Health Data Policy
Last updated 7 October 2026
Your health information is used to run PocketMigo for you, and for nothing else. It is never used for advertising, never sold, and never shared for anyone else's purposes. Nothing is collected until you agree to this policy in the app.
This is our consumer health data privacy policy, including under Washington's My Health My Data Act and Nevada's consumer health data law. It sits alongside our Privacy Policy, which covers everything else.
What we collect, and why
- Body details — your age, sex, height and weight, and your goal. Used to work out how much you burn and your daily targets.
- Weigh-ins — the ones you type, and the ones Apple Health has from a smart scale or another app. Used for your weight trend, your weekly check-in and to learn your daily burn.
- What you eat — the meals and foods you log, with their calories, protein, carbs, fat, fiber and water. Used for your daily totals and to feed your Migo.
- Meal photos and descriptions you send to Ask AI — only the ones you choose to send. Used once, to estimate the food's nutrition.
- Activity from Apple Health — steps, workouts, exercise minutes, walking and running distance, active energy and your Activity rings. Used for your daily totals, your Migo's energy, your garden and challenges with friends.
- Sleep from Apple Health, and any nights you type in. Used for your sleep history and recovery.
- Heart rate from Apple Health — read only while the app is open, to show it during a workout and to notice that you have started one. It is never saved and never leaves your phone.
- Workouts you do with the watch app — saved to Apple Health, with your permission, as Outdoor Walk workouts.
We infer one thing from all this: estimates about your own body, like how much you burn in a day and what changed your numbers. Those estimates are shown to you and used for nothing else.
Where it comes from
- From you, when you type it in or take a photo.
- From Apple Health, only the types you allow in iOS's own Health permission sheet. You can change that any time in the Health app → Sharing → Apps → PocketMigo.
- From your Apple Watch, through the PocketMigo watch app.
Where it is kept
On your phone, and backed up to our database so a new phone or a reinstall gets it back. Heart rate is the one exception: it is never stored at all. The database is run by Supabase for us; they keep it and do nothing else with it.
We keep it for as long as you have an account. When you delete your account it is removed from the database straight away. Our hosting provider's short-term disaster-recovery backups roll over on their own, and deleted data is not restored from them.
Who else receives any of it
We never sell it, rent it, trade it, or share it for advertising. These are the only companies that receive any health information, and only as our service providers, for the job listed:
- Supabase — stores everything above except heart rate, so your save is backed up.
- Anthropic — receives only what you choose to send to Ask AI (a food description or a plate photo), to estimate its nutrition. Nothing that identifies you goes with it, and we keep no copy of photos.
- Apple — Apple Health is Apple's, on your devices. If you speak a meal instead of typing it, Apple's dictation turns the recording into text.
Friends you add can see the daily totals you are competing on in a challenge, and your Migo and garden. They never see your weight, your body details, your meals or your sleep.
We would only ever disclose health information beyond this list if the law required it, and we would tell you unless the law forbade that.
Your rights
- Know and get a copy. Ask what we hold about you and for a copy of it, and the list of everyone it has been shared with (the list above).
- Delete. In the app: Settings → Delete account. Everything is deleted, on the server and on your phone, and anyone above who holds a copy for us is covered by the same deletion.
- Take back your consent. Stop any Apple Health type in the Health app, or delete your account. Taking back consent never costs you anything you have already earned in the game, beyond what needs the data.
- Correct. Change any detail in the app, or ask us to.
- Appeal. If we turn down a request, reply to say so and it is looked at again. If you are still not satisfied, you can contact your state's Attorney General.
Email [email protected] from the address on your account, or tell us your friend code. We answer within 45 days, and we never treat you differently for asking.
If you are in the UK or the European Union, we use your health information because you gave explicit consent, and you also have the rights above under the GDPR, including to complain to your data protection authority.
Children
PocketMigo is for ages 13 and up. If someone younger gives their age when signing up, sign-up stops and what they entered is deleted, from the phone and from our servers. If you believe a child under 13 has given us information, email us and it will be deleted.
Changes
If what we collect or who receives it changes, this page changes first, with a new date, and the app asks for your consent again before anything new is collected.
Contact
PocketMigo is made by one person. Write to [email protected].