Privacy Policy

Last updated 8 October 2026

What never leaves your phone

• Your heart rate. Read from Apple Health only while the app is open, to show it during a workout and to notice you have started one. It is never saved or sent.
• Face ID and Touch ID. Handled entirely by iOS. The app is told yes or no. It never sees your face or your fingerprint.
• Barcode scanning. The camera reads the barcode on your device. No photo is taken, kept, or uploaded.
• Your Migo listening for its name. That audio is never recorded, never turned into text, and never sent anywhere. You can switch listening off in Settings.
• Where you are. We never receive your location. If you let the app use it for the garden's weather, your phone sends a rough location (accurate to a few kilometres, not your address) straight to Apple's weather service; see Apple below. Say no, and the garden makes its weather up from the clock and the time of year.
• How far away another phone is. When two phones are held together, your iPhone measures the gap itself (Nearby Interaction). The distance stays on the two phones.

Phones next to each other

While your garden is open, your phone uses Bluetooth to notice another PocketMigo phone right beside it, so bringing two phones together can start a visit or a walk. What it sends out over Bluetooth is a random code, made fresh each time you open the garden. It is not your name, your account or anything that identifies you, and one day’s code can’t be tied to the next.

When two phones hear each other, they say hello through our server: each learns the other’s Migo name and kind, and an account id so a visit or a walk together can begin. Nothing else is shared until someone taps to visit or walk. You can turn Bluetooth off for PocketMigo in iOS Settings, and the rest of the app works the same.

What we keep on our servers

So your garden survives a reinstall, and so friends can see your Migo:

• Your account — if you sign up with an email, that email address and your password, which Supabase keeps scrambled so that nobody, us included, can read it. If you use Sign in with Apple, the email address and name you release through it; with Apple's private relay, a relay address is all we ever get.
• Your garden and your Migo — level, outfits, decorations, the island itself.
• Your body details and goal — age, sex, height, weight, your goal and your daily targets.
• Your weigh-ins — typed, from your watch, or from a smart scale through Apple Health.
• Your daily activity — steps, workouts, exercise minutes, walking distance, active energy, Activity rings, sleep, meals, protein, calories and water for each day. The parts that come from Apple Health are read with the permission you give in iOS, and kept here so a new phone gets them back.
• A backup of your save — what the app keeps on your phone, apart from a few settings that only mean something on that phone, so a reinstall or a new phone picks up where you left off.
• Your health agreement — the date you agreed to the Health Data Policy, and which version.
• Your friends — friend codes, friend challenges, gifts, reactions and shared workouts.
• Your username — if you pick one, so friends can find you by it. Other signed-in players can look it up; guests cannot.
• Food searches — each answer is kept for 30 days, without who asked, so the next search for the same food is quicker, and each account's searches are counted for the day, to stay within USDA's limits. Those daily counts are deleted after 30 days.

If you chose “Continue without account”

You still get an account — an empty one. There is no email address on it, no password, and no name, and you are never asked for any. It exists for one reason: an account is what a backup belongs to, and without one your garden would live only on your phone. Delete the app, lose the phone, or have iOS clear the app’s storage to make room, and it would be gone with no way for anyone to get it back.

So what is kept is your garden and your daily activity, exactly as above, and nothing that identifies you — because we have nothing that identifies you. You cannot be emailed, found by a friend, or matched to anything outside the app.

You can delete it from inside the app at any time: Settings → Delete account. And if you add an email later, it is the same account — your garden stays where it is rather than being copied anywhere.

This lives in a database run by Supabase. They are listed below with everyone else.

What the app tells us about itself

When something breaks, the app sends us a short note: what went wrong, the app's version, which screen you were on, your phone's system version, and when. It never includes your account, your name, your email, or anything you typed or logged, and it isn't linked to you. We use it only to fix bugs, and keep it for 90 days.

The app also adds one to a few counts: the first time you see each onboarding page, reach and finish each day of the garden tutorial, come back on your second and seventh day, and start or keep a PocketMigo+ trial. Each count is a number for a day and an app version. Nothing in it says who you are.

