Privacy Policy

Last updated: August 12, 2026

This Privacy Policy explains what information the Zap The Weight Android app (the "App") and zaptheweight.com (the "Site") handle, and how. It is written to be read by a human.

The short version: your data lives on your device. We don't run user accounts, we don't have a server that collects your personal data, and we never sell data. The only times anything leaves your phone are the specific features described below — and you trigger each of them yourself.

1. What the App stores — on your device

To do its job, the App stores the information you enter in a local database on your phone:

Profile: display name, first/last name, date of birth, sex, height, weight and goal weight, activity level, goal, pace, country and zip/postal code (optional), diet type, allergies, and any food-related health conditions you choose to share (for example diabetes).
Health & medicines: readings you record in the Health Log (blood pressure, blood sugar, A1c, heart rate, cholesterol, sleep and the rest), the medicines you add with their doses and schedules, and which doses you ticked off. Medicine leaflets fetched from the FDA are stored alongside the medicine so you can read them again without another lookup. Food & activity data: food preferences, meal plans and logs, weigh-ins, step counts from your phone's step sensor, fasting/eating-window check-ins, game high scores, and app settings.

This data stays on your device. We cannot see it. Uninstalling the App deletes it (subject to the backups you control, below).

2. Backups — you control them

Android Auto Backup may back the App's data up to your own Google account, per your device's backup settings.
Manual and auto file backups save an export file to a location you pick (for example your Google Drive or SD card). Those files are yours; guard them like any personal file.

3. Features that send data off your device

These features talk to the internet, and only when you use them:

Photo food recognition: when you snap a meal photo, that photo is sent to Google's Gemini API to identify the food and estimate nutrition. We don't store your photos on any server of ours; Google processes the request under its own terms. Don't include people or private information in food photos.
Medicine photos: if you photograph a prescription label or a loose pill to identify it, that photo is sent to Google's Gemini API to read the text or the markings on it. A pharmacy label usually carries your name, your address and your prescriber's name. We ask only for the medicine, the strength and the directions, and we store nothing else — but the photograph is sent as taken, so cover anything you would rather not send, or photograph only the part of the label with the medicine name on it.
Medicine lookups: to tell you what a medicine is, the App sends the pill marking, or the medicine name, to two public United States government services: the FDA's openFDA drug-label database, and the National Library of Medicine's RxNorm, which corrects misspelled drug names. Only the marking or the name is sent — not your identity, your other medicines, or anything else in your log.
Reports you send: a health or training report is built on your phone as a PDF and goes nowhere until you save or send it. You choose what goes into it first. Once sent it is an ordinary file carrying your name, your age and whatever you included, and where it goes next is governed by whichever app or service you sent it with.
Barcode lookups: the barcode number (just the number) is sent to Open Food Facts, a public, non-profit food database, to fetch nutrition facts.
Purchases: Premium and credit purchases are processed entirely by Google Play. We never see your payment details.

4. What we do NOT do

No user accounts, no passwords, no cloud profile.
No advertising networks and no third-party analytics SDKs.
No selling or renting of personal information — ever.
No reading of your contacts, location, messages, or files beyond the backup file you choose.

5. Permissions the App asks for

Camera — to snap meal photos and scan barcodes. Used only while you're using those features.
Physical activity — to read your phone's built-in step counter for your daily step goal.
Internet — for the photo, barcode, and purchase features above.

You can decline or revoke any permission in Android settings; the related feature simply won't work and the rest of the App carries on.

6. Health-related information

Weight, body measurements, meal logs, fasting check-ins, and optional health conditions are sensitive. That is exactly why the App is built local-first: this information stays in the App's private storage on your device and is used only to tailor your plan inside the App. It is never transmitted to us. Two things do leave the phone, and only when you ask for them: a photo you take of a medicine or its label, and a pill marking or medicine name sent to the FDA and RxNorm to look up — both described in section 3. A report you export leaves only when you send it, and you choose what goes in it.

7. Children

The Service is intended for people aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the App, uninstalling it removes the on-device data.

8. The website

zaptheweight.com is an informational site. It sets no tracking cookies of its own and runs no analytics scripts. Our hosting provider may keep standard, short-lived server logs (such as IP address and requested page) for security and operations.

The contact form. The one page that collects anything is the contact form. When you send it, the inquiry type, your name, your e-mail address, your subject and your message are turned into an ordinary e-mail to our support inbox. We add the time, your IP address and your browser's user-agent string to that e-mail so we can recognise abuse of the form. Nothing is written to a database and no copy is kept on the website — the message exists only in our mailbox, where we keep it as long as we need to deal with what you wrote and then delete it. We use it to answer you and for nothing else: no mailing list, no advertising, no sharing or selling. To stop a bot flooding the inbox, the number of messages sent from one IP address in an hour is counted in a temporary file; that file holds timestamps only, and no message content. Please don't put health details, medicine names or anything else sensitive in the form — e-mail is not a private channel, and we don't need them to help you.

The home page embeds our promo video from YouTube (via youtube-nocookie.com, in privacy-enhanced mode). YouTube does not set identifying cookies unless you interact with the player; if you play the video, Google may process that interaction under its own privacy policy.

9. Data retention & deletion

Because your data is stored on your device, you are in control: delete individual entries in the App, use the App's "Reset app" to wipe everything, or uninstall the App. Also delete any backup files you created if you want a full clean slate.

10. Changes to this policy

If we change how the App handles data — for example if we ever add optional accounts or sync — we will update this page first and highlight the change in the App before it takes effect. The "Last updated" date above always shows the current version.

11. Contact

Privacy questions? Use the contact form and pick Account, data & privacy request. It reaches the same people who would read an e-mail, and it is the only contact route we publish.