Myokeep Privacy Policy

Myokeep is an iOS app that helps you track daily protein while you lose weight on a GLP-1 medication. We built it privacy-first: your health information lives on your own device — we are not able to see your raw food logs, symptom entries, or weight history. This policy explains what that means in plain language.

1. Information you put into the app

When you use Myokeep you may enter your profile (body weight, whether you do resistance training), protein logs (grams, and optionally a food name and calories), symptom check-ins (a symptom from a fixed list, a self-rated severity, and the date), your injection day, and saved favorites. Your entries themselves — every protein log, every symptom check-in with its severity and date, your weight, and your saved favorites — are stored only on your device. They are never sent to our servers and we cannot read them. If you ask the AI coach for a tip, a small summary derived from this information is sent — including which weekday you log as your injection day, how many days it has been since then, whether you do resistance training, your protein target, how consistently you have hit it over the past week, and the single symptom you have logged most often. That summary carries no name, email, or account, and we do not store it. Section 4 describes it in full. If you never use the AI coach, nothing from this section leaves your phone. If you have Apple's iCloud Backup turned on for your iPhone, your device backup — which Apple encrypts — may include this app's data, the same as any other app; that is Apple's backup of your phone, not a copy we hold or can access. You log your injection day yourself; the app never recommends, calculates, or adjusts a dose.

2. Account information (there is no account)

Myokeep does not have accounts. There is no sign-up or sign-in, and we do not collect your name or email address. You can use the whole app without telling us who you are.

3. Subscription information

Myokeep is a paid subscription. Purchases are handled by Apple's App Store, so Apple processes your payment — we never see your card details. Whether your subscription is active is verified on your device by Apple's StoreKit. When you scan a meal, your phone also sends the receipt Apple issued to our server, so it can confirm the same thing before running the scan — we keep a scrambled, one-way value derived from it to count your scans against the daily limit, and it stops being accepted after about a day. We don't use a third-party subscription service.

4. AI features: coaching tips and meal photos

If you ask the in-app coach for a tip, the app sends a small summary — your protein target, the average percent of target you hit over the past week, one symptom category from the fixed list, and which weekday you inject — plus a random identifier not tied to your name or email, used only to enforce a daily limit. Two of those are words rather than numbers, which is why we describe the summary this way rather than calling it figures. Never sent: your name, your email, or your raw food entries.

Meal photos. If you use the meal-photo scan, the photo you take or choose is sent to our server and on to Anthropic, which estimates what food is on the plate and returns a list you can edit before anything is logged. We do not retain it — it is in our system only while the estimate is produced, whether the scan succeeds or fails, and we never write it to a disk, a database, or a log. A small thumbnail is saved on your phone so the entry has a picture beside it; "Delete all my data" removes it.

Before it leaves your phone, Myokeep redraws the picture into a new file. That removes the information a camera attaches, including the GPS coordinates of where it was taken. It cannot remove what is in the photograph — a face, a label, a recognisable place — which is why the app asks you to photograph the food and nothing else.

A meal photo is sensitive, and we handle it accordingly. Myokeep is used by people managing their weight on GLP-1 medication, so a picture of your meal can say something about your health. You are never required to send one: every meal can be logged by hand, and the app asks for your agreement before the first photo is ever sent. The estimate is an estimate — educational information, not medical or dietary advice.

We do not use your data to train AI models. Anthropic processes each request only to produce your result, and may hold it briefly for security and abuse monitoring before deleting it; that is described in their own policy, and we do not control their systems.

5. Technical information our backend processes

Our backend runs on Cloudflare, which processes standard technical data such as your IP address and request information when your app talks to our servers. Our servers store per-day counters used to enforce the daily limits — one keyed to the random coaching identifier, and, if you scan meals, one keyed to a scrambled one-way value derived from your App Store receipt. Both are minimal and short-lived: a scrambled value and a number, with no name, email address or payment detail attached, and the value derived from your receipt stops being accepted after about a day. We do not combine them with your IP address to identify you.

