Privacy Policy

Low Oxalate · last updated 9 August 2026

Most privacy policies are long because the app collects a lot. This one is short because there is nothing to disclose. What follows is the detail behind that claim, so you can verify it rather than take our word for it.

What we collect

Nothing. There is no sign-up, no login, no email field, and no analytics or crash-reporting SDK. We have no database of users because there is no mechanism by which we could have one.

What stays on your device

Everything you create in the app is written to local storage on your phone and never transmitted:

• Your food log, portions and meal times
• Journal entries, symptom scores and change markers
• Custom foods and custom recipes
• Your chosen protocol, ceiling and start date
• Settings such as reminders and text size

This data is stored in the app's private container. It is included in your device backup if you back up to iCloud or a computer, which is governed by Apple's privacy policy, not ours — we never see it.

iCloud sync (optional, off by default)

If you turn on iCloud sync under More → Your data, your log is copied into your own private iCloud account so it reaches your other devices and survives a lost phone.

To be precise about what that means:

• The data goes to Apple's CloudKit private database, which is tied to your Apple Account, not to us.
• We cannot read it. We have no server, no admin console and no mechanism to access your private database. Apple does not give developers access to it.
• It is stored compressed and counts against your iCloud storage.
• Turning sync off stops further copying. Erasing your data in the app also turns sync off, deliberately, so a reset on one device cannot wipe another.

Sync is off unless you switch it on. With it off, the app makes no network requests whatsoever.

Network access

With sync off, the app makes no network requests at all. The food database, recipes, fonts and all content are bundled inside the app and work entirely offline, including in airplane mode. With sync on, the only network traffic is between your device and your own iCloud account. The app contains no analytics, no tracking pixels, no advertising identifiers, and no third-party libraries that phone home.

Web addresses shown in the Field notes section are displayed as text for your reference. The app does not fetch them.

Health data

The app does not read from or write to Apple HealthKit, and requests no health permissions. Your dietary information is not shared with Apple, with us, or with anyone else.

Notifications

If you turn on the optional daily reminder, the app schedules a local notification on your device using iOS. Nothing is sent to or from a server, and no push tokens are generated or transmitted. You can revoke this at any time in iOS Settings or in the app.

Your data, in your hands

• Export — More → Your data → Export CSV or JSON produces a file you own, via the standard iOS share sheet.
• Delete — More → Your data → Erase everything permanently removes all stored data on that device and turns sync off. Deleting the app also removes everything. To remove the iCloud copy, use Settings → your name → iCloud → Manage Storage on your device.

Because we hold no copy, deletion is genuinely final. Export first if you want to keep a record.

Children

The app is not directed at children and collects no data from anyone, including children. We do not recommend using this app to plan a child's diet — restricting a nutrient in a growing child is a decision for a clinician, not an app.

Changes to this policy

If a future version of the app ever adds a feature that requires transmitting data, this policy will be updated before that version ships, and the change will be described in the release notes rather than buried here.

Contact

Questions about this policy: lowoxalate8@gmail.com