Last updated 15 November 2026

Consumer health data notice

What you log in Hourgrain, what you eat and what you weigh, is health data. Several US states, including Washington, Nevada and Connecticut, give you specific rights over it. This notice explains how Hourgrain handles it. It applies wherever you live, and sits alongside our privacy policy.

Who is responsible

Oshan Mudannayake, trading as Latenari (a trading name, not a registered company), based in Sri Lanka. Contact: [email protected].

The health data we collect

Food and drink you log, with amounts, times, calories, macronutrients and other nutrients.
Your body weight, body fat and other body measurements you record, their history and the weight trend worked out from your weigh-ins.
Your latest visual body-fat estimate, if you enter one, with its date and chosen illustration reference. This is a rough personal estimate, separate from scale readings, and does not change your calorie or macro targets.
Your sex, age, height, activity level and goal, used to estimate your energy expenditure.
The expenditure estimates and calorie and macro targets Hourgrain calculates for you.
Notes you add to a day or a meal, which may describe how you felt or what you ate.
Meal, label and recipe photos, and descriptions you type, when you choose to have AI read them and the feature is enabled.
Private progress photos you choose to save when storage is enabled, never shared with your household or sent to AI.
When AI is enabled, task/model/token/status and estimated-cost metadata for 90 days or until account deletion, without photos, prompts or answers. Monthly allowance totals keep the current UTC month and previous three months; deleting a household member leaves only aggregate counts, and deleting the sponsor deletes its allowance bucket.

Where it comes from

From you, as you use the app. From Apple Health on iPhone or Health Connect on Android, only if you allow it: the app reads your weight and body fat readings (from a smart scale, say) and adds them to your weigh-ins. When Steps is on, it also reads today's step count for Progress; the latest count stays on your phone, is never sent to us, and is cleared when you sign out. If you turn it on, it also writes the foods you log (as energy and macros) and the weigh-ins you type to Apple Health or Health Connect on your phone, where Apple's or Google's own rules apply to them. From members of your household, only if you let them log meals for you. Nutrition values for packaged foods come from Open Food Facts, a public database, and are not about you.

When meal-photo storage is enabled, a private copy lets you read a meal again for seven days from upload reservation. Delete after reading removes the stored copy before reading, including failed readings, and erases older saved meal photos when the setting syncs. Access ends at seven days; background deletion retries during storage outages. Re-analysis does not extend that deadline. Recipe and label photos remain transient. Progress photos stay until you delete them or your account. Account deletion erases stored photos before succeeding.

Why we collect it

Only to provide Hourgrain to you: to show your diary, work out your trend and expenditure, set your targets, sync between your devices, and share with the household you choose. We also count across accounts how many people sign up and keep logging, as totals without anyone's name or health records. We never use it for advertising, and we never sell it.

Who it is shared with

Our service providers, who process it only on our behalf: Google Cloud and Neon (hosting and the database, in Singapore), and Google Cloud Vertex AI (global processing, only for photos, descriptions or recipe text you choose to have read). Provider caching and abuse-monitoring retention may apply as explained in the privacy policy. The full list is in the privacy policy.
People you choose: members of your household see the foods and batches you share and, if you allow it, can log meals for you. Shared batches show their remaining amount without identifying who ate each portion. Private progress photos are not shared.
Apple through Siri, when you invoke a shortcut or allow saved-budget replies: the amounts you supply or the saved date and energy/protein budget described below.
Google Assistant, when you enable the optional Android spoken budget feature: the saved date and energy/protein budget text described below. Android widget hosts you select can also display your normal home widget under system permissions.
Authorities, only when the law requires it.

We do not sell consumer health data, and we will never sell it.

If you add the iPhone home widget, Hourgrain shares only your saved energy and protein budget text, diary date, language and expiry with its widget extension through a private on-device container. It shares no account identity, credentials, diary rows, photos or body measurements through this feature, and ordinary widget refreshes send no data to Google or Siri. The budget text supports the system's sensitive-content redaction.

