This policy's public home is https://giai.app/privacy.html.
The short version
GI AI does not collect your data. There is no server to send it to, and the app does not have Android's internet permission.
Everything you log — meals, symptoms, stool entries, sleep, water, medications — is written to storage on your own phone and stays there. A meal photo is deleted once its food is logged; a stool photo is kept on the phone with its entry. The app has no backend, no account system, no analytics, and no advertising. Nobody, including the developer, can see what you log.
What the app stores, and where
All of it lives on your device, in the app's own private storage:
| What | Where |
|---|---|
| Food, symptom, stool, sleep, water and medication entries | On-device key-value storage |
| Photos you attach to stool entries (a meal photo is deleted once its food is logged) | On-device file storage |
| Bundled food nutrition database (public USDA reference data), and any food data you import or add yourself | On-device SQLite database |
| Your settings | On-device key-value storage |
| Copies of files you share from the app (reports, tables, backups) | The app's temporary cache, briefly — cleared rather than kept |
Uninstalling the app removes all of it.
Clear All Data. You can also erase your data at any time from Settings → Danger Zone → Clear All Data, which requires typing DELETE to confirm. It deletes every entry, your medication list, all settings, all saved photos, foods you imported or added yourself, and any export copies the app still has staged for sharing, and it cancels every scheduled reminder. The built-in USDA food list stays, because it is public reference data rather than yours. Files you already exported to somewhere else are not touched, and your Health Connect grants are not changed (see below). Clear History, under History Management, is narrower: it deletes dated entries, sample data and cached summaries, and keeps your medication list, settings and photos.
No cloud backup, no phone-to-phone transfer. GI AI opts out of Android's cloud backup and of the device-to-device transfer that runs when you set up a new phone, so nothing from the app is copied there. To move to a new phone, use Settings → Backup & Transfer, which saves your entries and medication list to a file you control. Photos and settings are not included in that file.
How your data is protected. Everything above sits in GI AI's private storage, which Android keeps separate from other apps. On current phones Android also encrypts that storage whenever the phone is locked with a PIN, pattern or password. GI AI does not add a second layer of encryption or its own lock, so anyone who can unlock your phone and open the app can read your diary. The app's preview in the recent-apps screen is hidden, so the diary isn't shown there when you switch apps.
What leaves your device
Nothing that you log. GI AI's own code has never opened a network connection, and the app does not hold Android's internet permission, so Android does not let it reach the network at all. It has no server, and no third-party analytics, crash-reporting, advertising or tracking libraries are included in it.
The app does bundle Google's ML Kit library, which it uses to talk to the on-device AI described below. That library includes Google components that could send usage information in an app allowed to use the network. GI AI is not allowed to, so nothing can be sent from GI AI by them either.
Four things are worth explaining specifically, because they sound like they might involve a network and do not:
On-device AI (Gemini Nano). Your daily, weekly and monthly summaries are reworded by Google's Gemini Nano through the ML Kit GenAI APIs. This model runs on your phone, through Android's AICore system service. Your entries are not sent to Google or anyone else to produce these summaries; this has been checked by running the feature with the device in airplane mode. The numbers and patterns in a summary are always worked out by fixed rules; the AI only rewords them, and the summary says when it did.
The model itself is downloaded and kept up to date by AICore, a Google system component that is part of Android and separate from GI AI, and only after you agree to the download. That download comes from Google to Android; it is not made by GI AI and carries none of your entries.
Typed food. When you type what you ate, the text is given to the same on-device model (when it is available on your phone) to pick out the food items. When it is not available, fixed word-matching rules do that instead. Either way, the text stays on the phone.
Reading food from a photo. When you tap "Read food from photo", the image is analysed by that same on-device model. The photo is not uploaded — this too was checked in airplane mode (2026-09-21: a photo of two hot dogs read as "hotdog ×2" with no network connection at all). Nothing is logged from it until you review the suggestions and agree to them. This feature needs the on-device model; there is no rule-based version of it.
Health Connect. If you connect it, GI AI reads the following from Health Connect: sleep, hydration, steps, total calories burned, and active calories burned. Sleep and hydration fill in days you didn't log yourself, so they aren't blank in your summaries. Steps and calories burned are optional, and are shown next to GI AI's rough calorie estimate. This is a read-only connection between two apps on the same device — GI AI never writes anything back to Health Connect, and nothing is transmitted anywhere. You grant this explicitly. GI AI's own Settings screen can turn syncing off; to revoke GI AI's access itself, use Android's Health Connect settings (Health Connect → App permissions → GI AI).
