Privacy Policy — Weighty
Controller: E4U Software Sdn Bhd, 3B-37-3A Arte S 3, Persiaran Bukit Gambir, 11700 Gelugor, Pulau Pinang, Malaysia, weighty@mailtonne.eu
EU representative (Art. 27 GDPR): Leonard Bugla, Deichstr. 49, 47119 Duisburg, Germany, weighty@mailtonne.eu
Effective: 17 October 2026
Weighty is a health & fitness app. We process your data to provide the app's features — not for advertising. There is no tracking across other apps or websites, no advertising or analytics SDKs, and we don't sell data. When you share to an Instagram story, the app hands the picture or video to the Instagram app on your device only when you tap it; Weighty itself sends nothing to Meta.
On your device
Your entries — weight, height, body measurements (girths, body fat), meals/calories, water, workouts, cycle (period, phases, mood, symptoms), fasting, digestion and progress photos — are stored in a database on your device. Deleting the app removes them from the device (for the copy in iCloud see the next section).
iCloud sync
With iCloud sync on (Profile → Data, on by default), Weighty also keeps this database in your private iCloud database through Apple's CloudKit — in your own iCloud account, not with us. That way it survives a new phone and stays the same on all your devices signed in with the same Apple Account. This includes values Weighty took over from Apple Health into its own log. We have no access to this database and can't read it; Apple stores it under the iCloud terms and it counts toward your iCloud storage. Turn sync off and, from the next start, your data stays on the device only. If you sign out of iCloud or turn off iCloud for Weighty, iOS removes the synced data from the device; it's downloaded again when you sign back in. Delete the iCloud copy in Settings → [your name] → iCloud → Manage Storage → Weighty.
Apple Health (HealthKit)
With your permission Weighty reads, among others, weight, height, waist circumference, body fat percentage, lean body mass, date of birth, biological sex, steps, active energy, sleep, heart-rate variability, resting heart rate, workouts and workout routes, and writes weight, waist circumference, body fat percentage, finished workouts and — if you turn on cycle sync — period days back. This happens on your device. HealthKit data is never used for advertising, never sold and never sent to us. With iCloud sync on, values taken over into Weighty's own log are kept in your private iCloud like your other entries (see above).
Apple Watch
The Weighty app on your Apple Watch shows what your iPhone sends it (water, fasting, weight, the workout you're doing) and sends back what you log on the wrist. iPhone and watch exchange this directly (Apple's WatchConnectivity); none of it goes through our server. During a workout you do in Weighty, and with your permission, the watch reads your heart rate and active energy from Apple Health and saves the workout with them there.
Food lookups
Food searches and barcode scans query Open Food Facts and USDA FoodData Central. Only the search term or barcode is sent. After a barcode scan, Weighty also asks Open Food Facts for better-rated products (Nutri-Score) in the same category; for that, the product's category and your country (from your device's region setting, not your location) are sent. The product pictures are loaded from Open Food Facts.
Apple Intelligence on your device
On an iPhone or iPad with Apple Intelligence, Weighty can read a meal you describe in your own words, write a personal line for your weekly recap and show a short note after you weigh in. This is done by Apple's language model on your device (Foundation Models) — your text and your data are not sent to us, to Apple or to anyone else for it. To find nutrition values for a described meal, only the food names it found are looked up in Open Food Facts and USDA, like a normal search. You can turn this off in Profile → Apple Intelligence.
Camera & photos
Weighty uses the camera only when you scan a barcode or a nutrition label, take a progress photo, or let it count your reps in a workout. Labels are read on your device (Apple Vision text recognition); the photo is neither stored nor uploaded — only the values you confirm are saved. For a progress photo, Apple Vision recognises your pose on your device to line you up with your last photo; the live image is neither stored nor sent, only the photo you keep is saved. Progress photos you take or pick from your library stay on your device. The timelapse made from them is created on the device too (Apple Vision finds your body locally to line the photos up); Weighty adds it to your photo library — with your permission, add-only — only when you save it. When it counts reps, Apple Vision finds your joints on your device, frame by frame; no picture is ever stored or uploaded. In Territory in AR (Fitness Fights) Weighty draws the territory around you over the live camera picture; nothing from the camera is stored or sent.
