Privacy Policy

WeighTooMuch is a small app run by one person through WeighTooMuch LLC, and not something that sells or shares data with anyone. It runs on a server that person manages themselves, rather than on a big platform. This page explains, plainly, what's collected and what happens to it.

What's collected

Only what the app needs to actually work:

• Username, email address, and a securely hashed password (never the password itself — see "How it's protected" below)
• An optional first name, if you give one, used only to greet you on the Home screen
• Food entries you log: name, brand, calories, macros, micronutrients (such as fiber, sodium and sugars) where the food data includes them, date, and meal
• Body measurements you log: weight, body fat %, and date
• Goals you set: calorie and macro targets
• An optional profile picture, if you choose to upload one
• Your timezone and reminder preferences, if you enable notifications
• A push notification subscription token, only if you enable notifications on a device — used solely to deliver reminders you asked for

Health data

The weight, body fat %, and food/nutrition entries you log are health data, and this app treats them with that in mind — not just as generic numbers. They're never used for anything beyond showing your own history back to you and computing your own goals; never analyzed, profiled, advertised against, or shared with any third party, including for research or "anonymized" aggregate use. The same access, protection, export, and deletion rules described on this page apply fully to this data — nothing about it is treated more loosely because it's less sensitive than your login credentials. It isn't: it's more sensitive, and is handled accordingly.

What it's used for

Entirely to power your own account's own features: showing your own totals, trends, and history back to you, and sending reminders you've explicitly turned on. Nothing here is used for advertising, and nothing is sold or shared with any third party.

No tracking, no analytics, no ads

There is no advertising in this app, no third-party analytics or tracking scripts, and no cookies beyond the one required to keep you logged in. Nothing about your usage is sold or shared with anyone.

Who can see it

Your food log, your weight and measurements, your goals and your profile picture are visible only to you, and to the app's operator, only when needed to help with your account. Never anyone else.

Face ID and Touch ID

If you turn on the app lock in the iPhone app, unlocking uses Face ID or Touch ID. Your face or fingerprint is never sent to this app, and never leaves your phone. iOS checks it and tells the app a simple yes or no — nothing biometric is collected, transmitted or stored here, and there would be nothing to hand over even if someone asked.

The companies the app relies on

Like any web app, this one runs on infrastructure rented from other companies. They are paid suppliers, not partners: none of them is given your data for their own purposes, none of them sells or analyses it, and none of them is an advertiser or a data broker. Being complete about it:

• The server it runs on is rented. The database lives there, so the hosting company physically holds it, in the same way a landlord holds a building.
• Traffic passes through a security and delivery network (the thing that gives the site its HTTPS padlock and keeps it reachable).
• Email is sent through a delivery provider — verification links, password resets and the reminders you turn on. That provider necessarily handles your email address and the contents of those specific messages. It is not given your food log, your weight, or anything else.
• Backups are encrypted before they leave the server, then stored with a separate company. That company holds a scrambled file it cannot read: the key never leaves the app's own systems. This is deliberate — backups are the copy that travels furthest, so they are the copy that gets the strongest protection.
• "Double-check with [brand]" uses an AI service. When you tap it, the food's name and brand (for example "Frontega Chicken Panini, Panera Bread") are sent to Anthropic's Claude, which looks up the restaurant's or maker's own published nutrition. Nothing about you is sent: not your name, your email, your food log or your weight.

If you would rather not have your data on rented infrastructure at all, that is a completely reasonable position — but it means no web app, not just this one.

The one exception is the shared product database, and it never includes anything personal. When you scan a barcode for a product the app doesn't have yet and fill in its nutrition details, that product — its name, brand and nutrition figures — is added to the food database so that anyone scanning the same barcode can find it. Your name is not attached to it, and no one can tell who added it or that you ate it. The same goes for a Verified food: when you confirm a brand's own numbers after a double-check, they're added for everyone, with the source and date but never your name.

Foods you type in without scanning a barcode — your own recipes, leftovers, a meal someone cooked for you — stay private to you and are never shown to anyone else.

How it's protected

• Passwords are never stored in plain text — only a one-way, salted hash (scrypt) that can't be reversed back into your real password
• All traffic is encrypted (HTTPS) end to end
• Nightly backups are encrypted before being stored off-site
• Only your own account's data is ever shown to you — every request is checked against your logged-in identity

Your data, your control

You can export everything you've logged as a CSV file at any time from Settings. You can permanently delete your account and everything in it yourself, without asking anyone — also from Settings. Deletion is immediate and can't be undone.

Data retention

Your data is kept for as long as your account exists. Deleting your account removes it immediately from the live system; it may persist briefly in encrypted backups until those backups naturally roll off (kept 30 days).

Children

This app isn't directed at children. You must be at least 14 years old to create an account, and the app checks your date of birth during setup.

Changes

This policy may be updated as the app changes. Continuing to use the app after a change means you accept the updated policy. See also the Terms & Conditions.