Effective date: October 9, 2026
Who we are: Ponya ("we", "us") is an app made by Bao Kien Tran (sole proprietor), Barrie,
Ontario, Canada.
Privacy Officer: Bao Kien Tran — [email protected]
This policy explains how Ponya handles consumer health data: information that is linked or reasonably linkable to you and that identifies your past, present or future physical health. It adds to our general Privacy Policy (https://ponyaapp.com/privacy); where they differ for health data, this policy applies.
| Data | Where it comes from | Why |
|---|---|---|
| Body weight (and the dates you log it) | You type it | Your daily calorie target, progress and trend |
| Height, date of birth (age), sex | You enter them during setup | To estimate how much energy your body uses (Mifflin-St Jeor) |
| Your goal (lose / keep / gain), target weight, weekly pace | You choose them | Your plan and safe limits |
| Meals you log: what you typed, the food names, portions, calories and nutrients | You type or pick them | Your food log and daily numbers |
| Meal photos you choose to take or pick | Your camera or photo library, only when you tap "Snap a meal" | To estimate a meal from a picture |
| Activities you log (type, duration, calories) | You type them | Counted in your day |
| Optional notes on a weight entry | You type them | Your own record |
| Your BMI | Calculated from your weight and height | Only to keep goals in a safe range |
If you add a Ponya widget, today's numbers (for example calories left) are also saved in storage on your iPhone that only Ponya and its widgets can read. That copy never leaves your device, and you can hide the numbers on the widget.
We do not collect: location, contacts, data from Apple Health or other health apps, biometric or genetic data, or anything about reproductive or sexual health.
We also hold account data that is not health data in itself (your email or Apple / Google sign-in, the name you chose, your app settings). Because it is linked to the health data above, we protect it the same way.
Only to run Ponya for you:
We never sell your health data. We do not use it for advertising, and we do not share it for anyone else's marketing.
We share health data only with the service providers below, only to run Ponya, and each is bound by a contract to use it for nothing else.
| Provider | What they receive | Why |
|---|---|---|
| OpenAI (USA) | The text you type about a meal or activity, and a meal photo when you use "Snap a meal". Never your name, email, weight, height, age or sex. | To estimate calories and nutrients. Photos are processed in memory and never stored by Ponya. OpenAI does not use API data to train its models, and Ponya does not ask OpenAI to store the conversation. OpenAI may keep these inputs in abuse-monitoring logs for up to 30 days, then deletes them (OpenAI API data controls, checked 2026-10-03). |
| MongoDB Atlas | Your account and everything you log (stored encrypted at rest) | Our database |
| Railway | Data passing through our server while it handles your requests | Hosting our server |
| PostHog (EU) — server error reports | When something fails on our server: the route, the status code and your app version. Always on. No personal or health data. Linked to your account only if you turned on usage stats; otherwise anonymous. | To find and fix errors. |
| PostHog (EU) — app crash reports | If the app crashes: the error's name, a short error message and where in the code it happened. Always on. Anonymous — never linked to your account; no personal or health data. | To find and fix crashes. |
| PostHog (EU) — app usage stats, only if you turn on "Share anonymous usage stats" | Which screens you open and buttons you tap, your app version and language. Never health values: no weight, height, age, sex, BMI, calories, food names, photos or anything you type. | To find what is hard to use. Off unless you turn it on. |
| Resend | Your email address and the text of the email (for example a sign-in code or a reply to your bug report). Never your health data. | Sending you emails you asked for |
| Apple / Google | Only what is needed if you choose Sign in with Apple / Google | Signing in |
Where your data is stored: our database (MongoDB Atlas) runs on Amazon Web Services in Oregon, USA, and our server (Railway) runs in California, USA. If you live in Canada, your data is stored and processed in the United States and may be accessible to US authorities under US law.
We may disclose data if the law requires it (for example a valid court order). We will tell you when we are allowed to.
You have the right to:
We answer requests within 45 days (we may extend once by 45 more if needed, and will tell you why). We will not charge you, and we will not treat you differently for using your rights.
Backups: encrypted database backups may hold deleted data for up to 30 days, until they are replaced.
Ponya is for adults: you must be 18 or older to create a plan. We do not knowingly collect health data from anyone under 18; if we learn we have, we delete it.
If we change this policy in a way that affects your health data, we will tell you in the app and ask for your consent again before the change applies to you. The date at the top shows the latest version.
Privacy Officer: Bao Kien Tran — [email protected]
See also our general Privacy Policy.