Hunger Club — Privacy Policy

Last updated: 2026-10-07 · Developer: VoidBit Studio (Lex Oleksiienko, sole proprietor), Calgary, Alberta, Canada

Hunger Club ("the app", "we") is a fasting + weight-loss tracker built local-first. This policy explains, in plain language, what data the app handles and what it does NOT do. It is written to match the app as it is released on Google Play — not boilerplate.

The short version

• Your data stays on your phone. Your fasts, weight, food log, sleep, steps, workouts, body measurements, progress photos and settings are stored only on your device. We do not run a server that receives them. We cannot read them. (The one exception is Android's own device backup, which is made and held by Google, not by us — see "Android device backup" below.)
• No account. No sign-up. You do not create an account or give us an email to use the app.
• No cloud sync, no data sale, no ad tracking. We do not upload, sell, rent, or share your health or personal data with anyone, and we do not use advertising or analytics trackers that profile you.
• One optional lookup, off until you switch it on. The barcode scanner (Settings → Barcode scanner) looks a product up on Open Food Facts. With it off — the default — nothing is sent. With it on, only the barcode number is sent, and only at the moment you scan. See "Barcode scanner" below.
• No AI service. Nothing you log is sent to an AI provider, and this version of the app has no feature that connects to one. Your insights are calculated on your phone.
• Deleting is in your hands. You can delete individual items inside the app, or erase everything the app holds by uninstalling it or clearing its storage in Android settings. There is no copy on a server for us to delete. Details are in "Deleting your data" below.

What the app stores (locally, on your device)

• Fasting history, active fast, and goals
• Body weight + measurements and weight unit preference
• Food log, saved meals, recipes, nutrition profile (sex, age, height, activity, target rate)
• Your answers to the safety questions (for example diabetes or GLP-1 medication, pregnancy or nursing, history of disordered eating), used to switch off or soften features that may not suit you
• Steps and workouts you enter, water/caffeine counters, meal schedule
• Sleep log (hours you enter) and your chronotype quiz answers/result — used to compute sleep debt, your energy day-plan and forecasts, all on-device
• Progress photos you choose to add (taken with the camera or picked from your gallery), with the date and your weight at the time
• Streak calendar marks (rest / sick / travel days, streak freezes, repairs)
• Grocery lists built from your recipes, and your equipment/training preferences
• Course progress and your private course reflections — reflections are visible only to you, are never included in the shareable CSV export, and travel only inside the JSON backup file you create
• Hunger-moment timestamps and the hunger level you tag (to compute your personal "hardest hour"), and the words you choose for your hunger levels
• Mood and energy check-ins, and the sleep tags you add (late meal, alcohol, late workout)
• If-then plans you write, and the optional 10-second voice note for one (see Microphone)
• Weekly goals, experiments and programs you start, and life events you mark (for example travel)
• The coach's own notes: which daily tips and recommendations were shown to you, and whether you acted on them or chose "Not now" — so it does not repeat itself and learns what helps you. This is calculated and kept on your phone, like everything above
• App preferences and which milestone badges you've earned

All of the above is kept on-device using your phone's app storage. It is included in a backup or export file (JSON backup, CSV, or the one-page report) only if you choose to create one, and that file goes wherever you send it (you control that). Progress photos are not part of those files.

Device permissions

• Notifications — used to send your fasting reminders, stage milestones, the optional persistent "live fast" notification, and meal/eating-window reminders. All scheduled locally on your device; no push server is involved. You can turn these off in your system settings or in the app.
• Camera — used only when you tap "Take photo" in Progress photos. Android asks for permission at that moment, you can say no, and everything else in the app keeps working. The photo is saved in the app's private storage on your phone; the app never uploads it or sends it to us. Choosing a photo from your gallery uses Android's system photo picker, which hands the app only the photo you pick. The camera is also used by the optional barcode scanner — only after you turn the scanner on and tap Scan, with Android asking at that moment. The scanner reads the barcode on the live camera view; it takes and stores no picture.
• Internet — needed to complete and verify purchases through Google Play Billing and RevenueCat (see Purchases) and, only if you turn the barcode scanner on, to look up a scanned barcode on Open Food Facts (see Barcode scanner). Your logs, photos and health information are never sent over it. The Google Play version of the app only connects over encrypted HTTPS — plain, unencrypted HTTP connections are refused.
• Microphone — used only if you record the optional 10-second voice note for an if-then plan. Android asks the first time you tap record; the recording stays on your phone and is left out of Android's device backup.
• The app does not request access to your contacts or location, and it does not read data from Health Connect or other health apps.

Barcode scanner (optional, off by default)

The barcode scanner is a switch you turn on yourself in Settings → Barcode scanner. It is off until you do, and while it is off the app makes no lookup of any kind.

When it is on and you scan a product, the app sends only the barcode number (the digits, for example 3017620422003) to Open Food Facts (world.openfoodfacts.org), a non-profit, open food database, to get the product's name, nutrition numbers and allergens. Nothing else goes with it: no photo, no account, no advertising or device identifier, no food log, no health data, and no cookies. Like any web request, it reaches Open Food Facts together with your device's IP address and the app's name (HungerClub/1.0), which Open Food Facts receives and handles under its own privacy policy: https://world.openfoodfacts.org/privacy. We receive none of it.

