You sign in with Apple, with Google, or with an email address and password, all handled by Firebase Authentication. Nibble keeps your email address and the name you choose, to sign you in and recover your account. With Sign in with Apple you can hide your real email. A profile photo is optional: if you add one from your camera or your photo library, it is squared to 512 pixels and stored in your account (Firebase Storage), private to you. Removing it deletes it, and so does deleting your account. Nibble and Heft, its sister app for workouts, share this account, the profile photo included.
The food you log, water, weigh-ins, your targets and meal times, custom foods, recipes, and favourites are stored in your account so they sync between your devices. They are private to your account. Anything you log offline waits on your device until it can sync.
When you search for a food or scan a barcode, Nibble's server looks it up with Open Food Facts and USDA FoodData Central. Only the search text or the barcode number is sent, never who you are or what else you've logged. Results are cached on our server so the same lookup is faster next time.
If you log a meal from a photo (Nibble Plus), the photo is sent to Google Cloud's AI services to estimate what is on the plate and its nutrition. The photo is used only for that estimate and is not stored by Nibble, and Google does not use it to train its models.
Nibble Plus is sold through the App Store, and Apple handles payment; Nibble never sees your card. RevenueCat keeps a record of what you bought, linked to your Nibble account id, so your purchase works on all your devices.
If you connect an assistant such as ChatGPT or Claude to Nibble over MCP, it can read or log only what you approved, and Nibble keeps only a hashed record of that access so it can be revoked. Nibble also counts how many times your assistant calls it each day, and which tools it used, so the Assistants screen can show you how much you use it; that is counts and tool names only, in your own account, never what you asked or what the assistant replied. Heft, the sister app on the same account, counts its own the same way, and both are shown there side by side. One of the things you can grant an assistant is estimating a meal from a photo: the assistant sends the image to Nibble, which passes it to the same Google Cloud AI service the app uses, on the terms under Meal photos above. That is a photo leaving your device at the assistant's request, so grant that permission only to an assistant you trust. What you ask the assistant, and what it shows you, is handled by that assistant's own privacy policy. Disconnecting removes Nibble's record, and deleting your account removes the counts with everything else.
Nibble uses Google Analytics to count, anonymously, which screens and features get used, so we can see what helps and fix what doesn't. It records things like logging food (and whether by search, barcode, or photo), logging water or weight, reaching a streak milestone, or starting Nibble Plus, with a random id for your browser or device. It never includes your name, email, account id, the foods you log, or your weight. Each batch of events does carry your device’s IP address to Google, which uses it to work out an approximate location — the country — and does not store it; nothing finer than that is kept, and the address is not used to identify you. On the website nothing is measured until you choose Allow, and you can say no thanks. In the app it's on unless you turn off Share anonymous usage on the You tab, which also forgets that id. Advertising features and Google Signals are off, the data isn't used for ads or sold, and Google keeps it for 14 months.
Nibble sends email to your account address when your account needs it: a welcome when you join and a link when you reset your password. A weekly summary (plus a note when your streak reaches a milestone) and news arrive only if you turn them on, and every one of those emails has a link to unsubscribe. Email is sent through Brevo, which receives your address and the message. A message you send from the support page is emailed to us through Brevo and also kept in our own database: the address, topic and text you wrote, the name if you gave one, the user-agent string your browser or app sent, and your account id when you were signed in, so a question about your account can be answered. Nothing can read those messages back through the form. They are not deleted on a timer: one carrying your account id goes when your account is deleted, and one sent without signing in stays until we remove it.
On iPhone you can connect Nibble to Apple Health; it stays off until you turn it on. Nibble then saves the meals (energy, protein, carbohydrates, and fat), water, and weigh-ins you log to Health, and reads your weight, active energy, and whether you worked out today. What Nibble reads from Health stays on your device and in Apple Health: it is never sent to our servers, never used for advertising or marketing, and never shared or sold. The one exception is a weigh-in from another app that you choose to bring in with the Weight switch, which becomes an ordinary Nibble weigh-in in your account. You can change what Nibble reads and writes at any time in the Health app, or turn it off on the Apple Health screen in Nibble.
10
Notifications and reminders
Meal and water reminders are scheduled on your device and never pass through our server. Push notifications such as news are off unless you turn them on; while they are on, Nibble keeps your device's push token to send them, and deletes it when you turn them off or sign out. The camera is used only while you scan a barcode, photograph a meal, or take your profile photo, and only after you allow it.
Your data is stored with Google Cloud and Firebase in the United States and is encrypted in transit and at rest.
Nibble shares one account with Heft, its sister app for workouts. If your account is free and there has been no activity in Nibble or Heft for 90 days, it is deleted, together with its data in both apps. We email your account address 30 days and 7 days before, and opening either app keeps your account. Accounts with a Nibble Plus subscription, a lifetime purchase, or Plus from a friend code are never deleted for inactivity. Sparks you earned expire after 90 days without activity; Sparks you bought never expire. Purchase records stay with Apple and RevenueCat. You can delete your account yourself at any time from the Account screen.
You can delete your account from the Account screen in the app. That removes your profile, logs, custom foods, weigh-ins, and settings, and your Heft account and workouts too, since the two apps share one account. Purchase records are kept by Apple and RevenueCat as required for billing.
Nibble isn't directed at children under 13 and doesn't knowingly collect their data.
Nibble is not a medical device and doesn't give medical advice. Calorie targets, nutrition estimates, and weight forecasts are approximate. Talk to a doctor or dietitian before making changes to your diet, especially if you are pregnant or have a medical condition.
Ask anything about your data through the form on the
support page. If this policy changes, the date at the top will change with it.