
Progress photos: the photos you add in Progress.
Training: your training setup, plan and exercise targets, and the workouts you log.
Coach: your Coach conversations and the parts of your log you allow the Coach to read. The Coach works on your iPhone. Its answers come from fixed rules applied to your own log, not from a person or an AI service.
Settings: reminder times, your Apple Health choices and your photo-recognition consent.

We don't receive any of this information.

Your iPhone may include Buzzo's data in the iCloud or computer backups you make of it, like other apps' data. If you use Export a backup in Settings, Buzzo creates a file containing your data, including your progress photos. That file isn't encrypted, and you decide where to keep it.

Meal photo recognition

Photo recognition is optional and is for adults (18 and over) only. It isn’t available in teen mode, so a teen’s photos are never sent. You can always log meals by typing or searching instead. When you choose to scan a meal:

Before your first scan, Buzzo explains how photo recognition works and asks whether you want to continue. You're asked once, and again only after Delete all data.
Buzzo shrinks the photo (to at most 1,024 pixels on its longest side) and re-encodes it on your iPhone, which removes location and camera details.
When you tap Review estimated meal, Buzzo sends the photo over an encrypted (HTTPS) connection to Buzzo's photo service, together with a random install identifier (see below).
Buzzo's photo service runs on Cloudflare. It checks the request against the scan limits and sends the photo to Anthropic, which identifies the foods and estimates the portion sizes. Anthropic receives the photo and a fixed instruction only. It doesn't receive your install identifier or anything else about you.
The service returns a list of food names, preparation methods and estimated amounts. Buzzo matches each food to its own food data (Buzzo's curated food list and the U.S. Department of Agriculture's Food and Nutrient Database for Dietary Studies) and calculates calories and nutrients on your iPhone.
You review every food and amount. Nothing is logged until you confirm. The meal you save contains food names, amounts and nutrition, never the photo.

What is kept:

Buzzo's photo service: doesn't store the photo or the recognition result, and its request logging is turned off.
Your iPhone: holds the photo only in memory while you review the meal and doesn't save it.
Anthropic: acts as a service provider to Buzzo for photo recognition. How Anthropic handles the data it receives, including how long it keeps it, is governed by its Commercial Terms, its Data Processing Addendum and its privacy policy, available at anthropic.com. Anthropic's privacy center (checked October 21, 2026) says that for API use it deletes inputs and outputs within 30 days, except where it keeps them longer to enforce its Usage Policy (inputs and outputs for up to 2 years, and safety classification scores for up to 7 years, if they're flagged), where the law requires, or, if its contract allows, as anonymized data for research.
Cloudflare: runs the photo service and processes connection information, such as your IP address, under its own privacy policy, available at cloudflare.com.

Install identifier and scan limits

To apply daily limits on photo scans, Buzzo creates a random identifier on your iPhone the first time an adult scans a meal. It is never created or sent in teen mode. It isn't linked to your name, your Apple Account or your advertising identifier. It is stored in your iPhone's Keychain for this device only and is sent with each photo scan.

Buzzo's photo service never stores the identifier itself or your IP address. It turns each into a one-way, salted code and keeps only counts of the current day's scans. Those counts are cleared when the day changes (in UTC), as soon as the service handles the next day's first scan. The service also keeps a monthly total of its estimated recognition costs, which contains no personal information.

Apple Health

Apple Health is optional, is for adults only, and stays off until you turn it on. It isn’t available in teen mode. You choose each category separately:

Read: body weight, step count and workouts, only for the categories you choose.
Write: weigh-ins, only if you turn on weight sharing.

Buzzo uses the Health data it reads to show your progress in the app. That data is never sent to Buzzo's photo service or anyone else, and it's never used for advertising or marketing. Weigh-ins you choose to import become part of your Buzzo data on your iPhone. You can change Buzzo's access at any time in iOS Settings (Privacy & Security, then Health).

Subscriptions and payments

Buzzo is a subscription app. Apple handles purchases, free trials, renewals, cancellations and refunds through your Apple Account, and we never receive your payment details. On your iPhone, Buzzo reads your subscription status from Apple's StoreKit to decide whether the app is unlocked. That status isn't sent to us.

Apple provides developers with sales and subscription reports, which don't include your name or contact details. Apple's handling of your purchase information is described in Apple's privacy policy.

Camera, photos and notifications

Camera: Buzzo asks for camera access only when you take a photo in the app.
Existing photos: when you choose one, iOS lets you pick it without giving Buzzo access to your photo library.
Reminders: they're scheduled on your iPhone. Buzzo asks for notification permission only when you turn a reminder on.

