Last updated 10 September 2026
The short version. Your health data — doses, weight, meals, symptoms — is stored on your iPhone and, if you have iCloud switched on, in your own private iCloud account. We cannot see it. We do not have servers holding your history, we do not sell anything to anyone, and there is no account to create.
Everything you log lives in the app's own storage on your iPhone: your profile (height, weight, goal, age, sex at birth, medication and dose), your dose history, meals, weight and body measurements, and your symptom check-ins.
If you are signed in to iCloud, this data also syncs through Apple's CloudKit to your own private iCloud database, so it survives a new phone. That data belongs to your Apple Account. We have no access to it — not the developer, not anyone else.
You can export all of it at any time from Profile → Export Everything, and delete it by deleting the app.
| What | Where it goes | Why |
|---|---|---|
| Meal photos (Plus feature) | Sent over an encrypted connection to our relay on Cloudflare Workers, which passes the image to Google Gemini for analysis | To read the food on the plate and estimate protein, fiber and calories. The photo is processed and returned in the same request. Our relay does not store the image, and we do not keep a copy. |
| Anonymous usage data | Google Firebase Analytics | Which screens are opened and roughly how long they are used, so we know which parts of the app are confusing. It is not linked to a name, an email, or your health data. |
| Purchases | Apple | Subscriptions are handled entirely by Apple. We never see your payment details. |
Your health data is never sent to Gemini, to Firebase, or anywhere else. Only the meal photo you deliberately take is transmitted, and only when you use photo logging.
Protein First is not directed at children and is not intended for anyone under 17. We do not knowingly collect data from children.
Because your health data never reaches us, there is nothing for us to hand over or delete on your behalf — you already hold all of it, and deleting the app removes it from the device. If you would like your anonymous analytics contribution removed, or have any other privacy question, email ataberkty@gmail.com and we will handle it.
If this policy changes in a way that affects what leaves your device, we will update this page and the date at the top.