Privacy
Last updated 11 September 2026Bonbon is a calorie tracker. It holds things about your body that you would not want loose. This page says exactly what it keeps, where that goes, and how to make it stop.
Bonbon does not sell your data, and shows no ads. Nothing here is shared with advertisers, data brokers or analytics networks, because there are none in the app.
What Bonbon keeps
Your account
You sign in with Apple. Apple gives Bonbon an identifier for you and an email address — if you chose Apple's Hide My Email, that address is a relay and Bonbon never sees your real one. You also pick a username and a display name, and may add a profile picture, a bio and, if you want to, a gender.
What you log
- Meals: name, portion, calories, protein, carbs, fat, other nutrients, notes, and the time.
- Weight and weigh-in history, your goal weight and pace, and the sex and activity level used to work out your targets. Your height and age are used for the same sum but stay on your phone.
- Water, fasts, supplements, and the stickers you have earned.
- Steps and active energy, if you connect Apple Health.
Photos
When you photograph a meal, the photo is sent to be analysed so the calories can be filled in for you, and stored against that entry so you can look back at it. The sticker cut-out is made on your phone. Photos you post, and photos you send in a conversation, are stored so they still show when you come back to them.
Photos are stored privately. They are served only through short-lived signed links, and only to people entitled to see them — you, the people a post is shared with, and for a conversation photo, the people in that conversation. Permission is checked against your live friendships and memberships every time a photo is requested, so removing a friend or leaving a conversation takes effect immediately.
Food search
When you scan a barcode, the barcode number is looked up in Open Food Facts directly from your phone, without your account or any identifier. Words you type to search for a food or describe an ingredient are sent to Bonbon's server to find a match; searches are not stored against you.
The social side
Friendships, posts you share, likes, comments, messages, squads, recipes, wishes and votes, blocks, and reports you send. Blocks and reports are kept so that they keep working and so abuse can be acted on.
Housekeeping
Sign-in tokens so you stay signed in, a push notification token for your phone if you allow notifications, a count of how many scans you have used, and whether you have an active subscription.
Apple Health
Bonbon reads steps and active energy from Apple Health, only after you allow it, and only to show your movement next to what you have eaten. It never writes anything back to Health.
Health data is never used for advertising or marketing, never sold, and never shared with any third party. Your step count is shown to friends only if you leave My steps switched on in Who can see. You can withdraw access at any time in the iOS Health app, and Bonbon carries on without it.
What other people can see
- Your weight and macros are Just me unless you change it. In Settings → Who can see you choose, stat by stat, whether your squad, your friends or everyone can see your streak, steps, weight and macros. Just me means exactly that.
- Only friends can message you. There is no request inbox, because a stranger has no way to start a conversation.
- A post goes to your friends. If you choose Everyone for a post, people who are not your friends can see it too.
- Friends see your username and picture, and your steps and streak — each of which you can turn off.
- There is no search by name. Friends find you by your exact username.
Who else is involved
Bonbon uses a small number of services, each for one job:
- OpenRouter, which passes the request to Google's Gemini model — reads a meal photo and returns an estimate. The photo is sent for that purpose only, without your name or email.
- Open Food Facts — looks up barcodes, as described above.
- Cloudflare R2 — stores photos, in a private bucket held in the EU.
- RevenueCat — tracks whether your subscription is active.
- Apple — handles sign-in, all payments, and delivering notifications. Bonbon never sees your card details.
Bonbon's own server and database are hosted in Germany. Nobody on this list is given your data to use for their own purposes.
How long it is kept
Your logs stay until you delete them, or until you close your account. Closing your account, which you can do in Settings → Delete my account, removes your profile, logs, photos, posts and messages. Some records are kept longer where they have to be — a block, so it keeps working, and anything needed to deal with abuse or to meet a legal obligation.
Your rights
You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, or object to how it is handled. Write to the address below and you will get an answer within 30 days — there is nothing you have to justify, and asking costs you nothing. If you are in the UK or EU you can also complain to your data protection authority.
Age
Bonbon is not for children under 13, and accounts are not knowingly created for them. If you believe a child under 13 has an account, write to the address below and it will be removed.
Changes
If this page changes in a way that matters, the date at the top changes and you will be told in the app before it takes effect.
Questions, or want your data gone?