Privacy Policy

Effective 5 August 2026 · Last updated 5 August 2026 · Applies to the AvoLens mobile app (app.avolens.mobile) and this website.

AvoLens is built local-first. The app works fully offline with your data on your device, an account is optional, and there is no advertising, analytics or attribution software anywhere in it.

The short version

Your food log, weight and measurements live on your device. They only leave it if you create an account and sync.
Meal photos you scan are not stored. They are sent for AI analysis, the nutrition estimate comes back, and the image is not saved to any database or bucket.
No ads, no trackers, no analytics. Nothing is sold or shared for marketing.
Health and fitness data is read-only and is never used for advertising.
You can delete everything in one tap, or by web request.

1. Who we are

AvoLens is provided by VOLTGENIX LLC (trading as Ash Build), based in Texas, United States (“AvoLens”, “we”, “us”). For privacy questions, contact avolens@voltgenix-llc.com.

Where the EU or UK GDPR applies, we are the data controller for the data described below.

2. What we collect, and when

Most of what AvoLens knows about you never leaves your phone. The table below is the complete list of data that can be transmitted off your device, and what triggers it.

Data	When it leaves your device	Where it goes	Kept?
Email address and display name	Only if you create an account	Supabase (auth)	Until you delete the account
Food log, weight, BMI, body measurements, water, nutrient totals, medication log	Only while signed in, for cloud sync	Supabase — one access-controlled row per user	Until you delete the account
Progress photos	Only if you add them while signed in	Supabase — a private bucket only your account can read	Until you delete them or the account
Meal photos and nutrition-label photos sent for AI analysis	When you use photo or label scanning	Our server, then the AI provider (Google)	No. Transient — processed and discarded, not written to any database or bucket
Voice transcript text	When you use voice logging	Our server, then the AI provider. Speech-to-text itself runs on your device.	No
AI Coach messages	When you use the AI Coach	Our server, then the AI provider. Includes the day’s log and goals so answers are specific to you.	No
AI usage counters	Each AI request while signed in	Supabase — user ID, date, request type and a count. No content.	Deleted with your account
Purchase and subscription status	If you subscribe	RevenueCat, plus Google Play or Apple	As long as required for billing
Food and barcode lookups	When you search foods or scan a barcode	Open Food Facts — the search term or barcode only	Not by us
Crash records	Never automatically	Stored on your device; only sent if you choose to send a report	Local only

We do not collect advertising identifiers, location, contacts, browsing history, or device fingerprints. There is no analytics, advertising, attribution or crash-reporting SDK in the app.

3. Health and fitness data

With your permission, AvoLens reads a small amount of activity data so it can show your exercise stats and net calories:

Android — Health Connect: active calories burned, steps, and exercise sessions. Read-only.
iOS — Apple Health (HealthKit): active energy, steps, and workouts. Read-only.

How health data is and is not used Data read through Health Connect or Apple Health is used only to display your own activity inside the app and to calculate net calories. It is never used for advertising or marketing, never sold, and never shared with a third party or data broker. It is not used to train any machine-learning model. If you are signed in, derived totals may be included in your own encrypted profile sync so your figures match across your devices. AvoLens never writes data back to Health Connect or Apple Health.

You can withdraw this permission at any time — in Health Connect settings, in iOS Settings → Privacy & Security → Health, or by turning the connection off in AvoLens under Settings. Revoking it stops all future reads immediately.

The food, weight and medication information you enter yourself is health-related data too. Where the GDPR applies, we process it as a special category of personal data on the basis of your explicit consent, which you give by choosing to create an account and sync. You can withdraw that consent at any time by deleting your account.

4. AI processing of your photos and text

Photo scanning, nutrition-label scanning, voice logging and the AI Coach send data to our server, which forwards it to Google (the Gemini API) for analysis and returns the result to your app.

The image or text is used only to produce that one response.
AvoLens does not store the image or the message. Our scanning endpoint contains no database write and no file upload.
The data is not used to train AI models.
Google may retain inputs transiently for abuse monitoring under its own API terms. See Google’s privacy policy and the Gemini API additional terms.

If you would rather no image ever left your device, use manual entry and the food database search instead — both work without AI.

5. Why we process it (legal bases)

Purpose	Legal basis (GDPR)
Running the app you asked for — logging, targets, trends	Performance of a contract
Account creation and cloud sync	Performance of a contract
Health, fitness, and medication data	Explicit consent (Art. 9(2)(a))
AI scanning and the AI Coach	Performance of a contract, at your request
Processing subscriptions	Performance of a contract; legal obligation for tax records
Keeping the service secure and preventing abuse	Legitimate interests

We do not sell your personal information and we do not share it for advertising, marketing, or cross-context behavioural advertising. We use a small number of service providers, each processing data only on our instructions:

Provider	What it handles	Notes
Supabase	Accounts, profile sync, progress photos, usage counters	Encrypted in transit (HTTPS) and at rest
Google (Gemini API)	AI analysis of meal photos, labels, voice text and coach messages	Transient processing; not stored by us; not used for model training
RevenueCat	Subscription status	Only if you subscribe
Google Play / Apple	Payment processing	We never see your card details
Open Food Facts	Food and barcode lookups	Receives the search term or barcode, not your identity

We may also disclose data if legally required to, or to protect the rights and safety of our users — and, if the app were ever transferred to a new owner, as part of that transfer, with notice to you beforehand.

7. International transfers

Our providers may process data in countries outside your own, including the United States. Where data is transferred out of the EEA or the UK, it is covered by the European Commission’s Standard Contractual Clauses or an equivalent approved safeguard in the provider’s data processing agreement.

8. How long we keep it

On your device: until you delete the data, clear it in Settings, or uninstall the app.
Account and synced data: for as long as your account exists.
After deletion: removed from live systems immediately and purged from encrypted backups within 30 days.
Billing records: retained by the app stores for as long as tax and accounting law requires, independently of us.

9. Security

All network traffic uses HTTPS. Synced data is protected by row-level access rules, so one account cannot read another’s. Progress photos live in a private bucket that is not publicly readable. Data at rest is encrypted by our hosting provider. No system is perfectly secure, so please use a strong, unique password.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your data, to receive a copy in a portable format, and to withdraw consent at any time. Two of these are built into the app and need no request:

Portability — Settings → Data & privacy → Export CSV gives you your whole log, weights and measurements.
Erasure — see below.

For anything else, contact avolens@voltgenix-llc.com. We respond within 30 days. If you are in the EEA or UK you may also complain to your local data protection authority.

California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. You will never be discriminated against for exercising a privacy right.

11. Deleting your account and data

In the app — one tap

Settings → Data & privacy → Delete account. This permanently removes your account, your synced profile row, your progress photos, and your AI usage counters, then wipes the local state on your device.

From the web

You do not need the app installed. See the account deletion request page.

12. Children

AvoLens is not intended for children under 13 — or under 16 where local law sets a higher age of digital consent. We do not knowingly collect data from children. If you believe a child has given us data, contact avolens@voltgenix-llc.com and we will delete it.

13. Not medical advice

AvoLens is a tracking tool, not a medical device. Nutrition estimates, medication levels and coach replies are informational and can be wrong. They are not medical advice and are no substitute for your doctor or pharmacist. Never start, stop or change a dose based on this app. See the Terms of Service.

14. Changes to this policy

If we make a material change we will update the date at the top and, for significant changes, notify you in the app before the change takes effect. Continuing to use AvoLens after that means you accept the updated policy.

15. Contact

Privacy questions, requests, or complaints: avolens@voltgenix-llc.com
VOLTGENIX LLC (trading as Ash Build), Texas, United States