Privacy Policy

Last updated: May 7, 2026

OctiCorp ("we", "us", "our") operates the AbbyAI mobile application ("App"). This page describes how we collect, use, and protect personal data when you use the App.

Information We Collect

Health & Fitness Data: With your permission, AbbyAI collects:

• Weight (entered during onboarding)
• Meals logged, calories, and macronutrient data
• Exercise activities and workouts completed
• Steps, sleep, and weight from Apple HealthKit (with your explicit authorization)
• Water intake tracking

AI Conversations: Messages you send to the AI coach are sent over TLS to our backend, forwarded to the AI model, and the response is streamed back. Conversation history is stored locally on your device. Conversations are not used to train AI models.

Account Information: If you sign in with Apple, we receive a stable Apple-issued user identifier (and optionally your name, only if you choose to share it). We do not receive your password. To support session continuity without re-prompting Sign in with Apple, we store the Apple-issued token (encrypted at rest) keyed to your Apple user identifier.

Usage Metadata: When you use the AI features, we record an anonymized per-call record so we can size capacity and set fair subscription pricing. Each record contains: a stable user identifier (not your name or email), the endpoint called, token counts returned by the model, response latency, and the resulting model cost.

How We Use Your Data

• To provide personalized meal plans, exercise suggestions, and coaching
• To calculate calorie targets and nutritional recommendations
• To display progress charts and streak tracking
• To send push notifications at your preferred schedule
• To process AI coaching conversations

Data Storage & Security

Your health data is stored locally on your device. Cross-device iCloud sync is not enabled in the current version of the App; we may enable it in a future update, at which point your data would sync via your personal iCloud account using Apple's CloudKit. We do not store your health data on our servers.

AI requests are sent to our backend (hosted on a cloud provider) which forwards them to the AI model. The backend monitors reqeusrts, imposes limits and performs and verification. Requests are authenticated via Sign in with Apple and our backend, and encrypted in transit using TLS 1.2+.

Third-Party Services

• Apple HealthKit: Read access for steps, sleep, and weight, with your explicit permission. Data stays within the Apple Health ecosystem; we do not transmit HealthKit data to our servers.
• Sign in with Apple: Authentication is handled by Apple. We receive a user identifier and (if you choose to share) your name. We never receive your password.
• AWS (Amazon Web Services): Our backend infrastructure runs on AWS. AI requests are processed through Amazon Bedrock (various LLM models).
• OpenFoodFacts: Food database searches use the open OpenFoodFacts API.

Data Sharing

We do not sell, trade, or share your personal health data with third parties. Your data is never used to train AI models.

Data Retention

Your data remains on your device for as long as you use the app. If you delete the app, local data is removed. Server-side data we hold (Apple-issued user identifier and encrypted refresh token) is retained while your account is active and can be deleted on request.

Your Rights

• You can delete all local app data using the "Reset App" option in Settings
• You can revoke HealthKit access at any time in iOS Settings
• You can revoke Sign in with Apple access in iOS Settings > Apple ID > Sign-In & Security > Sign in with Apple
• You can request deletion of all server-side data by emailing support@octicorp.com

Children's Privacy

AbbyAI is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, contact us at:
Email: support@octicorp.com
Company: OctiCorp