Separately, this website (myokeep.ai) uses privacy-first, cookieless analytics we run ourselves on Cloudflare. For each page view we record the page's address on our site, the domain of the site that referred you (not the full link or any search terms), an optional campaign tag, and a random browser identifier — never your name, email, or any health data. Your IP address is kept only as a one-way hash to filter out bots. We use this solely to see which pages resonate and which search engines and AI answer engines send people to us.

6. Service providers

We share the limited information above with providers who help us run Myokeep, each only for its stated purpose: Apple (App Store payments; and, if you enable it, Apple's own encrypted backup of your device), Cloudflare (runs our backend; a meal-scan photo passes through it on its way to the AI provider, and it processes standard technical data such as your IP address), and Anthropic (the AI model — the summary described in section 4 for a coaching tip, and the photograph itself for a meal scan). We do not sell your personal information or share it with advertisers or data brokers.

7. How we use information

To keep your subscription working, provide AI coaching tips, operate and secure the service, and meet legal obligations. We do not use your health logs for any of this — they stay on your device.

8. Data retention

Your health logs remain on your device until you delete them — we have no copy to retain. Because there is no account, we hold no name, email address, or payment details. We do keep a scrambled, one-way value derived from your App Store receipt together with per-day counts, so we can enforce the daily limits. Neither carries your name, email address or payment details, and the value derived from your receipt stops being accepted after about a day. We do not keep your meal photos at all.

9. Deleting your data, and legal requests

You can delete the data on your device any time from Settings → Delete all my data in the app. That removes your logs, your saved meal-photo thumbnails, and the app's record that you agreed to scanning.

There is nothing on our servers we could look up for you, and we want to be straight about why: we have no account, no name and no email address, so we cannot connect a request to a person. What we hold is a scrambled value that stops being accepted after about a day, and a count. If you have a question about any of it, contact [email protected].

Legal requests. We may have to disclose information we hold if the law requires it. Because we do not keep your photo, we cannot produce one. Our AI provider may hold a request briefly for security monitoring; during that time it is subject to their policies and to legal process directed at them.

10. Your privacy rights

Depending on where you live (including the EU/UK under GDPR and California under the CCPA/CPRA), you may have rights to access, correct, export, or delete personal information, and to object to or restrict certain processing. Because your health logs are on your own device and we hold no account for you, this is already almost entirely in your direct control; if you have a question about anything we do hold, contact [email protected]. We do not sell or "share" personal information for cross-context behavioral advertising.

11. Security

Your health data is protected on your device by iOS, and by Apple's encryption in your device backup if you use one. Connections to our backend use HTTPS. Coaching requests are reduced to the small summary described in section 4 before any model sees them, and carry no name, email or account. A meal scan sends the photograph itself, with the camera's metadata removed, and we do not store it. No method is perfectly secure, but we design to keep your health logs off our servers entirely.

12. International users

Myokeep is operated from the United States, and our providers may process data in the United States and other countries.

13. Children's privacy

Myokeep is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information.

14. Changes to this policy

If we make material changes, we will update the effective date above and, where appropriate, notify you in the app.

August 2026. We added the meal-photo scan and updated this policy to describe it. We also corrected our description of what the AI coach sends: it includes one symptom category and which weekday you inject, which our earlier wording described as anonymous numbers only. Neither has ever included your name or email address, because we do not have them.

August 2026, later the same month. We removed the barcode lookup from the app, and with it the section of this policy that described it and Open Food Facts from our list of service providers. That leaves one fewer thing sending anything off your phone: apart from an optional coaching tip or meal scan, nothing does. We also finished the correction above — section 4 had still opened by calling the coaching summary "anonymous, aggregated numbers" while listing a symptom among them, and a symptom is a word, not a number.

15. Contact

Questions about this policy or your data: Verus Trade LLC · [email protected].