Privacy Policy
This Privacy Policy explains what BROOM collects, why it is used, when information leaves BROOM, and the choices available to you.
It covers your use of the BROOM mobile app and this website.
Last updated: 23 August 2026
1. Who we are
BROOM provides nutrition, activity, wellness, social and coaching features. BROOM is responsible for the product-level decisions described in this policy. The legal notice contains the publisher information currently available for this website.
For privacy questions, access or deletion requests, contact us using the address shown at the end of this policy.
2. Information we collect
The information collected depends on the features you choose to use. It can include:
- Account and identity data: email address, authentication identifier, name, username, profile photo, language, and sign-in provider details for email, Apple, Google or Facebook sign-in.
- Profile and wellness data: age, height, current and target weight, weight history, gender, goals, activity level, preferences and quiz answers.
- Nutrition data: meals, foods, serving information, calories, nutrients, barcodes, scan results, saved meals and history.
- Activity data: exercise type, duration, calories, distance, heart-rate values where entered, sets, repetitions, weights and activity history.
- Photos: an optional profile photo and meal photos you submit for image analysis.
- Social data: username, display name, profile photo, friends, friend requests, reactions, ranking activity and referrals.
- Device and notification data: push token, device identifier, platform, app version, locale, time zone and notification delivery results.
- Purchase data: store, product, purchase or transaction identifiers, subscription status and entitlement period. BROOM does not receive your full payment-card details from Apple or Google.
- Technical data: request and network information, error details, status codes, stack traces, trace identifiers, feature usage, AI provider/model, token counts and latency.
3. How we use information
- Create and secure your account, authenticate you and deliver the features you request.
- Calculate nutrition, activity and progress information and personalize goals and recommendations.
- Provide social features, rankings, referrals, notifications and subscription entitlements.
- Provide optional AI-powered coach, notification and meal-analysis features after the required choice or consent.
- Diagnose errors, prevent abuse, maintain security and improve reliability.
- Comply with applicable legal obligations and enforce our terms.
4. Photos and camera access
Camera access is optional. For a meal scan, the app captures the image you choose, removes EXIF metadata during its normal resize/crop step, and sends that image to BROOM for analysis. The app does not scan your photo library in the background. Manual food entry and barcode search remain available without meal-photo analysis.
A meal photo may be sent to the TASTY API and stored by BROOM with its analysis and your account. Meal photos are held in private storage. When a photo has to be displayed or processed, BROOM uses authorized access or a temporary, time-limited link. They are not published as a permanent, publicly reachable URL.
A profile photo is optional. If you add one, it may be visible to other BROOM users through social features such as your profile, friendships, reactions or rankings. It is deleted with your account.
5. Optional AI features and consent
Before sending personal data to a third-party provider for an optional artificial intelligence feature, BROOM asks for your explicit consent. If you refuse, the relevant feature remains disabled without preventing use of BROOM features that do not require that transfer, including manual tracking and barcode search.
For the AI coach, BROOM can construct a prompt containing your first name, language and coach preferences, today’s meal and activity counts, calorie target and totals, goal direction and progress, and sometimes current or target weight and related wellness context. The normal coach prompt is designed not to include your email address, BROOM account identifier or full history, but the prompt may still be personal because it combines a first name with wellness information. The prompt is sent to OpenAI to generate the coach response.
If audio coaching is used, the generated coach text, selected voice and audio settings are sent to ElevenLabs. The generated text may contain the personal context described above. ElevenLabs returns the audio and timing information.
For meal-photo analysis, the selected meal image and preferred language are sent to the TASTY API. BROOM does not intentionally add your name or BROOM account identifier to that provider request. BROOM then stores the image, analysis and scan metadata linked to your account.
You can withdraw your consent at any time in Settings → Privacy → AI Features. Withdrawal prevents future optional AI processing. It does not undo processing already performed and does not automatically delete data that a provider may be required to retain under its applicable obligations. You may also exercise your data rights or request account deletion as described in this policy.
7. Sign-in providers
If you sign in with Apple, Google or Facebook, that provider authenticates you and returns account information permitted by you and the provider, such as an identifier, name or email address. Apple may provide a relay email address. The provider’s own privacy terms also apply to its processing.
8. Push notifications
If you enable notifications, BROOM stores a push token and device details and uses Apple Push Notification service, Firebase Cloud Messaging and/or Expo notification infrastructure to deliver messages. You can disable notifications in your device settings. Some optional notification text may be generated with OpenAI after the applicable AI choice.
9. Subscriptions and purchases
Apple App Store or Google Play processes payment. BROOM receives purchase and subscription identifiers, status and entitlement information to unlock Premium and restore purchases. Deleting your BROOM account does not cancel a store subscription; cancel it separately in the relevant store settings.
