← All documents

AI notice

Exactly where AI is used in PersonalLedger, what it can see, and what it never sees.

Version 1.0-draft · Not yet in effect

Draft — prepared before launch, not yet in effect, pending legal review. Highlighted text marks facts that still have to be decided.

Where AI is used today

Two places, both only when you choose to use them: estimating the food in a meal photo you scan in Fuel, and reading the numbers on a body-composition printout (for example from an InBody analyser) you photograph in Body. Nothing else in the app uses an AI model.

  • Each is asked for separately: before the first scan, the app explains what happens and asks you to allow it. You can turn either off at any time — meal photos in Privacy & data, printouts in the scan sheet itself.
  • Location and camera details are stripped from the photo, then only the image and a fixed instruction are sent to Anthropic, the AI provider. Your name, email, account and other data in the app are never sent. A printout is health data, so the app suggests covering any name or member number on it before you take the photo.
  • The app does not keep the photo. Anthropic's published API terms: inputs deleted within 30 days and not used for training. [VERIFY AGAINST CURRENT ANTHROPIC TERMS AND DPA REQUIRED]
  • A meal-photo result is shown as an estimate with a confidence level. Values read off a printout are shown next to the sheet's own numbers for you to check. You review, edit or discard every item before anything is saved.
  • A printout's scores, target weights and verdicts are never read or stored — only its numbers and the analyser's own printed ranges.

What is not AI

Insights, cycle estimates, sleep baselines and Mind patterns are calculated by fixed, explainable rules from your own data — on our servers, not by a language model. They are labelled as estimates or observations and show what they're based on.

No AI reads your journal, dreams, reflections, cycle, body measurements you've saved, progress photos, sleep or mood. The printout reader only sees the one photo you take, never what's already in the app.

Before any new AI feature

If we build an assistant that can look across your ledger, it will: tell you exactly which kinds of data it can read; let you choose them; separate what is your data, what is general knowledge, and what is its own interpretation; say when it's uncertain or missing information; and never present a correlation as a cause or an interpretation as a diagnosis. This notice will be updated, and you'll be asked, before it's switched on.

Change history

  • 1.0-draft — First draft, prepared before launch. Not yet in effect.