Privacy Policy
Last Updated: February 2026
Privacy Summary (Quick Read)
Eggplant is built to help you understand and improve your health — not to exploit your data.
- We collect only what is necessary to provide health insights and app functionality
- Health data is collected only with your explicit consent
- All data is transmitted securely over HTTPS using SSL/TLS encryption
- We do not sell your personal information
- You can delete your account directly inside the app
- After account deletion, your data is retained for 30 days, then permanently deleted
- Apple Health data is used only for app features and never for advertising
- You remain in control of permissions and notifications
For full details, please read below.
Introduction
Eggplant ("we", "our", or "us") provides a mobile health and wellness application that helps users track sleep, exercise, nutrition, and overall health metrics.
This Privacy Policy explains how we collect, use, store, process, and protect your information when you use the Eggplant mobile application and related services.
By using Eggplant, you agree to the practices described in this Privacy Policy.
Information We Collect
1. Account Information
When you create an account, we collect:
- Email address
- Password (securely hashed and never stored in plain text)
If you sign in using Apple or Google, we may receive:
The exact information depends on your provider settings.
2. Health and Wellness Data
With your explicit consent, we collect health-related data to generate personalized insights and analytics. This may include:
- Sleep data (duration, quality, stages, patterns)
- Exercise and activity data (workouts, steps, calories burned, activity minutes)
- Heart rate and vital signs
- Nutrition information (saved recipes, dietary preferences, meal tracking)
- Calculated health metrics and personalized health scores
You may withdraw consent at any time through your device settings.
3. Apple HealthKit Integration
Eggplant integrates with Apple HealthKit only with your authorization.
Authorized data may include:
- Sleep analysis
- Activity and workouts
- Heart rate and vital signs
- Steps and calories
HealthKit data:
- Is accessed only with your permission
- Is used solely to power app features
- Is never sold
- Is never used for advertising
You may revoke HealthKit access at any time in iOS Settings.
4. Profile Information
You may provide additional personal information such as:
- Name
- Age and date of birth
- Sex
- Height and weight
- Fitness habits and goals
- Equipment availability
- Health conditions
- Timezone and localization preferences
This information is used strictly for personalization.
5. Usage and Technical Data
We collect limited technical information, including:
- Device type and operating system
- App version
- IP address
- Feature interaction data
- Crash logs and diagnostics
This data helps improve performance and reliability.
6. Image and Vision Data
If you use image-based features:
- Images are processed securely
- Images are not retained longer than necessary
- Images are not used for advertising
How We Use Your Information
We use collected data to:
- Provide and improve Eggplant features
- Generate health insights and analytics
- Sync and securely store your health records
- Manage accounts and subscriptions
- Send essential service notifications
- Detect fraud or abuse
- Comply with legal requirements
We do not sell personal data.
In-App Purchases and Subscriptions
A subscription is required to use Eggplant. We offer monthly and yearly subscription plans.
- Payments are processed securely by Apple through the App Store
- Eggplant does not store credit card or payment details
- Subscription status is managed using RevenueCat
- We only store the minimum necessary information to manage subscription access
You may manage or cancel subscriptions in your Apple ID settings (Settings → [Your Name] → Subscriptions).
Infrastructure and Security
Secure Communication
All data transmitted between your device and our backend is encrypted using:
Backend Hosting
- Our backend runs on a secure Virtual Private Server (VPS)
- The server is protected with an active SSL certificate
- Database access is restricted and secured
- Sensitive data is encrypted at rest where applicable
Authentication Security
- Passwords are hashed
- Access controls restrict internal data access
- Security monitoring is performed regularly
While no system is completely secure, we use industry-standard safeguards.
Third-Party Services
OneSignal
Used to send push notifications.
- May process device identifiers
- Does not receive your health data
- Notification permissions can be managed in device settings
RevenueCat
Used to manage subscription access.
- Does not store payment details
- Works with Apple's in-app purchase system
Data Sharing
We do not sell or rent personal information.
We may share limited information:
- With service providers necessary to operate the app
- If required by law
- To protect our rights or users
- During a merger or acquisition
Account Deletion and Data Retention
In-App Account Deletion
You can delete your account directly inside the Eggplant app through the account settings section.
Retention After Deletion
After you delete your account:
- Your data is retained for up to 30 days
- This retention period allows for recovery in case of accidental deletion
- After 30 days, all personal data is permanently deleted from our systems unless retention is required by law
We do not keep deleted account data beyond this period.
Your Rights (GDPR & CCPA)
Depending on your location, you may have the right to:
- Access your data
- Receive a copy of your data
- Correct inaccurate information
- Request deletion
- Restrict processing
- Withdraw consent
To exercise these rights, contact:
Children's Privacy
Eggplant is not intended for individuals under 18 years of age. We do not knowingly collect data from children.
International Data Transfers
Your data may be processed outside your country of residence. Appropriate safeguards, including encryption and access controls, are applied to protect your information.
Changes to This Policy
We may update this Privacy Policy periodically. If material changes occur, users will be notified in-app and the "Last Updated" date will be revised.
Contact Us
For privacy-related questions: