The short version: your workouts, food diary, weight, measurements, photos and health data stay on your iPhone and Apple Watch. There's no account to create. Two optional features talk to our server: photo food estimates (your photo is analysed and then discarded, never stored) and challenges (a handle you choose and your rep totals for the challenges you join). No ads, no tracking, no analytics SDKs, and we never sell your data.
1. Who We Are
Belltally is developed by Anchori Intel, a sole-trader app studio operated by Stuart McMillan, registered in Australia (ABN 51 277 394 323). Questions about this policy: hello@anchoriintel.com.
2. What Stays on Your Devices
Everything below is stored only on your iPhone (and, where relevant, your Apple Watch), protected by the operating system's at-rest encryption. None of it is sent to us.
- Training: sessions, sets, reps, weights, rest days, routines, goals and the "reps in reserve" you tap after a set.
- Wrist motion: your Apple Watch reads motion sensors to count reps. That signal is processed on the Watch. If you choose to record sets to check or improve counting accuracy, those recordings stay on your devices.
- Food diary: what you ate, portions, saved meals, recipes, water, and any meal photos you keep in your diary.
- Body: weigh-ins, tape measurements and progress photos. Progress photos never leave your iPhone.
- Evening check-ins: the tags you pick (for example "alcohol" or "stressful day") and the recovery insights calculated from them, all worked out on your iPhone.
3. Apple Health
If you connect Apple Health, Belltally reads steps, active energy, exercise minutes, distance, sleep, resting heart rate, heart-rate variability, body weight and your other workouts, and writes your Belltally workouts, meals, water and weigh-ins. Health data is used on your device to show your calories-left number, readiness and charts. We never send Apple Health data to our server, never use it for advertising, and never share it with anyone.
4. Photo Food Estimates ("Snap", Optional)
When you photograph a meal (or describe it in words) and ask for an estimate, Belltally sends the following to our server so it can be analysed:
- the photo (downsized, with location and camera metadata removed) or your text description;
- any nutrition-label text read on your device from the photo;
- context that makes the estimate better: the meal (e.g. lunch), your goal, the calories and protein you have left today, the names and calories of a few recent meals, and your usual portion sizes;
- a random install identifier (not linked to your name or Apple ID), used only to apply the daily free-scan limit.
Our server passes the image or text to Anthropic's Claude AI model, which identifies the foods and estimates portions; nutrition values then come from our own food database. We do not store your photo or description. They are discarded once the estimate is returned. The only thing we keep is a count of scans per install per day. Under Anthropic's commercial terms, API inputs are not used to train their models.
If you never use Snap, none of this happens. Barcode scanning, label scanning and food search work without sending photos anywhere.
5. Barcode Lookups
When you scan a barcode, Belltally looks the product up in the public Open Food Facts database. Only the barcode number is sent (along with the technical details any web request carries, such as your IP address). Open Food Facts Privacy →
6. Voice Logging
If you log a meal by voice, speech is turned into text using Apple's speech recognition, on your iPhone wherever the device supports it; otherwise Apple processes it under Apple's privacy policy. Belltally only listens while you're dictating. The resulting text is treated like a typed description (see section 4).
7. Challenges and Leaderboards (Optional)
Challenges are off until you join one. When you do, you pick a handle. No email, no name, no password. Your iPhone keeps a random secret in its Keychain that proves the handle is yours. We store:
- your handle and a one-way fingerprint (hash) of that secret;
- the challenges you've joined;
- for each session that counts, your rep total for that challenge and the session's date and time.
To work out what counts, your iPhone sends the relevant sets from your Watch-counted sessions (exercise, reps, the Watch's own count and set duration). Only the per-challenge totals are stored. Your handle and totals are visible to other people in the same challenge; that's the point of a leaderboard. Nothing else about you is shared.
If you report a handle, we store the reported handle, the challenge and your player ID so we can review it. Offensive handles are removed.
8. What We Never Do
- We never sell your data. To anyone. Ever.
- We never show advertising, and we never use tracking identifiers (IDFA or App Tracking Transparency prompts).
- We don't include analytics or crash-reporting SDKs in this version.
- We never send your Apple Health data, weight, measurements or progress photos to our server.
- We never use your data to train an AI model.
9. Payments
If you subscribe to Belltally Pro, the purchase is handled by Apple's App Store. Belltally only receives your subscription status from Apple (via StoreKit) to unlock features. We never see your card or payment details.
10. Notifications
If you allow notifications, Belltally sends reminders you've switched on, such as your next session, drinking water, or a short movement break during the day. They're scheduled on your device. Belltally never nudges you to exercise late at night.
11. Where Our Server Is
Our backend runs on Supabase, with the database hosted in Sydney, Australia. Server data is locked down so that only our own server code can read or write it. Supabase Privacy →
12. Third-Party Services
- Apple: App Store and StoreKit (subscriptions), Apple Health, speech recognition. Apple Privacy →
- Supabase: hosts our server for Snap and challenges. Supabase Privacy →
- Anthropic: analyses meal photos and descriptions for Snap. Anthropic Privacy →
- Open Food Facts: public barcode database. Open Food Facts Privacy →
13. Your Control
- Delete everything on your devices: in the You tab, "Delete all data" erases your sessions, food diary, photos, measurements and settings from Belltally.
- Delete your challenge profile: in the You tab, "Delete challenge profile" removes your handle, memberships and every leaderboard entry from our server. Leaving a single challenge removes your entries from that challenge.
- Export your data: "Export everything (CSV)" in the You tab gives you your sessions, food and weight, free.
- Apple Health: change what Belltally can read or write any time in the Health app. Data already saved to Health stays there until you remove it in Health.
- Delete the app: removes all of Belltally's on-device data.
- Cancel your subscription: manage or cancel anytime in your Apple Account subscription settings.
14. Data Retention
On-device data stays until you delete it or the app. Snap photos and descriptions are not retained; the per-install daily scan count is kept only for abuse and cost protection. Challenge data is kept until you leave the challenge or delete your challenge profile.
15. Health Information and Children
Belltally gives general fitness and nutrition information. It isn't medical advice, and estimates (calories, portions, readiness, body fat) are estimates. Belltally is not directed at children under 13 and does not knowingly collect personal information from them.
16. Changes to This Policy
If we change how Belltally handles data, we'll update this page and revise the effective date above.
17. Contact
Email hello@anchoriintel.com and we'll get back to you. We read every message.