BoloPrivacy Policy
Effective September 29, 2026
The short version.
Bolo collects what it needs to track your food: your sign-in email or phone number, what you tell it about yourself and your goals, and the meals, photos and messages you send. We use that to run Bolo for you. We don’t sell it, we don’t use it for ads, and neither we nor the AI providers we use train AI models on it. You can export it or delete it at any time.
Who we are
Bolo (“Bolo”, “we”, “us”) makes the Bolo app and this website, textbolo.com. Questions about this policy or your data: privacy@textbolo.com.
What we collect
- Account details: the email address or phone number you sign in with. If you use Sign in with Apple or Google, we receive the email address they share with us (Apple lets you hide your real one).
- What you tell Bolo about yourself: your first name, your goal, your daily calorie and macro goals, units, and, only if you choose to give them, your age, sex, height, weight and activity level.
- Your food log: photos you choose to send, descriptions and messages you type, barcodes you scan, and the estimates, corrections and edits that result, with their dates and times.
- Onboarding answers: your answers to the first-run questions (for example what matters to you, whether you’ve tracked food before, how you heard about Bolo), which version of those questions you saw, and whether you allowed camera and photo access.
- Technical information: your device’s time zone (so your days start at midnight), the app version, and standard server logs such as IP address and request times that our hosting providers keep for security and debugging.
- Early-access sign-ups: if you join the waitlist on this website, your email address.
We don’t collect your location, contacts, or anything from your photo library other than the photos you pick. The app has no advertising and no third-party analytics or tracking SDKs, and this website sets no cookies.
How we use it
- To run Bolo: estimate your meals, keep your daily totals, goals, history and streaks, and answer your messages.
- To sign you in and keep your account secure, including sending one-time sign-in codes.
- To improve Bolo in aggregate, for example comparing how two versions of the onboarding questions perform. We look at patterns, not at your individual meals.
- To contact you about your account or, if you joined the waitlist, to invite you to Bolo. No marketing email unless you ask for it.
- To prevent abuse and meet legal obligations.
Photos, AI and training
To estimate a meal, the photo or text you send is passed to an AI model through OpenRouter, which routes it to a model provider. We configure every request so it may only go to providers that don’t store or train on what they receive. We don’t use your photos, messages or logs to train AI models, and we don’t let anyone else do so. Estimates are only estimates: see the Terms.
Who processes your data for us
We use a small number of service providers who handle data only on our instructions and only to provide their service:
| Provider | What for |
|---|---|
| Supabase | Database, private photo storage, and sign-in (including sending email codes) |
| Railway | Hosting the Bolo server |
| OpenRouter and the model providers it routes to | Estimating meals from photos and text (no retention or training, as above) |
| Twilio | Sending sign-in codes by text message |
| Apple, Google | Only if you choose Sign in with Apple or Google |
| Vercel | Hosting this website |
If we add a paid plan, purchases are handled by Apple through the App Store; we never see your card details.
What we don’t do
We don’t sell your personal information, share it for cross-context behavioral advertising, or give it to data brokers. We’d only disclose it if the law requires it, to protect someone’s safety, or as part of a merger or acquisition, in which case this policy would continue to apply and we’d tell you first.
How we protect it
Data is encrypted in transit (HTTPS) and at rest. Photos live in private storage and are only ever shown through short-lived links to your own account. Access to production systems is limited to the people who run Bolo.
How long we keep it
We keep your data while your account exists. Deleting a meal deletes its photo. Deleting your account (Settings → Delete account) permanently removes your profile, meals, photos, messages and sign-in identity from our live systems right away; copies in our providers’ encrypted backups roll off within 30 days. Waitlist emails are kept until you ask us to remove them or we no longer need them.
Your choices and rights
- Access and export: Settings → Export my data gives you every entry as a CSV file.
- Correct: edit any meal, your name, your goals and your answers in the app.
- Delete: delete a meal, or your whole account, in the app, or email us.
- Permissions: camera and photo access are optional and can be turned off in your phone’s settings; you can still log by describing meals or scanning barcodes.
Depending on where you live (for example California, the EU or the UK), you may have further rights, such as to object to or restrict processing or to complain to a regulator. Email privacy@textbolo.com and we’ll respond within 30 days. We won’t treat you differently for exercising them. Where the law asks for a legal basis, we rely on performing our contract with you (running Bolo), your consent (optional details and permissions, which you can withdraw), and our legitimate interest in keeping Bolo secure and improving it.
Health information
What you eat and details like your weight are personal. We treat them as sensitive: they’re used only to run Bolo for you, never for advertising. Bolo is not a medical service or a healthcare provider.
Children
Bolo isn’t meant for children under 13, and we don’t knowingly collect their data. If you believe a child has given us information, email us and we’ll delete it.
Where data is processed
Bolo’s providers process data in the United States and the European Union. If you use Bolo from elsewhere, your data will be transferred there, with the protections described in this policy.
Changes
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect. The date at the top shows the latest version.