No accounts, no identifiers
There is no sign-up, no login, and no user account. The app does not create or store any advertising ID, device ID, or other identifier, and does not ask for your name, email address or phone number.
Notifications
If you turn on medication reminders, the app schedules local notifications — generated by your phone, for your phone. No push service is used: the app never requests a push token, it is not connected to any Firebase or other push project, and without internet access nothing could be sent to it anyway.
Permissions, and why each one exists
| Permission | Why |
|---|---|
| Camera | Photographing a meal so the on-device AI can read it, or a stool entry to keep with it |
Photos (READ_MEDIA_IMAGES, READ_MEDIA_VISUAL_USER_SELECTED) | Choosing an existing photo: a meal photo for the on-device AI to read, or a stool photo to keep. On current Android you can grant access to only the photos you pick |
Notifications (POST_NOTIFICATIONS) | Medication reminders you turn on yourself |
Exact alarms (SCHEDULE_EXACT_ALARM) | Optional. Lets a reminder arrive at the dose time instead of up to an hour late. You grant it in Android settings; without it the app sends one approximate reminder and says so |
Run at startup (RECEIVE_BOOT_COMPLETED), keep awake (WAKE_LOCK) | Re-arming your reminders after the phone restarts |
| Vibrate | The buzz that accompanies a reminder |
| Health Connect: sleep, hydration | Reading figures other apps already recorded, so your summaries aren't missing days. Read-only. |
| Health Connect: steps, calories burned (total and active) | Optional. Showing steps and calories burned next to the calorie estimate in your summaries. Read-only. |
On-device AI service (aicore BIND_SERVICE) | Talking to Android's AICore, the system service that runs Gemini Nano on the phone |
Declared by the app's building blocks
These appear in the app's manifest because libraries the app is built with declare them, not because GI AI asked for them. Each row says what, if anything, they do in GI AI. They are listed here because they show up on the Play page and in Android's app info, and a tidy list that left them out would be a misleading one.
| Permission | Where it comes from, and what it does in GI AI |
|---|---|
Network state (ACCESS_NETWORK_STATE) | The React Native / Expo framework declares it. It only reveals whether the phone has a connection; it can't send or receive anything. GI AI does not have the internet permission, which is removed from release builds. |
Storage (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE) | Declared by the photo-picker library. On Android 12 and older, choosing an existing photo goes through them; on Android 13 and later Android ignores them and the Photos permission above is used instead. Exports go only to a folder you pick or through the share sheet. |
(Earlier builds also listed a Google push-message receiver, a Play install-referrer service and launcher-badge permissions, all declared by libraries and never used. They were removed on 2026-09-27.)
(A step-count permission was previously requested here without being used anywhere in the app, and was removed on 2026-08-26. It returned on 2026-09-10 together with the feature that uses it, described above.)
Exporting and sharing
You can export your data from Settings (a full backup, for moving to a new phone) and from Insights → Reports:
- A report for your doctor — a page (an HTML file you can open, print, or save as a PDF) covering the last 30 days, the last 90 days, or the full 120-day range ("All 120 days"). You can save it to a folder you pick, or share it to another app through Android's share sheet.
- A single table as a spreadsheet (CSV), saved to a folder you pick.
When you share a file, the app stages a copy in its temporary cache for the receiving app to read, and clears those copies rather than keeping them. Once a file is in a folder you picked or in another app, where it goes is entirely your decision, and this policy no longer governs it.
Adults only
GI AI is intended for adults aged 18 and over. It is not directed at children and should not be used by anyone under 18. (The on-device AI it uses is offered by Google under terms that require users to be 18 or older.)
What GI AI is not
GI AI is a journal that spots patterns in what you have written down. It is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease or health condition, or to give medical advice. The patterns it surfaces are plain counts of things that happened close together — they are things to notice and to discuss with a clinician, not findings. Medication reminders are a convenience based on a schedule you enter yourself; they are not a clinical dosing system. Always follow the instructions from your doctor or pharmacist over anything this app displays.
Changes to this policy
If the app ever begins collecting anything, this policy will be updated before that version ships, and the change will be made obvious in the app rather than buried here. The commitment is not "we will disclose it" — it is that on-device processing is the product, and losing it would make this a different app.
Contact
Questions about privacy: support@giai.app
Developer: Anthony Theofiledes · Package: com.acedtuned.giai