The beta waitlist

If you join the waitlist on this website, we keep the email address you give, to tell you when the beta opens and when the app launches. It isn’t used for anything else, isn’t shared, and isn’t joined to an account. To be taken off, email [email protected] and it is deleted.

Who else sees anything

Six companies, and only for the jobs below. This is the complete list.

About the AI estimate

When you use Ask AI, what you give it is sent to Anthropic's Claude to estimate the calories and macros: the words you wrote, or a photo of your plate if you chose to take or pick one. Nothing else goes with it — no name, no account, nothing that says the request came from you.

To check that you have PocketMigo+, the app sends our server Apple's signed record of your plan, and we count your questions each day to keep within the daily limit, and delete those counts after 30 days. None of that goes to Anthropic.

For restaurant, chain and brand foods, Claude may search the web for that item's published nutrition. The search is made by Anthropic, not from your phone, and it is about the food, not about you.

Answers to typed words are cached and shared with other players, so the first person to log "homemade chicken curry" is the only one who has to ask. Photos are never cached or shared, and PocketMigo's servers keep no copy of them.

About speaking your meals

Dictation uses Apple's speech recognition, which sends that recording to Apple to be transcribed. That is Apple's system, under Apple's privacy policy. Typing your meal instead avoids it entirely.

Paying for something

PocketMigo+ is sold through Apple's App Store. We never see your card, your billing address, or the name on your card. Apple tells us whether your plan is active and gives the app its signed record of the plan, which our server checks before AI food search answers. We keep that one fact against your account.

Nothing you have already logged is ever locked behind a payment. What gets sold is analysis built on top of your log, never the log itself.

Your health data

Health and fitness information is used to run the app and nothing else. It is never used for advertising and never sold. Supabase stores it for you, as described above, and Anthropic sees only a meal you choose to send to Ask AI. Nothing is collected until you agree, in the app, to the Health Data Policy, which lists every kind we collect, why, and your rights over it.

Data from Apple Health is never used for advertising or marketing, never sold, and never given to anyone beyond what is listed here, as Apple requires. PocketMigo writes one thing to Apple Health: walks you record with the watch app, as workouts.

Your friends can see

If you add a friend, they can see your Migo, your garden, your streak, and the daily activity totals you are competing on. They cannot see your weight, your height, your age, or anything you have logged that is not part of a shared challenge.

Reports and blocks

If you report a player, we keep your report: who you reported, why, and the words you saw, so we can act on it. If you block someone, we keep that so they can't reach you. They aren't told.

Deleting everything

In the app: Settings → Delete account. Your account and everything attached to it — health information, garden, activity, friendships, gifts — is deleted from our database straight away, then from your phone, and it is not recoverable afterwards. You can also email [email protected] from the address on your account and ask.

Deleting the app from your phone removes everything held locally, but leaves what is on the server until you ask.

Children

PocketMigo is for ages 13 and up. If someone younger gives their age when signing up, sign-up stops and what they entered is deleted, from the phone and from our servers. If you believe a child under 13 has given us information, email the address below and it will be removed.

Your rights

You can ask for a copy of what we hold about you, have it corrected, have it deleted, and take back your consent, and you will not be treated differently for asking. We answer within 45 days; if we turn a request down you can ask us to look again. The Health Data Policy says how. If you are in the UK or the European Union, you have these rights under the GDPR too, including to complain to your data protection authority.

Changes

If this policy changes, the new version appears here with a new date at the top. Anything that meaningfully changes what leaves your phone will also be said in the app, and a change to the health information we collect asks for your consent again.

Who runs PocketMigo

PocketMigo is made and run by Vincent Shibuta, an independent developer in Utah, United States, the same name the App Store shows. Under privacy law that makes Vincent Shibuta the one responsible for your information (the “controller”). If PocketMigo becomes a company, this page will name it and say from when.

Contact

Questions, requests about your information, corrections and complaints all go to the same place: [email protected].