BetterPath Privacy Policy

Summary

BetterPath's backend processes request-scoped context when you use AI features, Food Noise Rescue, meal and label analysis, generated plans, or connected integrations. The backend is designed not to retain your profile, Rescue history, log history, chat history, meal photos, or health history after handling the request.

BetterPath uses Apple App Store or Google Play in-app purchases and RevenueCat to manage subscription purchase status. BetterPath does not receive your payment card details.

Information Stored On Your Device

BetterPath stores these items locally on your device:

• Questionnaire answers and profile settings.
• Weight, meal, water, and workout logs.
• Nutrition and Fitness coach conversations and bounded local conversation summaries.
• Photos and files you attach to coach messages (images, PDFs, and plain-text files).
• Memory: short notes you or your coach save, such as preferences, routines, and what works for you. If you turn on Health details, Memory can also hold conditions, medications, injuries, and food allergies you choose to save.
• Daily meal-plan choices, weekly reviews, recipes, Favorites, and shopping checklist state.
• Food Noise Rescue intensity, selected trigger, outcome, and optional helpful-action check-ins.
• Private progress photos.
• Generated diet and workout plans, including the plan's bounded daily nudge sequence.
• Daily prompt cache and app preferences.
• Local notification settings.
• Latest normalized integration snapshots, if you connect an integration.
• Up to 90 days of Apple Health or Health Connect activity aggregates and up to 365 days of body-weight readings, if you connect either service and permit historical access.
• WHOOP OAuth tokens in secure device storage, if you connect WHOOP.

You can delete local app data from Profile - Complete Reset and Delete my Data. This clears BetterPath data stored on that device. If you uninstall the app, your operating system may also remove app data according to its behavior. Android may include eligible local app data in your encrypted device backup when system backup is enabled.

AI Features And Backend Processing

When you use BetterPath's AI features, BetterPath sends the relevant context needed for that request to the BetterPath backend. Depending on the feature, this may include profile answers, recent logs, generated plan context, chat messages, photos and files you attach to a message, Memory notes, meal descriptions, meal photos, or connected integration snapshots. Attached PDFs and text files are read on the backend for that one request and are not stored. During Food Noise Rescue, the selected intensity and trigger, and a small locally derived summary of what has helped before may be included so the response can fit the current moment. When a diet plan is generated, the AI response also includes three short plan-specific nudges for morning, midday, and evening. Those messages are returned with the plan and cached locally; no new AI request runs when a notification is delivered.

Nutrition and Fitness coach conversations remain on your device. For an active request, BetterPath sends a bounded summary, recent messages, goals, saved plans, and relevant recent trends. Older messages can be summarized through a request-scoped backend operation and the returned summary is stored only on your device.

The backend forwards text and image requests through OpenRouter to the selected model provider. BetterPath requires zero-data-retention endpoints and denies provider data collection for these requests. OpenRouter and the selected downstream model provider still process the request to return the requested result. BetterPath does not use a server-side database for profile, Rescue, log, chat, meal-photo, or health-history retention in the current backend.

Azure OpenAI may separately process guided-meditation text for speech when that feature is configured. Contact BetterPath support if you have a privacy or processor-deletion question.

Health Details In Memory

Some details you may share with BetterPath are consumer health data under laws such as Washington's My Health My Data Act and similar state laws. This section explains how BetterPath handles them.

What is collected. Only the health details you choose to save to Memory: for example a condition, a medication, an injury or pain area, or a food allergy or intolerance. Your coach may offer to save a detail you mention in chat, and nothing is saved until you tap Save. BetterPath does not infer or add a diagnosis.

Your consent. Health details are off until you turn them on. BetterPath asks for your consent before the first health detail is saved, and you can turn Health details off at any time in Memory. Turning them off deletes the health details stored in Memory.

How they are used. To shape your coach replies, meal plans, meal swaps, and workout plans around them, for example leaving out an allergen or avoiding moves that load an injured area. They are not used for advertising, profiling for ads, or any purpose unrelated to the features you use.

Where they are kept. On your device, and in your private iCloud storage if you turn on iCloud sync. When you make an AI request, only the details relevant to that request are sent with it, processed as described above, and not retained by BetterPath.

Sharing. BetterPath does not sell health details and does not share them with third parties except the processors that handle an AI request you start (the backend host, OpenRouter, and the selected model provider), as described in this policy.

Your choices. You can see every saved detail in Memory, remove any one of them, turn Health details off, or delete all app data with Complete Reset and Delete my Data. Because BetterPath does not keep these details on its servers, you control them on your device. For questions or to exercise a privacy right, contact hello@betterpath.health.

Partner Links And Codes

Some creators share a BetterPath link with an App Store offer code. When someone opens that link, BetterPath counts the visit using a keyed one-way hash of the IP address that is kept only inside daily totals. If you redeem a partner's offer code, RevenueCat tells BetterPath about that purchase and its later renewals, refunds, and cancellations so the partner can be credited. BetterPath stores a keyed one-way hash of your anonymous RevenueCat ID, the partner, and the amounts, dates, plan, and country of those purchases. The partner sees only totals and a numbered list of purchase events, never your name, email, or device. Redeeming a code is optional.

Anonymous Usage Statistics

BetterPath counts how many installs reach each setup step and the membership screen, and how many start, complete, or cancel a purchase. It also counts a first logged meal and a shared progress image. Each event is a fixed name, an optional step name, and a time.

Events carry a random install ID created on your device. It is not your name, your RevenueCat ID, or your device's advertising ID. The server keeps only daily counts and a keyed one-way hash of the install ID, and does not store your IP address. Complete Reset and Delete my Data replaces the install ID.

