Privacy Policy

Slab was built so that this page could be short. There is no account to create and no server of ours for your log to sit on, so most of what a privacy policy usually has to explain simply doesn’t happen here. What follows is the whole of it.

What changed on October 8, 2026

Slab for iPhone now sends anonymous usage information to PostHog, an analytics service, so we can see where the app works and where it doesn’t. It is described in full under Analytics below. Your log, your weight, your GLP-1 answer and your target still never leave your devices.

The short version

Slab keeps your log on your phone. There is no Slab account to create and no Slab server for your data to sit on. On iPhone, if you’re signed into iCloud, it also syncs through your own private iCloud container, which only your devices can open. On Android, your phone’s own backup can carry it to your next phone through your Google account.

Two things leave your phone. Scanning a barcode sends its digits to Open Food Facts. And on iPhone, Slab sends anonymous usage information — which screens you reach and which buttons you press — to PostHog. Neither carries your name, your weight, your GLP-1 answer, your target or what you’ve logged, and neither is tied to you.

What Slab stores

Everything below lives on your device, and in your own iCloud or Google backup if you have that switched on:

• Your log — each entry’s food, amount, the protein it contributed, and the day it belongs to.
• Foods you create or save from a barcode scan, meals you save, and which of them you’ve pinned.
• Your daily protein target, and the history of targets you’ve set.
• The answers behind that target: your body weight, the unit you prefer to see it in, what you’re training for, how many days a week you train, and whether you told us you’re taking a GLP-1.
• If you answered About you during setup: your gender and age band. Both are optional, and neither changes your target.
• Your preferences — the hour your day rolls over, your reminder, what the widget shows, and whether you’ve finished onboarding.

That’s the complete list. Slab never asks for your name, your email address, your phone number or a password, because it has nothing to attach them to.

Where your data lives

In a database inside the app on your device. What happens beyond that depends on which phone you’re holding.

On iPhone: if you’re signed into iCloud, Slab also syncs through a private CloudKit container tied to your own Apple Account, which is how it reaches your other devices and comes back after you reinstall. That container belongs to you, not to us — Apple’s encryption and your Apple Account are what protect it, and we have no way to read it. Turning iCloud off for Slab keeps everything local to that one phone.

On Android: Slab doesn’t sync between devices. If you have Backup by Google One switched on, Android includes Slab’s database in your phone’s backup, encrypted with your screen lock, so that it comes back when you set up a new phone or reinstall. That backup sits in your own Google account, not with us, and we have no way to read it. Backup is a phone-wide setting under Settings → Google → Backup; switching it off keeps everything local to that one phone.

The anonymous usage information described under Analytics is the one thing held somewhere else: by PostHog, on servers in the United States.

Your weight and your GLP-1 answer

Two of the questions Slab asks are health-related: what you weigh, and whether you’re taking a GLP-1. Both exist for one reason — they change the protein target the app calculates — and both are treated like everything else in your log. They stay on your device and in your own iCloud or Google backup. They are never sold, never shared, never used for advertising, never sent to our analytics, and never sent to us, to an insurer, to an employer, or to anyone else. Nor is anything that would reveal them: the setup screen shown only to someone taking a GLP-1 is never reported as seen, and the training goal you choose is never sent. Slab does not read from or write to Apple Health or Health Connect.

Barcode scanning

When you scan a product, the app sends the barcode digits to Open Food Facts to look the product up. The request carries the digits and a fixed line identifying the app (“Slab/1.0 (iOS; protein tracker)” or “Slab/1.0 (Android; protein tracker)”) — no account, no device identifier, nothing about you or what else you’ve logged. The camera work happens entirely on your device, using Apple’s built-in scanner on iPhone and Google’s on-device ML Kit scanner on Android: no photo or video frame is ever uploaded, and none is saved.

Analytics

On iPhone, Slab sends anonymous usage information to PostHog, so we can see which parts of the app people use, where setup loses them, and which foods they look for and can’t find. The Android app sends none.

