Privacy Policy

The short version

• No account, no ads, no analytics, no tracking. We have no server that receives your data.
• Your profile, food log and custom foods are stored on your iPhone. If you allow it, protein is written to Apple Health and body data is read from it, on your device.
• AI features use Apple Intelligence. Sentences you type are read on your iPhone. Meal and label photos (Gram Slam Plus) may be processed by Apple's Private Cloud Compute, which doesn't store them, unless you turn on Use on-device only in You → Privacy. Nothing you type or photograph is ever sent to us or to any other AI service.
• Besides those photos, the only data that leaves your iPhone because of Gram Slam is a barcode number you scan or type, or a product name you choose to search for, sent to Open Food Facts to look the product up.
• Gram Slam never stores your photos.

Who is responsible

Gram Slam is made by Cronian Labs, a brand of QWERTY ROCKET INTERNET SRL, Calea Floreasca 60, et. 6, Sector 1, 014462 Bucharest, Romania ("we", "us"). For anything about this policy or your data, email cronian.labs@mafteianu.com.

Because the app keeps your data on your device, in most cases we never receive it and cannot see, access or delete it ourselves. The sections below explain exactly what happens where.

1. Data stored on your iPhone

Gram Slam stores the following in a private, shared app container on your iPhone (an "App Group" used by the app and its widgets so they show the same numbers):

• Your profile: weight, height, age, sex, goal, training, diet pattern, allergens, favourite foods, and your answers to the life-stage and safety questions (for example GLP-1 medicine use, pregnancy or breastfeeding, kidney disease, a protein limit from a clinician, an inborn metabolic disorder, or an eating-disorder history). These answers are used only to size or switch off your protein target.
• Your daily protein targets, food log, usual portions, custom foods (including products you looked up by barcode or found by name on Open Food Facts), streak and milestones, and app settings.
• Whether you have Gram Slam Plus (a cached hint; the authoritative answer always comes from Apple's StoreKit on your device).

This data is protected by iOS file encryption and is not sent to us. It is included in your own iPhone backups (iCloud Backup or a computer backup) if you use them; those backups are controlled by you and Apple, not by us.

2. Apple Health

Apple Health access is optional and you choose it in the iOS permission sheet. You can change it any time in the Health app (your profile picture → Apps → Gram Slam) or in Settings → Privacy & Security → Health.

Health data is read and written on your device. We never receive it, never use it for advertising, marketing or data mining, never sell it, never share it with third parties, and never store it in iCloud ourselves. (If you have turned on Health sync in iCloud, Apple syncs your Health data under Apple's own privacy policy.)

3. AI (Apple Intelligence and Private Cloud Compute)

When you type or dictate a meal ("two eggs and a scoop of whey"), Gram Slam first reads it with its own rules on your iPhone. If something is left unclear, and your iPhone supports Apple Intelligence, it asks Apple's on-device Foundation Models to name the foods. Sentences are always read entirely on your iPhone. Dictation uses the iOS keyboard's microphone, under Apple's dictation settings.

To name the foods in a meal photo, or to read a nutrition label its own rules couldn't (Gram Slam Plus, iOS 27), Gram Slam sends the photo to Apple's Private Cloud Compute, Apple's larger Apple Intelligence model, when it is available on your iPhone. Private Cloud Compute is run by Apple: Apple processes the photo only to answer the request and doesn't store it, and neither we nor anyone else can access it. If Private Cloud Compute isn't available (no connection, daily limit reached, or slow), the on-device model reads the photo instead. Turn on Use on-device only in You → Privacy to keep every photo on your iPhone; reading may then be less accurate.

Either way, the AI only names the foods and copies what's printed. The grams of protein come from the label's protein row (read by text recognition on your iPhone) or from Gram Slam's built-in food list, never from the AI.

4. Barcode lookups and product searches (Open Food Facts)

When you scan or type a barcode for a product Gram Slam hasn't seen before, the app sends the barcode number to Open Food Facts, a non-profit, open food database based in France, and gets the product's name and nutrition back.

When a food isn't in Gram Slam's own list and you tap Search Open Food Facts, the app sends the name you searched for (for example "Protein pizza") to Open Food Facts' search service and shows the matching products. Typing in the search field alone sends nothing: Gram Slam searches its own list on your iPhone, and asks Open Food Facts only when you tap that button.

• The request contains the barcode number or the search text, your iPhone's language code (for example "ro", so local product names match) and a fixed app identifier (the "User-Agent", e.g. GramSlam/1.0 (iOS; com.cronianlabs.gramslam)), the same for every user. It contains no account, no device or advertising identifier, no name and no Health data.
• Like any internet connection, it also reveals your IP address to Open Food Facts as ordinary connection metadata. Open Food Facts processes it under its own privacy policy (which describes keeping server logs for security and technical analysis). Open Food Facts acts as an independent controller of that data; we have no access to it.
• A product you choose to log (or pick from search results) is saved on your iPhone as one of your foods, so scanning or finding it again doesn't send anything.
• We don't run a server, so we keep no log of your lookups. In Apple's App Store privacy label we declare this as "Search History, not linked to you, used for app functionality".