Open Hourgrain after adding the widget and to refresh it. The timeline replaces expired numbers with an Open app prompt at the next diary-day boundary; iOS controls when rendered views update. Invalid or expired stored copies are removed on the next access. Signing out clears the snapshot; removing the last widget clears it on the next app refresh unless Siri budget answers remain enabled. A previously rendered system copy can remain until iOS updates it.

Siri shortcuts and saved-budget replies

On iPhone, Siri shortcuts can open Log food or prepare water, calories or weight for review in Hourgrain. Apple receives amounts you supply when you invoke those shortcuts. Nothing is recorded until you save in the app. Apple may extract anonymized static shortcut phrases, titles and descriptions to improve App Shortcuts; that metadata contains no diary data.

Spoken budget answers in Siri is a separate choice in Privacy, off by default and independent of the Google Assistant choice. If enabled, Siri can read only your unexpired saved date and energy/protein budget after local device authentication. It performs no fresh diary or Health lookup. Open Hourgrain to refresh. Turning it off removes speech and any copy kept only for speech on the next app update; a home widget can keep its display copy. Sign-out clears the cache, and changes on another device apply after sync. Replies already handed to Apple may finish and cannot be retracted. Apple handles requests and replies under its policies. This choice controls saved-budget replies, not all Siri requests you explicitly invoke. Availability depends on Siri support.

Android widgets and spoken budget answers

The Android home widget shows a saved date and your remaining calorie or energy and protein budget. Android widget hosts you select can display it, including Google Assistant when you ask to show the widget. The separate spoken budget feature is off by default. If you enable Spoken budget answers in Privacy, Google Assistant can receive that dated budget text to display and speak when its budget widget is in use. It receives no diary rows, names, notes, photos, body measurements or Hourgrain credentials through this feature. Google's Widgets Extension library may collect client-app metadata for adoption, version and feature use. Google handles the response under its own policies.

Open Hourgrain to refresh the snapshot. The copy on your phone expires at the next diary-day boundary and is removed on the next refresh or render. Turning spoken answers off removes the speech text and any cache kept only for that feature; an independently added home widget keeps its display snapshot. Signing out clears both. Changes from another device take effect after this phone syncs. A reply already given to the system or Google can finish and cannot be retracted by clearing the phone's cache. Availability depends on Google Assistant support.

We collect and use your health data only with your consent, which you give when you create your account. You can withdraw it at any time by deleting your account in Settings, which deletes the data too.

When you delete your account, Hourgrain attempts to remove Apple access using its saved encrypted credential. Missing older credentials, unavailable keys or an Apple service failure do not stop local account deletion. If you used Apple sign-in, remove Hourgrain in your Apple Account settings if it is still connected after deletion. Turning off Apple sign-in inside Hourgrain only disables that sign-in method.

Your diary, photos and health records are not sent to Paddle, Apple or Google for subscription billing. Paddle receives a selected price and random checkout identifier from Hourgrain; buyer and payment details are entered directly in its separate checkout. Deleting your Hourgrain account immediately cancels its recurring web subscription and unpaid web checkout; deletion waits for retry if Paddle cannot confirm cancellation. Account deletion does not cancel a store subscription; manage or cancel it in that store separately.

iPhone backups

The Hourgrain iPhone app requests that iOS exclude Hourgrain's on-device health data and saved budget from device backups. Synced records can be downloaded again after sign-in. Changes made offline that have not reached the server may be lost if the phone is lost or erased, so do not rely on a device backup to recover them. iOS controls backup and restore behavior; this request is not a guarantee that no copy appears in a backup or restored device, and it does not remove older backup copies.

Your rights

Know and access the health data we hold and who we have shared it with. You can export all of it yourself from Settings, Your data.
Delete it, in the app (single entries, or your whole account), or by asking us. Deleting your account removes your data from the live database at once, and from recovery copies within 30 days.
Withdraw consent, by deleting your account.
Not be discriminated against for using any of these rights.

To use a right without the app, email [email protected] from the address on your account, so we know the request is yours. We answer within 45 days, and usually within a few days.

Appeals

If we turn down a request, we'll say why. You can appeal by replying with "Appeal" in the subject line, and we'll give you a written answer within 45 days. If you're still not satisfied, you can contact your state's attorney general; in Washington, that is the Washington State Office of the Attorney General.