On-Device AI Processing
Sahni analyzes meal photos, nutrition-label OCR text, locally derived scanner evidence, portion information, and food descriptions entirely on your device. It uses Apple Vision, a Core ML model bundled with the app, and Apple's Foundation Models with SystemLanguageModel.default, which is Apple's on-device language model.
Sahni does not use OpenAI, Anthropic, Google Gemini, Private Cloud Compute, or any other cloud-based or third-party AI service. No meal photo, OCR text, barcode value, food description, meal history, nutrition information, HealthKit data, AI input, or AI-generated result is sent to an AI provider or to the developer. There is no third-party AI recipient and AI input and output remain on the device.
Data Sahni May Access
- Camera and photo library: used only when you choose to capture or select a meal or nutrition-label photo for on-device analysis.
- HealthKit: optional and free. Sahni reads only the health and activity data types you allow, and writes to the Health app only if you turn on Send nutrition to Apple Health (see Health Data below).
- Apple Watch: if you install the Sahni Apple Watch app, your iPhone sends it a summary of today over Apple's direct iPhone–Apple Watch connection (WatchConnectivity). See Apple Watch below.
- iCloud (Sharing, optional): only if you invite someone or accept someone's link, Sahni uses your own iCloud to share rounded ring progress. See Sharing With Family or Friends below.
- Blood results you enter: optional lab values you type in yourself (for example cholesterol, triglycerides, fasting glucose, TSH or ferritin), with the date and, if you add it, your lab's reference range.
- Local app storage: used to store meal history, scan results, saved package labels, nutrition goals and your profile answers, imported steps, weight and other Health values, your daylight log, any blood results you enter, saved recipes and recipe preferences (including any allergies you enter), GLP-1 journal entries if you use that companion, and other preferences needed for app features.
- Notifications: used only if you allow them, for local reminders you set in the GLP-1 companion. Reminders are scheduled on your device; their lock-screen text does not name a medicine or dose.
- App Store billing: subscriptions and purchase restoration are handled by Apple through StoreKit. Sahni receives transaction and entitlement status needed to unlock premium features.
- Apple system model downloads: on iOS 27, the first time you refine a food's outline in a photo, iOS may download Apple's own image-segmentation model. Apple delivers this system resource; no photo or other user content is uploaded as part of the download. Optional regional barcode food data is downloaded separately when you choose it, as described below.
Collection and Sharing
The Sahni app does not operate an account system, advertising service, analytics service, or developer backend for user content. (The separate, optional Sahni plugin for ChatGPT and Claude answers requests made inside those chats without keeping them; see Sahni in ChatGPT and Claude below.) At your choice, rounded ring progress is shared with people you invite through your own iCloud, and summaries, logging requests and optional experiment data are exchanged with your paired Apple Watch. Optional food-data downloads contact GitHub for public files, as described below. The developer does not collect or receive your meal photos, OCR text, food descriptions, meal history, nutrition information, HealthKit data, blood results, or AI inputs and outputs. Sahni does not sell user data or share it with third-party AI providers, advertisers, data brokers, or analytics companies.
Apple processes App Store purchases, subscription restoration, and its own system model downloads under Apple's own privacy terms. If you voluntarily contact Sahni support by email, the developer receives your email address and the information you choose to include solely to respond to your request.
Optional Barcode Food Data
In Settings › Barcode food data, Sahni checks a public list hosted on GitHub. You choose which regional files to download or update; no regional database is included in the installed app. GitHub receives your IP address and requests for the list and the files you select, including their region, under GitHub's privacy terms. No barcode, photo, food history, Health data or experiment data is included in those requests.
After downloading, barcode lookup runs locally and works offline. You can remove downloaded food data in the same screen without deleting your saved products or meals. Source attribution and coverage are shown before downloading; results must be checked against the package.
Optional Drinking Experiment
If you enable the experiment and start a session on your Watch, Sahni records motion for a bounded period and analyses it on the Watch to suggest possible drinking events. It stores session timing, motion-derived evidence, movement context, your drink and beverage annotations, candidate reviews, and available coverage and battery information on your paired Watch and iPhone. This is experimental and does not automatically add intake or write detections to Apple Health.
If you separately enable Apple Health context and grant permission, Sahni reads available heart-rate, heart-rate-variability, step and active-energy samples around the session for exploratory comparison. The detector works without this optional context. These records are not sent to GitHub, the developer or any outside service. You can review and delete experiment records in the app; deleting experiment-owned Health copies does not delete the original Health records.
How Sahni Uses Data
- To analyze food photos and nutrition labels on your device and help you log meals.
- To store your meal history, nutrition goals, preferences, and summaries locally in the app.
- To read approved HealthKit signals and reflect them in local progress, coaching, and related summaries.
- To save the meals you log to Apple Health, only if you turn that on.
- To read the blood results you enter against reference ranges, for information only, and to adjust recipe suggestions slightly.
- To show today's summary on your Apple Watch, if you install the Sahni Apple Watch app.
- To restore premium access and subscription state through Apple's StoreKit services.
Health Data
HealthKit access is optional and free.
- Reading: with your permission, Sahni reads your steps, weight, active energy, exercise minutes, sleep, resting heart rate, heart rate variability, breathing rate and body temperature to adapt your nutrition targets and show trends, and, if you turn on the daylight log, your Apple Watch time in daylight. Imported values are stored in the app on your device.
- Writing: only if you turn on Send nutrition to Apple Health (off by default), Sahni saves the energy and nutrients of the meals you log to Apple Health, one entry per food at the time you ate it. A nutrient Sahni has no value for is left out. Sahni never writes goals, targets, blood results or any other data type, and it changes or deletes only the entries it wrote: editing a meal updates its entries and deleting a meal removes them.
