Who is responsible
BIL Health is the product publisher and data controller for developer-operated services. Contact privacy@bilhealth.com for privacy requests. Store operators, device platforms, and services you independently choose may act under their own privacy terms.
Information we process
- Account: email address, optional display name, and account identifier. New account creation does not request a phone number. Phone numbers supplied through an earlier registration flow may remain in existing account metadata subject to the retention and account-deletion controls below. Supabase also processes authentication and security events, IP address, and user-agent metadata.
- Health and wellness: profile details, age range or date of birth, biological sex where supplied, dietary preferences, nutrition, meals, water, weight, measurements, activity, sleep, goals, and notes.
- Connected sources: records you authorize through HealthKit or Health Connect, plus readings from compatible external fitness devices. These records remain on the device or in the source platform by default.
- Search: after local food sources return no match, the food search text and locale can be sent through the signed-in account session to BIL’s trusted gateway and USDA. BIL does not retain a dedicated search-history record or use the text for advertising, but treats this authenticated processing as linked to the account for store privacy disclosure.
- User and community content: AI questions and recognized voice transcripts; meal-analysis images; a selected profile photo that can be uploaded and shown as your public Community avatar; Community profile/biography, post text, images and audience; access-controlled private messages; reports; food submissions, peer reviews and label/evidence images; feedback; and support requests. Community visibility follows the audience you choose. Private messages are stored with access controls but are not end-to-end encrypted.
- Commerce and technical data: store product, entitlement and receipt-verification results, a cloud-sync device identifier, product interactions, AI request/token/provider and latency records, language, app version, device platform, security diagnostics, and limited operational logs. Where contextual free-tier ads are available on supported Android and iOS builds where ads are enabled, Google Mobile Ads may automatically process IP address (which can estimate general location), product interactions, diagnostics, and device or account identifiers for advertising delivery, analytics and fraud prevention. BIL does not receive your full payment-card number.
How data reaches BIL
Most information is entered by you or imported only after a platform permission. The local-first diary works without a cloud account. Cloud sync is optional and selective: profile/body settings, weight and hydration use the enabled sync scope. Nutrition and goal backup require their own explicit choices on supported builds. Saved Smart Plans stay on the device unless you separately enable plan backup; that backup sends plan settings, schedules, meal suggestions, confirmed completion state and revisions to your access-controlled Supabase account store. Plan suggestions are not logged food or completed activity. You can export or delete saved plans and stop plan backup from More → Sharing & Privacy → Saved plan data. A deletion marker may remain to prevent a deleted plan from being restored by another device. Plan backup does not automatically copy HealthKit or Health Connect records. Remote AI is separate: only after you ask the AI Coach, BIL creates a bounded context for that answer, which can include dietary preferences and recent nutrition, weight, activity, sleep, or verified connected-health summaries. Image analysis, purchases, push notifications, community tools, and device connections likewise activate only when configured and requested.
Optional Facebook Login
If Facebook Login is available and you choose it, Meta authenticates you and may provide BIL and its authentication processor, Supabase, with an app-scoped Facebook user identifier and public-profile information returned by Meta, such as your name and profile picture. Your email address is received only when you grant the email permission and Meta makes it available. BIL requests only public_profile and email for this flow and uses the result only to create, sign in to, secure, or link your BIL account. BIL does not post to Facebook or use Facebook account data to personalize health, nutrition, AI, or advertising. You can disconnect the provider where available or delete the BIL account and associated eligible data through the in-app controls or the Account deletion page.
Why we use information
- Provide logging, goals, calculations, charts, reports, synchronization, restore, and support.
- Personalize requested insights and AI Coach responses.
- Authenticate accounts, protect the service, prevent abuse, and verify purchases.
- Meet legal obligations and resolve disputes.
Where law requires a legal basis, BIL relies on performance of the service you request, consent for optional sensitive features, legitimate interests in security and reliability, and legal obligations. You may withdraw consent without affecting earlier lawful processing.
