weightrakkr is a mobile application operated by FEMTO TECHNOLOGIES LTD. ("we," "us," or "our"). We are incorporated and based in the United Kingdom. By downloading or using weightrakkr, you agree to this Privacy Policy. If you do not agree, please do not use the app.
Questions or requests regarding your privacy can be sent to info@femtoweb.co.uk.
When you sign in, we collect your email address. We use passwordless magic link authentication — we never store a password for your account. Your email is used solely to send you one-time sign-in codes and, if you opt in, notification emails.
The core purpose of weightrakkr is to help you log and track your body metrics. We collect the data you explicitly enter:
If you choose to take progress photos, they are end-to-end encrypted on your device using AES-256-GCM before being uploaded to our storage. We cannot decrypt or view your photos. See Section 5 for details.
When you use the AI food scan feature, you take or select a photo of your meal. This image is sent to Anthropic's API for analysis to estimate calories and macronutrients. The image is transmitted securely and is not stored on our servers after the analysis is complete. See Section 7.
Messages you send to Nora (our AI companion) and Nora's responses are stored in your account so your conversation history persists across sessions. The content of messages is also sent to Anthropic's API to generate responses. See Section 7.
If you grant permission, weightrakkr can read workout data from Apple HealthKit. This data is used only within the app and is never uploaded to our servers or shared with third parties. See Section 6.
We may collect limited technical data to keep the app functioning correctly, including:
We do not use analytics SDKs that track your behaviour across apps or websites.
We use the information we collect to:
We do not use your health data for advertising, and we do not build advertising profiles.
We rely on the following third-party services to operate weightrakkr. Each has its own privacy policy.
We use Supabase to host our database and file storage. Your account data, health logs, and encrypted progress photos are stored on Supabase infrastructure. Supabase is SOC 2 Type II certified. Data may be stored in data centres in the United States or European Union.
Food scan images and Nora AI conversation messages are processed by Anthropic's API (Claude models). By using AI features, you agree to Anthropic's usage policies. Anthropic does not use API data to train its models by default. See Section 7 for more detail.
Our backend API is hosted on Vercel. API requests (including authentication and data sync) pass through Vercel's infrastructure.
Subscription billing is handled entirely through Apple's App Store. We do not receive or store your payment card details. Apple's privacy policy governs all payment transactions. Push notifications are delivered via Apple Push Notification service (APNs).
Your progress photos are end-to-end encrypted. They are encrypted on your device using AES-256-GCM before upload. We store only ciphertext. We cannot decrypt, view, or share your photos under any circumstances — including in response to requests from third parties.
Encryption keys are derived per-user and stored securely on your device using iOS Secure Enclave where available. If you uninstall the app or lose your device without a backup, your photos cannot be recovered, as we do not hold a copy of your decryption key.
If you explicitly use the "compare" or "export" features, decryption happens locally on your device for display purposes only.
weightrakkr may request permission to read workout and activity data from Apple HealthKit. Our use of HealthKit data complies with Apple's guidelines:
You can revoke HealthKit permissions at any time in iOS Settings → Privacy & Security → Health.
weightrakkr uses Anthropic's Claude models to power two features:
When you scan a meal, the image and any answers you provide to clarifying questions are sent to Anthropic's API. The API returns estimated calories and macronutrients. The image is not retained on our servers after the API call completes. Estimates are generated by an AI model and may not be accurate — see our Health Disclaimer.
Messages you send to Nora, along with relevant context from your account (your weight trend, calorie logs, macro data, calorie goal, goal weight, and exercise preferences), are sent to Anthropic's API to generate Nora's response. This context is assembled server-side and is not stored by Anthropic for training purposes under their standard API terms.
Your Nora conversation history (messages and responses) is stored in your account on Supabase so the conversation persists between sessions. You can delete your conversation history by deleting your account.
Nora's responses are informational only and do not constitute medical, nutritional, or fitness advice. See our Health Disclaimer.
We do not sell your personal information. We share data only in the following limited circumstances:
We will never share your data with advertisers, data brokers, or analytics companies.
We retain your data for as long as your account is active. When you delete your account:
Deletion is permanent and irreversible. Some residual data may remain in database backups for up to 30 days before being overwritten, but it will not be accessible or used.
To delete your account, go to Settings → Account → Delete Account in the app, or contact us at info@femtoweb.co.uk.
Depending on where you live, you may have the following rights regarding your personal data:
If you are located in the EEA or UK, our lawful basis for processing your health data is your explicit consent, given when you create an account and begin logging data. You may withdraw consent at any time by deleting your account. You also have the right to lodge a complaint with your local data protection authority.
California residents have the right to know what personal information we collect, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising these rights.
To exercise any of these rights, contact us at info@femtoweb.co.uk. We will respond within 30 days.
weightrakkr is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us at info@femtoweb.co.uk and we will delete it promptly.
Users between the ages of 13 and 17 should have a parent or guardian review this Privacy Policy before using the app.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you through the app or by email at least 14 days before the change takes effect.
Your continued use of weightrakkr after a policy update constitutes your acceptance of the revised policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
FEMTO TECHNOLOGIES LTD.
Email: info@femtoweb.co.uk
We aim to respond to all privacy-related enquiries within 5 business days.