- Removing: Settings › Health & units › Apple Health can stop sending and remove every nutrition entry Sahni wrote. Erase all data also removes them. The rest of your Health data is never changed by Sahni.
HealthKit data is not sent to the developer, an AI provider, advertisers, analytics services, or other third parties, and it is never used for advertising or marketing. If you deny or revoke HealthKit access, the rest of the app remains available except for features that depend on it.
Blood Results
Blood results are optional values you enter yourself. Sahni stores them only on your device, reads them against reference ranges for information (never a diagnosis), and may use a few of them to move recipe suggestions up slightly. They never change your targets, are never written to Apple Health, and are not sent to the developer or anyone else. You can edit or delete any result in the app.
Apple Watch
If you install the Sahni Apple Watch app, your iPhone sends it a summary of today: calories and macronutrients against your targets, vitamins and minerals (with Premium), the names and calories of your recent meals, Coach's current suggestion (with Premium), your daylight timer and the rings of people who share with you. This uses Apple's direct connection between your iPhone and your paired Apple Watch; nothing goes through a developer server. The watch keeps the latest summary and sends back your requests to log a recent meal again, log a food you say, log water or undo that water entry, or start or stop the daylight timer. Optional drinking experiment records are stored separately as described below. A food you say is turned into text by Apple's dictation on your watch; your iPhone then identifies it with its on-device model and logs it. Each update replaces the previous summary, and deleting the watch app removes it.
Sharing With Family or Friends
Sharing is optional and off until you invite someone. When you invite a person, Sahni creates a private space for them in your own iCloud (Apple's CloudKit). You either invite the people you pick in Messages, where Apple adds them by their Apple Account, or send a one-time link yourself in any app. Only the people you picked, or the one person who opens the link, can see what you share with them, read-only. Sahni never reads their contact details.
- What they see: for each of the last 7 days, how far your Meals, Protein and Plants rings got, rounded down to 0, 25, 50, 75 or 100%, and, only if you choose, how many meals you logged. They also see the name you type for them to know you by, and their space holds the name you gave them and your settings for them. Sahni never reads or shows your iCloud name. Never what you ate, photos, calories, weight, Apple Health data, blood results, medication or your health answers.
- Where it is: in your iCloud, stored as encrypted fields, and in the iCloud of the person you share with. The developer has no server and cannot read it.
- Control: you can hide your rings from a person (which deletes the days already shared) or stop sharing with them (which deletes their space and everything in it). Erase all data deletes every space you created. Days older than a week are deleted automatically.
- People who share with you: accepting their link lets you see their rings; it never shares yours. Their rings stay in your iCloud's shared area until they stop sharing.
iCloud is provided by Apple under Apple's own privacy terms. Sahni Sharing is not available while a clinician guides your plan in the app.
Sahni in ChatGPT and Claude
Separately from the app, Sahni offers an optional plugin for ChatGPT and Claude that calculates daily nutrition targets, weighs household portions and lists the sources behind them. It works only inside those chat services, when the chat calls it for you. The Sahni app never sends anything to it, and the plugin never reads anything from the app.
- What it receives: the details the chat passes to answer your request: age, sex, height, weight, activity, goal and any health context you mention (such as pregnancy, breastfeeding, diabetes, kidney disease or an eating-disorder history), the portions you ask about, or the words you search the sources for. It does not receive your name, contact details, chat history, photos or anything stored in the Sahni app.
- How it is used: only to calculate the answer to that request. Never for advertising, profiling or training any AI model.
- Retention: none. The plugin keeps no copy of what it receives and writes no logs of it. The developer does not see what you send; the developer sees only overall service statistics, such as how many requests were made.
- Recipients: Cloudflare runs the plugin's server and handles each request, including your IP address and the address requested, to deliver it, under Cloudflare's privacy policy. Your conversation, including what you tell the chat, is handled by OpenAI or Anthropic under their own privacy policies.
- Your choices: the plugin needs no account. Health context is optional, though leaving it out means the targets can't take it into account. You can remove the plugin at any time in ChatGPT or Claude.
The plugin's answers are general nutrition targets, not medical advice, and it does not calculate targets for anyone under 15.
Retention, Deletion, and Control
Your data is stored in protected storage on your device for as long as you keep it in the app. In Sahni, go to Settings › Your data to:
- Export data (CSV): every meal with its items and nutrients, your daily steps and weight, your daylight log, any blood results you entered, any GLP-1 doses and check-ins, and your saved recipes and recipe preferences (including allergies), as files you can save or share. Sahni deletes its own copy once the share sheet closes.
- Delete GLP-1 history: permanently deletes every GLP-1 course, including stopped ones, with all its doses and check-ins, and turns off GLP-1 reminders. Your meals, weight and other data stay.
- Erase all data: permanently deletes everything Sahni keeps on your device, including meals and scanned foods, saved package labels, targets and goal history, your profile, imported steps, weight and Health data, your daylight log, blood results, GLP-1 courses, doses and check-ins, saved recipes and recipe preferences, and the app's caches. If Send nutrition to Apple Health is on, the nutrition entries Sahni wrote to Apple Health are removed first, and every sharing space you created in iCloud is deleted. This cannot be undone. Setup then starts again.
Deleting the app also removes its data from your device. Device backups made before an erase or deletion still contain your data until those backups are replaced. Your App Store subscription and the rest of the Health app's data are not affected by either; manage them in iOS Settings and the Health app. After an erase, if Apple Health sync is on, Sahni reads your recent Health data again. HealthKit permissions can be changed at any time in the Health app and iOS Settings.
Support emails may be retained only as reasonably necessary to respond, troubleshoot, and maintain the support correspondence. You may request deletion of support communications by contacting the email address below.
Contact
For privacy questions or deletion requests, contact saba.aziz991@gmail.com.