Fitness Fights & friends (optional)
If you use the social features, an account is created on our server (weighty-social.bugla.io) —
via Sign in with Apple (Apple user identifier, possibly name and e-mail) or as a guest (device
identifier). It stores your handle, display name, friendships, cheers (including messages),
challenges and a push token with the app's language (so notifications arrive in it). Friends see
your goal progress in percent and a 30-day trend, never your actual weight. Gym results and
the routes of your runs and rides (precise location) are only uploaded after you turn on sharing
in the Fitness Fights settings. When someone takes your ground, we keep who, roughly where (a
point and a coarse outline of the lost ground, a neighbourhood name) and how much for 48 hours so
you can take it back, and delete it about a week later. Our server looks the neighbourhood name
up with Nominatim (OpenStreetMap Foundation); only a coordinate is sent, nothing that links
it to your account. A challenge link you share shows your display name to whoever opens it
(also without the app), for 30 days or until you withdraw it in the settings. The page behind
the link sets no cookies and loads nothing from third parties.
Seasons: for the four-week Fitness Fights seasons the server computes your season ground,
distance and place from the routes you uploaded. Other players see that in the season standings
(worldwide, friends, "Nearby") — never your routes. For "Nearby" a rough centre is computed from
your routes; it is only cached for a few minutes and never shown to anyone, and its place name is looked up with Nominatim
(only a coordinate is sent). When a season ends we keep your result (place, season ground,
distance, number of activities, ground taken, rematches won) for as long as your account exists;
it shows as a badge on your profile. People you blocked never see you in any standings. My
map downloads only your own routes to your device and caches them there (removed when you sign
out). Reports about other users are
logged and reviewed by us.
Location
Only while you record a run or ride (also with the screen off), to find gyms near you, and while Territory in AR is open — then the app asks our server for the territory in an area about 1–2 km across around you, like panning the map; your exact position isn't sent. Map tiles are loaded from OpenFreeMap based on OpenStreetMap, which sees the map area you view.
Crash reports
When Weighty crashes or freezes, iOS (Apple MetricKit) prepares a technical report — the kind
of crash or hang, the program's call stack, the time span — plus a daily summary of launch times
and hangs. Weighty sends these reports to our server (weighty-social.bugla.io) together with
the app version, build, iOS version and device model (e.g. "iPhone17,1"). They do not
include your account, any device or install identifier, your entries or health data; the app
removes the region setting first. The IP address is only used briefly (at most two hours, as a
hash) to limit how many reports can arrive, and is not stored. Reports therefore can't be tied
to a person and are deleted after 90 days. A report that can't be sent waits on the device
for up to 30 days. To turn this off: Profile → Send crash reports — nothing is sent any more
and reports still waiting are deleted.
Purposes & legal bases (GDPR)
Providing app functionality (Art. 6(1)(b)); your consent for Health, Location, Camera and the iCloud sync of your health data (Art. 6(1)(a); health data Art. 9(2)(a) — you can turn sync off at any time); legitimate interest in stability (crash reports) and abuse prevention ((f)). You can withdraw consent any time in iOS Settings or in the app, and object to crash reports in the app at any time.
Deletion
- Account: in the app under Fitness Fights → Settings → Delete Account. This removes your profile, friends, cheers, challenges, runs and territory from our server.
- Crash reports: automatically after 90 days (they can't be matched to an account).
- On-device data: by deleting the app.
- iCloud copy: Settings → [your name] → iCloud → Manage Storage → Weighty → Delete Data.
Your rights
Access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority. Contact: weighty@mailtonne.eu. You can also send your requests to our EU representative (Art. 27 GDPR, see above).
Children
Weighty is not directed to children under 16.
Changes
We may update this policy; the current version is always at this URL.