Barcodes you have looked up are kept in a small cache on your phone (the most recent 60) so a product you scan again does not need another lookup; products you choose to "Save to my foods" are kept with your other foods. Both stay on your device and are not sent anywhere. Turning the scanner off stops all lookups at once.

Product data is from Open Food Facts, available under the Open Database License (ODbL); see https://opendatacommons.org/licenses/odbl/1.0/. The data is contributed by volunteers and can be incomplete or wrong — the app says when a number is missing, and you should check the pack when it matters, especially for allergies.

Purchases

Hunger Club has a free tier and optional paid plans: a one-time Lifetime purchase (it never renews), and Annual and Monthly subscriptions (they renew until you cancel in Google Play; there is no free trial that charges you automatically). When you buy a plan, the purchase is processed by Google Play Billing and managed through RevenueCat (our purchase infrastructure). These services receive only what's needed to process and validate the purchase (e.g. a purchase token, an anonymous app-user identifier and basic device/app information) — never your fasting, weight, food, photo, or health data. See Google Play's and RevenueCat's privacy policies for how they handle billing data. Note: Until paid plans are live, the app runs in early-access mode and no purchase data is sent.

Smart insights are computed on your device — the app does not use AI

Hunger Club's "smart insights" — the pattern discovery, forecasts, anomaly and trend detection, and the ranked feed — are produced by on-device calculations (statistics and rules) from your own logs, on your device, every time you open the screen. The app does not use an AI service: no AI provider, chatbot or cloud model receives your data, nothing is generated for you by an AI while you use the app (the educational text and tips are written content that ships inside the app), and this version has no feature for connecting to an AI service.

Android device backup

Hunger Club allows Android's standard app backup. If backup is turned on in your phone's settings, Android may copy the app's data — including your logs and progress photos — to your Google account as part of your phone's backup. That copy is made, held and controlled by Google under your Google account. We do not receive it and cannot access it. You can switch it off, or delete the backup, in your phone's Google backup settings.

Health data

The fasting, weight, sleep, and nutrition information you enter is health-related and personal. Because it never leaves your device (except in a backup or export file you create, or in Android's own device backup described above), we never transmit or process it on our side. Hunger Club is an educational and tracking tool, not medical advice. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Talk to a licensed physician before starting intermittent fasting, especially if you are pregnant, nursing, under 18, diabetic, or have a history of disordered eating.

Children

Hunger Club is not directed to children. Weight-loss/deficit features are hard-blocked for users under 18.

Deleting your data

Your data lives on your device until you delete it. We hold no copy on a server, so there is nothing for us to erase on our side.

• Inside the app, you can delete individual items — for example a logged fast (History → Delete this fast), a logged meal, or a progress photo (long-press the photo → Delete).
• To erase everything the app holds on your phone, uninstall Hunger Club, or open Android Settings → Apps → Hunger Club → Storage and choose Clear storage (menu names vary by phone). The app does not currently have a single "delete everything" button.
• Backup & Restore (Settings → Backup & restore) saves a backup file and can merge one back in. It never deletes anything, so it is not a way to delete your data. Backup and export files you saved or shared live wherever you put them — delete those yourself.
• Android device backup: if your phone's backup was on, a copy of the app's data may still exist in your Google account after you uninstall. Delete it in your phone's Google backup settings.
• Purchase records are held by Google Play and RevenueCat under their own policies; contact us if you need help with a request that involves them.

Your rights (PIPEDA · GDPR · CCPA/CPRA)

Because everything stays on your device, you already have direct control: view your data in the app, export it (Settings → Backup & restore), and delete it (see "Deleting your data"). We hold no copy on a server to retrieve, correct, or erase.

Depending on where you live, you may also have formal rights — to access, correct, delete, or restrict processing of your personal data — under PIPEDA (Canada), the GDPR (EU / EEA / UK), or the CCPA / CPRA (California). We do not sell or "share" your personal data, and we do not use it for cross-context behavioural advertising, as those terms are defined under the CCPA/CPRA. For the limited purchase data handled by Google Play and RevenueCat (see Purchases), our lawful basis under the GDPR is performance of your purchase contract and our legitimate interest in preventing fraud. To exercise any right, contact us below. EU/EEA users may also complain to their local data-protection authority; Canadians may contact the Office of the Privacy Commissioner of Canada.

The data controller for that limited purchase processing is VoidBit Studio (Lex Oleksiienko, sole proprietor), Calgary, Alberta, Canada.

Changes to this policy

If the app's data practices change (for example, if an optional cloud or AI feature is added later), we will update this policy and surface the change in-app before the feature is enabled.

Contact

Questions about privacy: aispotlightlab@gmail.com — VoidBit Studio (Lex Oleksiienko), Calgary, Alberta, Canada. Governed by Canadian privacy law (PIPEDA) and applicable local regulations.