What is sent:

• Which screens you reach, and which buttons you press — for example, that a block was added from a card or from search, that a plan was chosen, or that the app was closed on a particular screen.
• The words of a search that found nothing, cut to 40 characters, so we know which foods to add. A search that finds something sends no words at all.
• Your gender and age band, if you answered About you.
• Your subscription’s state — on a free trial, paying or lapsed; the plan; and whether it is set to renew. Never your payment details, which we never see.
• A few settings: whether a reminder is on, the hour your day ends, what the widget shows, and which widgets you’ve added.
• The details PostHog adds to every event: the app version, your iPhone model and iOS version, screen size, language and time zone, and whether you’re on Wi-Fi or mobile data.

What is never sent: your name or any contact details; your weight, your GLP-1 answer, your training goal or your target; the foods you log or the amounts; anything you type except a search that found nothing; and your location. Your IP address reaches PostHog with each request, as it does any server, and is discarded on arrival rather than stored or used to work out where you are.

How it’s tied to you: it isn’t. PostHog knows your install only by a random identifier the app makes up, which is not your Apple Account, your device’s advertising identifier, or anything else that leads back to you. We never link it to who you are, never combine it with anything from another company, never sell it, and never use it for advertising. Delete all my data throws the identifier away and starts a new one, so nothing afterwards connects to anything before.

PostHog keeps these events for one year, then deletes them. Slab has no session recording, heatmaps or surveys, and no advertising, attribution or crash-reporting SDK.

Advertising

Slab shows no ads and contains no advertising SDKs. There is no advertising identifier in the app, and there is no profile of you anywhere to target.

Purchases

Subscriptions are handled entirely by the store you bought the app from — Apple through StoreKit on iPhone, Google through Play Billing on Android. The store tells the app whether your subscription is active, on a trial, or set to renew, and that’s all we learn. We never see or process your payment details, and there is no third-party purchase, paywall or attribution SDK in the app.

Crash reports

Slab includes no crash-reporting SDK. If you’ve opted in to sharing diagnostics at the system level, Apple may pass us anonymised crash reports through App Store Connect, and Google may pass us anonymised crash and stability reports through the Play Console. Those come from the platform, contain no food entries and nothing personal, and you can switch them off under Privacy & Security on iPhone or under Settings → Google → Usage & diagnostics on Android.

Third-party services

Four:

• Apple — iCloud (CloudKit) for your private sync, and StoreKit for subscriptions, on iPhone.
• Google — your own account’s backup, and Play Billing for subscriptions, on Android.
• Open Food Facts — queried at the moment you scan a barcode, with the digits only.
• PostHog — anonymous usage analytics, on iPhone, as described above. PostHog processes it on our behalf and may not use it for anything else.

There is no other service in the app. No backend of ours, no hosting provider holding your log, no data broker.

Your controls

Because your log is on your device, you control all of it:

• Delete any single entry from the stack, or any food or meal you’ve saved.
• Settings → Delete all my data erases every entry, food, target and setting from the device. On iPhone it also clears your iCloud container and starts a new anonymous analytics identifier; on Android the next automatic backup replaces the old copy with the empty one.
• Settings → Your log exports every day and every entry as two spreadsheet files, whenever you want them.
• Turn iCloud off for Slab on iPhone, or Backup by Google One off on Android, to keep everything on one phone.
• Delete the app to remove the on-device copy.

We hold nothing that identifies you. The anonymous usage events in PostHog are not linked to any person, so we have no way to find yours on request; Delete all my data is what separates you from them.

Children

Slab isn’t directed at children and collects no personal information from anyone, children included.

Changes to this policy

We may update this policy from time to time. When we do, we’ll revise the effective date at the top of this page. If a change ever means Slab starts collecting something it didn’t before, we’ll say so plainly at the top of the page rather than quietly widening a sentence — as we have on October 8, 2026.

Contact

Questions about privacy? Email admin@onestepforwardventures.com.