Free Meal Estimate

Before you start a membership, you can get one meal estimate during setup. It is processed like any other meal analysis. To prevent abuse, the backend keeps daily counts keyed to one-way hashes of the RevenueCat anonymous ID and your network address. These counts expire automatically.

Camera, Photos, And Notifications

If you take or select a meal or recipe photo, or photograph a Nutrition Facts label, the image is sent to the BetterPath backend and AI provider for request-scoped analysis. BetterPath uses the result to create or update local data. The backend is designed not to retain the photo after the request completes.

If you scan a packaged-food barcode, BetterPath sends only the barcode to Open Food Facts to look up public product and nutrition information.

If you add a progress photo, BetterPath copies it into the app's private local storage. Progress photos are not sent to the BetterPath backend or an AI provider. They remain on the device until you delete the photo or use Complete Reset and Delete my Data.

All app notifications are optional and off by default. BetterPath asks for notification permission only after you turn on a reminder feature. Rescue reminders use up to two user-chosen time windows and may include one short local follow-up after a Rescue begins.

If you enable plan nudges, BetterPath locally schedules two or three messages from the bounded sequence generated with your current diet plan. Regenerating the plan replaces the previous sequence. If you also enable an Eating Window, the plan nudges are placed inside that window. You can keep lock-screen text discreet or choose to show plan-specific text. The backend does not send push notifications or receive delivery data.

If you enable Eating Window reminders, you choose a daytime window between 8 and 12 hours. BetterPath schedules one reminder when it opens and one 30 minutes before it closes. There is no streak, score, penalty, or server enforcement, and the feature does not instruct you to ignore hunger. A neutral weigh-in reminder is also available separately.

Subscriptions

BetterPath uses auto-renewable subscriptions for paid AI coaching access. Purchases are processed through the Apple App Store on iOS and Google Play on Android. RevenueCat is used to check subscription status, manage entitlements, support restore purchases, and provide an anonymous app user ID for entitlement checks. BetterPath does not receive or store payment card information.

Optional Integrations

BetterPath only shows an integration when it is configured and available in the installed build. If you connect WHOOP, BetterPath uses OAuth to access the WHOOP data you authorize, such as recovery, HRV, resting heart rate, sleep, and strain. BetterPath stores WHOOP access and refresh tokens in secure device storage and stores the latest normalized snapshot locally in your profile. BetterPath does not see your WHOOP password.

If you connect Apple Health, BetterPath requests read-only access to the data types you choose to share: steps, active energy, resting energy, workouts, and body weight. BetterPath does not request clinical records, heart-rate data, or permission to write data to Apple Health. Bounded daily activity summaries and recent weight readings are stored locally for Progress.

If you connect Health Connect on Android, BetterPath requests read-only access to steps, active calories, total calories, exercise sessions, and body weight. Historical access is optional and allows BetterPath to read the bounded periods described above. BetterPath does not request access to clinical records, heart-rate data, or permission to write to Health Connect.

When you use AI coaching, BetterPath may include a minimal current Apple Health or Health Connect summary, such as today's steps, energy, or workout minutes, in request-scoped context sent to the BetterPath backend and AI provider. Raw HealthKit or Health Connect sample history and source identifiers are not sent, and the backend is designed not to retain the summary after processing the request.

Disconnecting Apple Health or Health Connect clears its cached summaries from BetterPath and stops future syncs. Apple and Google manage the underlying permissions in their platform settings. Delete my data also clears health summaries stored by BetterPath on the current device.

Website Waitlist

If you join the BetterPath website waitlist, the website sends the contact information and goal information you submit to Airtable for waitlist administration and to Loops for requested product emails. This website information is separate from the local profile and logs stored by the BetterPath app. You can unsubscribe from emails using the link in any message.

No Tracking

The current v1 app does not require account creation and does not use third-party advertising tracking. BetterPath does not sell personal data or use app data for cross-app tracking.

Vendors And Processors

Depending on enabled features and deployment configuration, BetterPath may use:

• Apple: App Store distribution, iOS permissions, local notifications, and in-app platform services.
• Google: Google Play distribution, Android permissions, Health Connect, device backup, local notifications, and in-app platform services.
• RevenueCat: subscription status, entitlements, purchase, and restore purchase infrastructure.
• OpenRouter: request routing for AI text and image processing.
• AI model providers available through OpenRouter, including OpenAI or Azure OpenAI: underlying model inference.
• Azure OpenAI: guided-meditation text-to-speech when configured.
• Open Food Facts: public packaged-food lookup by barcode.
• WHOOP: optional recovery, sleep, strain, and related integration data if you connect WHOOP.
• Hosting provider for the BetterPath backend API.
• Airtable and Loops: website waitlist administration and requested product emails.

Data Deletion

Use Profile - Complete Reset and Delete my Data to clear BetterPath data stored on the current device, including profile answers, logs, plans, coach conversations, attached photos and files, Memory notes and health details, recipes, daily choices, weekly reviews, shopping state, generated nudge text, Eating Window settings, Rescue history, reminders, integration tokens and snapshots, local photos, and caches. Because v1 does not require an account and is designed not to retain server-side profile/log history, there is no account profile to delete on BetterPath servers.

Deleting BetterPath data does not delete source records from Apple Health, Health Connect, or WHOOP. Those services manage their own source data and permissions.

If you contact support about privacy or deletion, support may ask for the app version, device, connected integrations, and whether any external provider deletion requests are needed.

Contact

For support or privacy questions, contact hello@betterpath.health.