10. Service providers and disclosures
BROOM does not disclose information merely because a company is described as “trusted.” Information is sent for the specific functions below:
Supabase
Purpose: Authentication, database, file storage and realtime features
Information involved: Account, profile, wellness, nutrition, activity, social, media, device, purchase and operational data
OpenAI
Purpose: Optional coach and AI-generated notification content
Information involved: Prompt context described in section 5, generated text and usage metadata
ElevenLabs
Purpose: Optional text-to-speech coaching
Information involved: Generated coach text, voice/model settings, returned audio and timing data
TASTY API
Purpose: Optional meal-photo and food analysis
Information involved: Selected meal image, preferred language, food query/serving details and returned analysis
Open Food Facts
Purpose: Barcode and food lookup
Information involved: Barcode or food query and returned product/nutrition information
Apple, Google and Facebook
Purpose: Sign-in; Apple and Google also handle in-app purchases
Information involved: Provider identifiers and permitted account details; purchase/transaction and entitlement information
APNs, Firebase Cloud Messaging and Expo
Purpose: Push-notification delivery
Information involved: Push token, device/platform details, notification content and delivery result
Slack (if operational alerts are configured)
Purpose: Error and reliability alerts
Information involved: Error message, request method/URL, status, cause, trace or stack information and timestamp
Data protection by service providers
When BROOM uses a service provider to deliver a feature that involves processing personal data, BROOM selects and uses that provider in line with the applicable data-protection obligations and puts the appropriate safeguards and agreements in place where they are required.
Providers are expected to process the data only for the purposes needed for the relevant service and in line with the obligations that apply to them. Each provider’s own terms and privacy policy also apply to its processing. This policy does not state a contractual commitment that has not been verified.
11. Retention
BROOM keeps account and feature data while needed to provide the service and for legitimate security, dispute, accounting or legal needs. Exact retention periods are not currently defined for every category, so this policy does not promise an unsupported number of days or months.
Technical logs, provider records and backups can follow different lifecycles. Provider-side retention depends on the provider’s settings, contract and applicable terms. Contact us if you need information about a specific request.
12. Account deletion
In the app, go to Profile → Settings, scroll to Delete account and complete the confirmation. If you can no longer access the app, contact us at contact@broomapps.com.
When you delete your account, BROOM deletes the authentication account together with the associated personal operational data that does not need to be kept, including profile, nutrition, meal, activity, progress, goal and social records, device and push tokens, and the media owned by the account, including your profile photo and your meal photos.
BROOM does not keep a full archive of the deleted account.
Limited information may be retained where it is necessary to meet legal or accounting obligations, maintain security, prevent or investigate abuse, handle disputes, or process store purchase operations such as a refund or chargeback. That information is limited to what is necessary and is not a complete copy of the active account. Abuse reports are kept in a form that no longer identifies you.
Technical backups and certain records held by providers may follow separate retention cycles. We therefore do not claim that every technical copy disappears instantly.
Deleting your BROOM account does not cancel an Apple App Store or Google Play subscription; cancel it separately in the relevant store settings.
13. Security
Measures used by BROOM include encrypted network transport, authenticated API access, access controls, secure native token storage and database row-level protections. Meal photos are held in a private storage space and are reachable only through authorized, time-limited links generated for the account that owns them. No internet service can guarantee absolute security.
14. Your choices and privacy requests
- Review or update profile information in the app.
- Decline or withdraw future optional AI processing as described above.
- Disable camera or notification access in device settings and use available manual alternatives.
- Request access, correction, deletion, restriction, objection or portability where applicable to you.
- Contact us to report a social-safety issue or challenge a privacy decision.
We may need to verify your identity and will handle requests under applicable law. We do not promise a shorter response period that has not been operationally verified.
15. Advertising, tracking and website cookies
The reviewed mobile source does not include an advertising SDK, IDFA/AdSupport integration or cross-app advertising tracker. BROOM does not currently sell personal information for targeted advertising.
The reviewed website source does not include an advertising or audience analytics script. It uses the NEXT_LOCALE cookie to remember or detect language. If the website later adds analytics, advertising or non-essential cookies, this policy and any required consent control must be updated first.
16. International processing
BROOM and its providers may process information in countries where they operate. Privacy rules may differ from those in your country. We do not name a specific international-transfer mechanism here because the applicable hosting regions and contractual safeguards depend on the production provider arrangement. Contact us for information relevant to your request.
17. Children
BROOM may be used only by people who are legally permitted to use the service under the laws applicable in their country of residence. Where parental or legal guardian consent is required, it must be obtained before using the service.
If you believe a child has provided personal data without the required authorization, contact us at contact@broomapps.com so we can review the situation and delete the data where necessary.
18. Wellness, not medical care
BROOM provides general wellness and fitness information. It is not a medical device, does not provide medical diagnosis or treatment, and is not a substitute for advice from a qualified healthcare professional. Do not use BROOM for an emergency.
19. Changes to this policy
We may update this policy when BROOM’s features, providers or legal obligations change. We will change the date above and provide additional notice in the app when a material change requires it.
6. Social features and visibility
Your username, display name and profile photo may be visible to other BROOM users. Friend relationships, reactions and ranking information are processed to operate social features. Do not put sensitive health information in a public-facing name or photo.
BROOM provides features that let you report and block other users. From the ranking or user search results, open the menu associated with the relevant user and choose Report or Block.
Blocking is mutual: blocked users can no longer interact with you through the relevant social features and are excluded from applicable social surfaces. You can view and manage blocked users in Settings → Privacy → Blocked Users.
Reports are sent to BROOM for review through our moderation process. For additional assistance concerning abuse or a safety issue, contact contact@broomapps.com.