FinallyMe ("the App") is operated by The Good Habits Company LLC ("we," "us"), registered in Indiana, USA. This policy explains what information we handle, why, and the choices you have. It applies to the App, finallyme.app, and related services (together, the "Services").
The short version
- Your health data is stored on your device by default. We cannot see it.
- Cloud sync, online AI features, and analytics are strictly opt-in.
- We never sell your data, and we never share it with advertisers, employers, or insurers.
- You can export or delete your data at any time.
1. Information stored on your device (default)
By default, everything you log in FinallyMe (doses, injection sites, meals and macros, side effects, weight, water, sleep, habits, and related notes) is stored locally on your device and is not transmitted to us. If you use only the default configuration, we do not collect, receive, or process your health information at all. Deleting the App deletes this data unless you have exported it or enabled cloud sync.
2. Apple Health and Health Connect
With your permission, the App can read data such as steps, activity, and weight from Apple Health (iOS) or Health Connect (Android), and can write data you log (such as weight or workouts) back to those services. This data is used solely to display your progress inside the App. We do not use Apple Health or Health Connect data for advertising, marketing, or data mining, and we never disclose it to third parties. You can revoke these permissions at any time in your device settings.
3. Optional cloud sync (opt-in)
If you enable cloud sync, an encrypted copy of your App data is stored on our servers so you can back it up and restore it across devices. Data is encrypted in transit and at rest. You can disable sync and delete your cloud copy at any time from the App's settings, which permanently removes it from our servers within 30 days.
4. Optional AI features (opt-in)
FinallyMe includes AI features that are always optional. Some run entirely on your device. The features below send specific data off your device only when you choose to use them. This section explains exactly what leaves your device, where it goes, and what happens to it.
AI food photo analysis
In the food logging flow, you can photograph a meal (or choose an existing photo) to have it identified automatically. This is always user-initiated: no photo ever leaves your device unless you take that action for that photo. When you do, the photo you submit is transmitted over an encrypted connection to Google's Gemini service for image analysis. Google LLC acts as our data processor for this feature. The AI returns candidate food matches, and matching against our nutrition database happens on your device. Your food log, your name, and your other app data are not sent with the photo.
We use the photo for one purpose only: identifying the food in it so you can log it faster. We do not use meal photos for advertising, profiling, or any other purpose. Because a photo can incidentally capture other information (for example, medication packaging, documents, or people in the background), submit only photos you are comfortable sending, and crop first when in doubt.
Retention: we do not keep your meal photo after analysis; only the food entries you choose to save remain in your on-device log. Google retains API inputs and outputs for a limited period (currently up to 55 days) solely to detect abuse of its service, as described in its API terms. Google does not use your photos or the results to train its AI models.
Consent: taking or choosing a photo requires your device's camera or photo permission, and submitting it for analysis is a separate, deliberate step in the flow. If you never use the feature, nothing is ever sent, and you can always log food manually instead.
AI food identification is an estimate for convenience, not medical or nutritional advice. Verify any entry that matters to your health decisions, and rely on your healthcare provider or a registered dietitian for dietary guidance.
Meal photos are separate from progress photos. Progress photos are part of your on-device data described in Section 1: they stay on your device unless you enable encrypted cloud sync, and they are never sent to any AI provider.
The in-app coach: on-device or cloud
The coach offers two modes, and you choose between them in settings:
- On-device AI: conversations are processed entirely on your phone and never leave it.
- Cloud AI (Google Gemini): the messages you send to the coach are transmitted over an encrypted connection to Google's Gemini service to generate responses. Google LLC acts as our data processor, under the same encryption, retention, and no-training terms described above.
Coach conversations may include health information you choose to share. In cloud mode, that information is sent to Google as part of your message. If you prefer that nothing you type ever leave your phone, choose on-device mode. You can switch modes at any time.
The coach provides general wellness support. It is not medical advice, diagnosis, or treatment.
5. Purchases
Founding memberships purchased on our website are processed by Stripe; app subscriptions are processed by Apple, Google, and our subscription manager RevenueCat. These providers handle your payment details. We never see or store full card numbers. We receive limited information (such as email, purchase status, and a transaction identifier) to activate your access.
6. Account and contact information
If you join our waitlist, create an account, or contact support, we collect the information you provide (such as your email address and message contents) to deliver the Services, activate purchases, respond to you, and send service updates. Marketing emails always include an unsubscribe link.
7. Analytics and diagnostics (opt-in)
The App only sends usage analytics or crash diagnostics if you opt in. When enabled, this data is limited to app performance and feature-usage events, is not combined with your health logs, and is used solely to improve the App. You can opt out at any time in settings.
8. What we never do
We do not sell your personal information. We do not share your health information with advertisers, data brokers, employers, or insurance companies. We do not use health data for advertising of any kind.
9. When we share information
We share information only with: (a) service providers acting on our instructions (hosting, payment processing, email delivery, and opt-in AI processing by Google LLC as described in Section 4), bound by contract to protect it; (b) authorities where required by law; and (c) a successor entity if our business is transferred, under this same policy. We may share aggregated, de-identified statistics that cannot identify you.
10. Your rights and choices
Wherever you live, you can access, export, correct, or delete your data directly in the App (Settings → Data). If you have used cloud features, the waitlist, or made a purchase, you can also submit a request through our data deletion request page or by email.
- European Economic Area / UK (GDPR): our legal bases are consent (health data and optional features), contract (providing purchased Services), and legitimate interests (security, service communications). For optional AI features that process photos or messages which may reveal health information, our legal basis is your explicit consent (Article 9(2)(a)), given through the deliberate act of submitting a photo or selecting cloud mode; you can withdraw it at any time by disabling or not using the feature. You may withdraw consent, object, restrict processing, request portability, and lodge a complaint with your supervisory authority.
- California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of sale/sharing. We do not sell or share personal information as defined by the CCPA, and we treat health data, meal photos you submit, and coach messages as sensitive personal information used only to provide the Services and the features you request.
- Washington State (My Health My Data): information such as dietary intake, meal photos, and the health details you log is consumer health data under Washington's My Health My Data Act. We collect and share it only as described in this policy and with your consent, we do not sell consumer health data, and Washington residents may exercise access and deletion rights (including through the deletion request page above) and may appeal a decision by replying to our response email.
We respond to verified requests within the timeframes required by law and never discriminate against you for exercising rights.
11. Data retention
On-device data persists until you delete it or the App. Cloud data is retained while sync is enabled and deleted within 30 days of your deletion request or account closure. Meal photos submitted for AI analysis are not stored by us after analysis; Google's limited abuse-monitoring retention is described in Section 4. Support emails and purchase records are kept as required for tax, accounting, and legal purposes.
12. Security
We use industry-standard safeguards, including encryption in transit (TLS), 256-bit encryption at rest for the health database on your device, encryption at rest for cloud data, access controls, and the on-device-first architecture itself. The strongest protection is data that never leaves your phone. No system is 100% secure, but minimizing what we hold is our core design principle.
13. International transfers
We operate globally. Where data is transferred across borders (for example, to servers or providers in the United States, including Google LLC for opt-in AI features), we rely on appropriate safeguards such as Standard Contractual Clauses.
14. Children
The Services are for adults and are not directed to anyone under 18. We do not knowingly collect information from anyone under 18; if you believe we have, contact us and we will delete it.
15. Changes
We will post any changes here and update the date above. For material changes affecting health data, we will notify you in the App before they take effect.
16. Contact
The Good Habits Company LLC · support@thegoodhabits.company