AI, voice, and photos
AI Coach: only after a separate opt-in, BIL sends the question and the bounded categories selected for that request—such as weight, goals and measurements; nutrition, meals, water and preferences; activity and training; sleep and habits; verified connected-health summaries; and up to 12 recent conversation turns—to Google Gemini, a third-party AI service operated by Google, to generate the requested answer. Voice capture starts only after you press the microphone. Apple or another platform speech service may convert that initiated audio under its own terms; BIL and Google Gemini receive the recognized text, not raw microphone audio, from the current app.
Meal-photo analysis: after a separate consent prompt, BIL sends the image you select, app language and necessary technical request metadata to Google Gemini to suggest foods and portions for your review. Nothing is added to the diary until you confirm it. You may decline either AI consent and continue using available local/manual features. Withdraw AI Coach consent in AI Coach settings and meal-photo consent in Privacy settings; withdrawal stops new transmissions. BIL retains limited AI usage, cost, security and reliability metadata, but does not add the submitted photo to a meal record unless you separately confirm the result. Provider processing is subject to BIL’s configured processor terms. AI can be wrong and is not medical advice.
Community and food-search translation
Online food search may send the search phrase and language through BIL to USDA, with Google Cloud Translation translating the phrase and food names. Your private diary and AI Coach conversations are not automatically included.
When you choose Translate, BIL sends the selected community text and target language through its authenticated service to Google Cloud Translation. Private health diaries and AI Coach context are not automatically included. Translation can be inaccurate; consult the original text.
Processors and disclosure
BIL may use Supabase for authentication, authenticated cloud storage, support records and server functions; Apple or Google for distribution, billing, speech and connected-fitness permissions; Google Gemini for requested remote AI processing; and Google Mobile Ads for contextual, non-personalized or limited ads where enabled on supported Android and iOS builds where ads are enabled. Supabase service and authentication logs can include user ID, IP address, user agent, request/response metadata and operational diagnostics for security, abuse prevention and reliability. Ads are excluded for guests and paid users. Before any eligible registered adult Free-user ad request, Google UMP is the authoritative consent gate where required. Google Mobile Ads must never receive BIL health, nutrition, weight, profile, search, precise-location, private-community, or AI-conversation content from BIL for targeting. Health data is not sold, shared with data brokers, or used to target ads. We may disclose limited information when legally required or to protect users and the service.
Website storage and edge delivery
The public BIL website stores only your language choice in browser local storage. It does not currently set BIL marketing cookies or load a BIL web-analytics beacon. Cloudflare delivers and protects the public site and may process IP address, user agent, requested URL and time, network/security signals, and operational diagnostics under its role and retention terms. The public website does not read the private diary or connected-health data from the BIL app.
Retention and deletion
Local records remain until you delete them or the app data. Cloud records remain while your account and the related feature are active, then are deleted or de-identified according to the deletion workflow, backups, fraud-prevention needs, and legal retention duties. AI usage, performance and operational logs are minimized and retained under service-security and quota requirements. Store transaction records may remain with Apple or Google under their rules.
Your choices and rights
- Use core local logging without creating an account.
- Enable or disable remote AI, cloud synchronization, notifications, device access, camera, microphone, and connected-health permissions.
- Access, correct, export, or delete eligible information in the app.
- Initiate full account deletion at Account deletion.
- Object, restrict processing, withdraw consent, or lodge a complaint with your local data-protection authority where applicable.
Email privacy@bilhealth.com from your account address so BIL can verify the request without asking you to send raw health exports.
Security and international processing
BIL uses encrypted transport, platform-protected credentials, access controls, row-level authorization, redacted app diagnostics, and verified server boundaries. Supabase infrastructure still records the limited authentication, IP, user-agent and request diagnostics described above. No system is perfectly secure. Cloud providers may process data in countries outside yours under contractual and legal safeguards appropriate to the service.
Adults only and changes
BIL is intended only for adults aged 18 or older and is not directed to children or minors. People under 18 must not create or use a BIL account or its local services. Material policy changes will be posted here with a new effective date and, when appropriate, surfaced in the app.