Privacy Policy
Bit by Bit is a personal progress companion. This page describes what the app collects and how it is used.
What we collect
- Your login identifier (email or phone) and a hashed password
- First name and profile details you choose to provide (date of birth, sex, height, timezone, optional ZIP, focus areas, optional additional details, activity level when set)
- Body measurements you record (weight and optional circumferences)
- Food, exercise, check-ins, meal ratings, goals, conversations, and Learned Context
- Checkpoint photos you upload or take
- Generated reports and app or AI feedback
- Session cookies used only for authentication. Bit by Bit does not use advertising or tracking cookies.
An optional ZIP is a home location you type in so Allie can make local suggestions, such as weather or restaurant choices. We do not record your GPS locations.
AI processing
When you choose an AI feature, Bit by Bit sends information relevant to that request to an external AI service to generate the response. Depending on the feature, this may include your question, relevant profile and goals, recent body, food, or exercise information, Ask Allie conversation from about the last 7 days, Learned Context, and images included in that analysis. Meal estimate photos and Ask Allie chat photos you attach are sent for that request and are not stored as checkpoint photos. Ask Allie and calorie estimates may also look up current public information such as restaurant menus, nutrition facts, weather, and publicly available photos of foods or places, and may send those photos to the AI service for that request. Those public photos are not stored as checkpoint photos.
For checkpoint photos, Bit by Bit always prepares a separate analysis image from the original plus your current Crop and Hide edits. You preview that image as What will be analyzed. That prepared image may be sent to the external service. The stored original is not submitted as the AI request artifact. Hide does not make a photo anonymous. Processing is not on-device or entirely local.
Not every field is sent on every request. Context is shaped to the question.
AI diagnostic logs
Requests and responses may be retained by Bit by Bit and reviewed by the administrator for troubleshooting, prompt improvement, cost and quality review, and understanding poor responses. Logs may contain personal information included in that interaction. Retention is about 30 days through opportunistic cleanup during normal use, not a guaranteed exact-second wipe. Rolling JSON backups may hold earlier copies for about 14 days.
Admin access
The operator of the server may have technical access to stored files. The admin UI is least-privilege: account lists do not show weights, meals, feelings, photos, or workouts. AI Diagnostics is a separate intentional function.
Third parties
When you use an AI feature, an external AI service processes that request. The web host stores application files.
Security
Passwords are stored as hashes, not plaintext. Private data is meant to sit outside the public web root. HTTPS is required in production. We do not claim that data is never accessible or 100% secure.
Export
You can export your Bit by Bit data as JSON or an archive. Exports do not include password hashes, secrets, admin data, other users, or AI diagnostic logs.
Retention
Account deletion is not available in this beta. Data is retained while the account exists, including if it is disabled. Ask Allie conversations are kept for about 7 local days, then removed. Learned Context is kept while the account exists. Backups may retain previous JSON for the backup window. AI logs are removed on a rolling window of about 30 days through opportunistic cleanup. Hosted public shares exist only while you keep the link active. Revoke Link makes that URL unavailable.