Privacy Policy
Last updated 12 September 2026
PocketMigo does not track you. There is no analytics in this app, no advertising, no crash reporter, and no third-party tracking of any kind.
Most of what you record never leaves your phone. The things that do leave are listed on this page, all of them, by name.
What never leaves your phone
- Apple Health data. Your steps and workouts are read on the device to keep your Migo fed and your day counted. We do not copy your Health record to our servers.
- Face ID and Touch ID. Handled entirely by iOS. The app is told yes or no. It never sees your face or your fingerprint.
- Barcode scanning. The camera reads the barcode on your device. No photo is taken, kept, or uploaded.
- Your Migo listening for its name. That audio is never recorded, never turned into text, and never sent anywhere. You can switch listening off in Settings.
- Weather in the garden. Made up on your phone from the clock and the time of year. We do not know where you are and we do not ask.
What we keep on our servers
So your garden survives a reinstall, and so friends can see your Migo:
- Your account — the email address and name you release through Sign in with Apple. If you use Apple's private relay, a relay address is all we ever get.
- Your garden and your Migo — level, outfits, decorations, the island itself.
- Your daily activity — steps, workouts, meals, protein, calories and water for each day.
- Your friends — friend codes, friend challenges, gifts, reactions and shared workouts.
This lives in a database run by Supabase. They are listed below with everyone else.
Who else sees anything
Five companies, and only for the jobs below. This is the complete list.
Supabase
- Gets
- Everything in the list above — your account, your garden, and your daily totals.
- Why
- They run the database it is stored in. They do not use any of it for anything of their own.
Apple
- Gets
- Your sign-in. And if you speak a meal instead of typing it, that recording.
- Why
- To sign you in, and to turn speech into text.
USDA FoodData Central
- Gets
- The food you searched for.
- Why
- Nutrition lookup. They are not told who asked.
Open Food Facts
- Gets
- The barcode or food you looked up.
- Why
- Nutrition lookup. They are not told who asked.
Anthropic
- Gets
- The food description you typed, as text.
- Why
- Estimating calories for a food we do not have.
About the AI estimate
When you tap Ask AI on a food nothing else could find, the words you wrote are sent to Anthropic's Claude to guess the calories and protein. Text only — no photo, no name, no account, nothing that says the request came from you. The answer is cached and shared with other players, so the first person to log "homemade chicken curry" is the only one who has to ask.
About speaking your meals
Dictation uses Apple's speech recognition, which sends that recording to Apple to be transcribed. That is Apple's system, under Apple's privacy policy. Typing your meal instead avoids it entirely.
Paying for something
There is nothing to buy today. When there is, the payment goes through Apple's App Store. We never see your card, your billing address, or your name on the card — Apple tells us only whether your purchase is active, and we store that one fact against your account.
Nothing you have already logged is ever locked behind a payment. What gets sold is analysis built on top of your log, never the log itself.
Your health data
Health and fitness information is used to run the app and nothing else. It is never used for advertising, never sold, and never shared with third parties. None of the four companies listed above receive it.
Your friends can see
If you add a friend, they can see your Migo, your garden, your streak, and the daily activity totals you are competing on. They cannot see your weight, your height, your age, or anything you have logged that is not part of a shared challenge.
Deleting everything
Email shibutavincent@gmail.com from the address on your account and ask. Your account and everything attached to it — garden, activity, friendships, gifts — is deleted, and it is not recoverable afterwards.
Deleting the app from your phone removes everything held locally, but leaves what is on the server until you ask.
Children
PocketMigo is not directed at children under 13 and we do not knowingly collect anything from them. If you believe a child has given us information, email the address below and it will be removed.
Changes
If this policy changes, the new version appears here with a new date at the top. Anything that meaningfully changes what leaves your phone will also be said in the app.
Contact
PocketMigo is made by one person. Questions, corrections and complaints all go to the same place: shibutavincent@gmail.com.