What we don't do

We don't sell or rent personal information, and we don't share it for advertising.
We don't track you across other companies' apps or websites. Buzzo doesn't use the advertising identifier.
Buzzo contains no advertising and no third-party analytics, crash-reporting or advertising software.
Buzzo has no accounts, so we don't collect your name, email address or phone number.
We don't collect your location.

If you choose in iOS Settings to share analytics with app developers, Apple may provide us with crash reports and aggregated usage statistics, under Apple's privacy policy.

Deleting your data

Buzzo has no accounts, so there is no account to delete. Delete all data (Settings, then Your data) permanently removes from your iPhone the information Buzzo stores about you: your profile, food log, weigh-ins, progress photos, training data, Coach conversations, reminders, Buzzo's Apple Health settings and photo-recognition consent.

These remain after Delete all data:

a record of the youngest age entered on this iPhone and when it was entered, so that deleting data or restoring a backup doesn’t switch teen mode off or reopen setup after an age under 13 (see Children and teens). It never leaves your iPhone and isn’t part of an exported backup;
a small file that records your subscription status and how much of the app's usage allowances, such as photo scans, you've used, so that used allowances stay used;
the install identifier in your iPhone's Keychain;
weigh-ins Buzzo previously wrote to Apple Health, which you can delete in the Health app;
the Apple Health access you granted in iOS, which you can change in iOS Settings (Privacy & Security, then Health);
backups you exported and backups of your iPhone made earlier;
your subscription, which belongs to your Apple Account and continues until you cancel it with Apple.

Deleting the Buzzo app removes its storage from your iPhone. iOS may keep the install identifier in the Keychain.

On Buzzo's photo service, the daily scan counts clear themselves every day. There is nothing else about you to delete.

How long information is kept

On your iPhone: until you delete it.
On Buzzo's photo service: meal photos and recognition results aren't stored. The one-way codes and scan counts are deleted when the photo service handles its first scan of a new day (in UTC). If nobody scans for a while, they can stay until then. The monthly cost total contains no personal information.
Third parties: Anthropic, Cloudflare and Apple keep information according to their own policies.

Security

In transit: Buzzo connects to its photo service only over HTTPS.
On your iPhone: Buzzo's files are protected by iOS Data Protection.
Keys: the key Buzzo's photo service uses to reach Anthropic is held only on the server, never in the app.

No way of sending or storing information is completely secure, so we can't guarantee absolute security.

Where information is processed

Buzzo's photo service and Anthropic may process a scanned photo in the United States and in other countries where they operate.

Your choices and rights

You control your data in Buzzo. You can:

view and edit it, export it (Export a backup) and delete it (Delete all data);
turn Apple Health access, reminders and the Coach's permissions on or off at any time;
choose never to use photo recognition.

Depending on where you live, you may have the right to:

access, correct or delete your personal information, or receive a copy of it (if you are under 18, a parent or guardian can ask for you);
object to or restrict how it's used, and withdraw your consent;
complain to a data-protection authority.

We don't hold your logged data, and our photo service keeps only salted one-way codes and the current day's scan counts. We don't use them to identify you, but because we hold the key used to make them, we treat them as personal information. So most requests can be handled directly in the app. For anything else, contact us using the details below.

Children and teens

Under 13. Buzzo isn’t for children under 13, and we don’t knowingly collect personal information from them. During setup Buzzo asks for an age, not a date of birth. If the age entered is under 13, setup doesn’t continue, and Buzzo remembers that answer on the iPhone so that entering an older age doesn’t open the app. Nothing a child enters is sent to us or anyone else.

Ages 13 to 17 (teen mode). For anyone who enters an age from 13 to 17, Buzzo works in teen mode:

food can be logged by typing, searching or adding a food, and it is stored only on the iPhone;
photo recognition, Apple Health, the coach, training plans, weigh-ins, progress photos, calorie targets and weight goals are switched off;
nothing a teen logs or photographs is sent to us or anyone else, and no install identifier is created or sent.

The age is self-declared and can’t be verified, because Buzzo has no accounts. Buzzo keeps a record of the youngest age entered on the iPhone, so entering an older age later doesn’t switch teen mode off; it opens adult features only once enough time has passed. Reinstalling the app removes this record.

Parents and guardians:

You can see and delete everything a teen logged in Buzzo on their iPhone, using Export a backup and Delete all data in Settings.
Purchases: in teen mode, Buzzo asks a parent or guardian to answer a check before a purchase starts, including a free trial. This check isn’t a verification of identity or consent. Apple’s Ask to Buy, which a family organizer turns on in Family Sharing, is what approves a family member’s purchase.
If you think a child under 13 has given us personal information, contact us and we’ll help.

Changes to this policy

If we change this policy, we'll post the new version at this address with a new effective date. If a change materially affects how Buzzo handles your information, we'll also explain it in the app or in the App Store release notes.

Contact

For questions or requests about privacy, email buzzzo@gmail.com.