Legal basis (GDPR): sending the barcode or search text is necessary to provide the lookup you asked for (Art. 6(1)(b)), and is in our legitimate interest in offering product lookup (Art. 6(1)(f)). You can avoid it entirely by adding foods by hand or from a nutrition label.

5. Camera and photos

Gram Slam uses the camera only when you open it: to scan a barcode, to read a nutrition label, or (Gram Slam Plus) to name the foods in a meal photo. You can also pick a photo with the iOS photo picker, which gives the app only the photo you choose, not your library. Images are processed on your iPhone (Apple's VisionKit, Vision text recognition and Apple Intelligence). For Plus meal photos and labels the rules couldn't read, the photo may also be processed by Apple's Private Cloud Compute as described in section 3, unless Use on-device only is on. Images are never stored by the app and never sent to us. Only the result you confirm (for example a food name and its protein per 100 g) is saved.

6. Notifications

If you turn on the optional evening check-in, Gram Slam schedules a local notification on your iPhone. There is no push server; nothing about your day is sent anywhere to decide whether to remind you.

7. Purchases (Gram Slam Plus)

Subscriptions and the lifetime purchase are sold and processed by Apple through the App Store. We never see your name, Apple Account, payment card or address. The app checks your entitlement with Apple's StoreKit on your device. Apple may share limited, anonymous sales and transaction reports with us as the developer under Apple's own terms. Apple's handling of your purchase data is described in Apple's Privacy Policy.

8. What we don't do

• No accounts or sign-in.
• No analytics, crash-reporting or advertising SDKs, and no third-party SDKs at all.
• No tracking across apps or websites, no advertising identifier, no data brokers.
• No selling or sharing of personal data.
• No location access, contacts, microphone (beyond the keyboard's dictation) or medication data.

If you share crash data with developers in iOS settings, Apple may pass anonymous crash reports and diagnostics to us through Xcode or TestFlight. They contain no Health data or food log. If you join a TestFlight beta, Apple shares the feedback you choose to send and basic tester details under TestFlight's terms.

9. When you contact us

If you email us, we receive your email address and whatever you write, and use it only to answer you (GDPR Art. 6(1)(b) and (f)). We keep support email for up to 2 years after the conversation ends, then delete it, unless the law requires otherwise. Please don't send Health data unless you need to.

10. This website

This website uses no cookies, analytics or trackers. The hosting provider, Cloudflare (Cloudflare Pages), processes your IP address and standard request data to deliver the page and protect the service, under its own privacy policy.

11. Keeping and deleting your data

• Delete a log entry: swipe it on Today or in History, or open it and tap Delete entry. Its Apple Health sample is removed too.
• Erase everything in Gram Slam: You → Erase all data. This deletes the profile, log, foods and settings stored on your iPhone.
• Remove what Gram Slam wrote to Apple Health: in the Health app, tap your profile picture → Apps → Gram Slam → Delete All Data from "Gram Slam". (Erase all data in the app leaves Health untouched, so you decide.)
• Delete the app: deleting Gram Slam (and its widgets) removes its on-device data; older copies may remain in your own device backups until they are replaced.

12. Your rights

If you are in the EU, the EEA, the UK or another place with similar laws, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. Because Gram Slam keeps your data on your device, you can exercise most of these rights directly in the app (edit your profile, delete entries, erase all data) and in the Health app. For data we do hold (support emails), write to cronian.labs@mafteianu.com and we will answer within one month. For data held by Open Food Facts or Apple, contact them directly.

You also have the right to complain to a data protection authority, in particular in the country where you live or work. Our lead authority is Romania's ANSPDCP (www.dataprotection.ro).

Health-related answers (such as pregnancy, kidney disease or GLP-1 use) are special-category data under the GDPR. Gram Slam processes them only on your device, only because you chose to enter them, and only to adjust your protein target; we never receive them.

13. International transfers

We don't transfer your data, because we don't receive it. Barcode and product-search requests go to Open Food Facts in France (EU). Photos processed by Private Cloud Compute are handled by Apple under Apple's own terms and privacy policy. Apple processes App Store purchases under its own terms.

14. Children

Gram Slam is intended for adults. It is not directed to anyone under 18, and the app does not set a protein target for anyone who says they are under 18. We don't knowingly collect personal data from children; if you believe a child has contacted us, email us and we will delete the message.

15. Medical disclaimer

Gram Slam provides general wellness guidance, not medical advice, and doesn't diagnose, treat or prevent any condition. If you have a health condition, ask your doctor or dietitian about protein.

16. Changes

If we change how Gram Slam handles data (for example adding a feature that sends something off your device), we will update this page and its effective date before the change ships, and tell you in the app when the change is significant. We will never start collecting more data without saying so first.

Contact

Cronian Labs (QWERTY ROCKET INTERNET SRL), Calea Floreasca 60, et. 6, Sector 1, 014462 Bucharest, Romania
Email: cronian.labs@mafteianu.com