# A calorie tracker that keeps your health record on your phone

> Anlo stores your meals, meds and history on your device, with no email sign-up. Here's exactly what stays on your phone, what's sent to an AI model, and why.

Most trackers start by asking you to make an account, and your food diary lives on their servers from then on. Anlo doesn't work that way: your health record lives on your phone. It does use an AI model to read meal photos and sentences, and this page says plainly what that involves.

## What stays on your phone

Everything you log is stored in the app on your device:

- meals, their photos, and the calories and nutrients estimated for them;
- weight and body measurements;
- lab results such as uric acid and lipids;
- medications, supplements and the doses you've checked off;
- water, notes, your targets and profile, and what Anlo has learned from your corrections.

There's no Anlo account holding your health record, and no email address or name is needed to use the app.

## What leaves your phone, and why

Reading a photo or a sentence takes a large AI model, which doesn't fit on a phone. So when you ask Anlo to read something, this happens:

1. The photo or text goes to Anlo's server, `api.anlo.app`.
2. The server passes it to an AI model on Cloudflare Workers AI, which returns items, amounts and estimates.
3. The answer comes back and is saved **on your phone**.

We don't store the photo, the text or the answer on our servers, and we don't use them to train models. Our request logs record only technical details, such as which feature was used and how long it took, never food names, photos or health values.

The same path is used for every AI feature:

| You ask Anlo to… | What's sent |
|---|---|
| Read a meal photo | The photo, plus a short list of your own food names to improve matching |
| Log a meal you typed or said | The text |
| Read a nutrition label or a lab report | The photo |
| Summarize a day or a 14-day period, or answer a coach question | The relevant part of your log and your question |

**Without the AI**, Anlo still works: typed meals are parsed on the phone and nothing is sent. Photos need the AI.

**Voice:** your phone's speech recognition turns speech into text. When iOS can do that on the device for your language, the audio never leaves the phone; otherwise iOS may send it to Apple under Apple's policy. Anlo only ever receives the text.

## The account is a key, not a profile

Turning on the AI creates a cryptographic key on your phone and a 24-word recovery phrase. Our server keeps the **public** half of the key, when it was created, and daily usage counts for fair use. There's no name, email or phone number, and the recovery phrase stays with you.

## Facts kept apart from guesses

What you logged and what the AI concluded are stored and shown separately. Estimates are labelled as estimates, you can correct any entry, and Anlo points out patterns without claiming that one thing caused another.

## What's not here yet

**Encrypted sync across devices is planned.** Until it ships, your log is on one phone, so export a backup file from time to time (Settings → Data & backup). When sync arrives, your data will be encrypted on your phone before it leaves.

## How to check any tracker's privacy

Whatever app you use, five questions tell you most of what you need to know:

1. **Does it need an account** with your email, and what's stored in it?
2. **Where is the food log kept**: on the phone, or on the company's servers?
3. **What's sent for AI processing**, and is it kept or used for training?
4. **What does the App Store privacy label say** under "Data linked to you"?
5. **Can you export and delete** your data yourself?

For the details behind this page, read Anlo's [privacy policy](/privacy/), and see [how logging by photo, voice or text works](/log-meals-by-photo-voice-text/).

Anlo is in early testing. [Leave your email](/#join) and we'll send an invite.