Legal

Privacy Policy

Blended Analytics Ltd is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Effective date: 24 June 2026

01

What We Collect

Information you provide directly

  • Account info — email address and password, managed securely by Clerk
  • Profile data — age, height, weight, biological sex, and activity level, used only to calculate your calorie and macro targets
  • Food logs — meals, serving sizes, and nutrition data you log
  • Body data — weight entries, body measurements, and progress photos
  • Coach conversations — messages you send to the AI coach
  • Health integrations — glucose readings (CGM), steps, sleep, and workout data you choose to sync via Apple Health or Google Health Connect

Information collected automatically

  • Usage analytics — via PostHog, to understand which features are used. No personally identifiable information is included in analytics events.
  • Crash reports — to improve app stability. These do not include your food or health data.
  • Push notification token — device token used to deliver reminders you have opted into.
02

How We Use Your Data

  • To display your food logs, macro progress, and body trends
  • To power AI features — your recent food logs and goals are sent to OpenAI to generate meal suggestions, coaching responses, and adaptive targets. No data is stored by OpenAI beyond their standard API retention policy.
  • To verify your subscription status via RevenueCat
  • To calculate and display your personalised nutrition targets
  • To send reminders and digest notifications you have opted into
  • To improve the service through anonymous product analytics
We do not sell your data. We do not use your data to train AI models.
03

Third-Party Services

Clerk clerk.com
Authentication and account management. Your password is never stored by us — Clerk handles all credential security.
OpenAI openai.com
AI food analysis, coaching responses, and meal suggestions. Food log excerpts and images are sent per-request. OpenAI does not store your data beyond their standard API retention window.
RevenueCat revenuecat.com
Subscription and payment management. We do not handle payment card numbers directly.
Open Food Facts openfoodfacts.org
Free, community-maintained food nutrition database used for barcode and food search. No personal data is sent.
USDA FoodData Central fdc.nal.usda.gov
US Department of Agriculture food nutrition database. No personal data is sent.
PostHog posthog.com
Anonymous product analytics to understand feature usage. Events contain no personally identifiable information.
Dexcom / CGM devices
Read-only glucose data, entirely user-controlled. You can revoke access at any time from your device settings.
Apple Health / Google Health Connect
Bidirectional health-data sync — steps, sleep, workouts, and body metrics. Access is entirely user-controlled and can be revoked at any time.

Each service has its own privacy policy and data handling practices.

04

Data Storage & Security

  • Your food logs, body data, and goals are stored in a secured PostgreSQL database. All connections are encrypted in transit using TLS.
  • Passwords are never stored by us — authentication is handled entirely by Clerk.
  • AI scan images you take for food analysis are sent to OpenAI for analysis and are not stored on our servers.
  • Progress photos are stored in encrypted object storage. Only you can access them.
05

Data Retention & Deletion

  • You can delete your account and all associated data at any time from the app: Profile tab → scroll to bottom → Delete Account.
  • Upon deletion, all food logs, body data, goals, and coach conversations are permanently removed from our database within 30 days.
  • Anonymised analytics events are not linked to your identity and are not deleted with your account.
06

Your Rights (UK GDPR / GDPR)

If you are in the UK or EEA, you have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data (exercisable in-app or via email)
  • Restriction — request that we limit how we use your data
  • Portability — request your data in a machine-readable format
  • Object — object to processing based on legitimate interests

To exercise any of these rights, email legal@blended-analytics.com. We will respond within 30 days.

07

Children

Fortura is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

08

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via an in-app notice. Continued use of the app after changes take effect constitutes acceptance of the updated policy.

Questions about your data?

We're happy to help. Reach out any time.

support@blended-analytics.com