Scope and contact
WeWeight is an iPhone app for personal body-weight tracking and self-directed goal planning. This policy describes the current app implementation. Contact the developer, Cyril Blum, at apps@cblum.me. The product website has its own website privacy notices; this app policy does not describe every WordPress website processing activity.
Information on your device
WeWeight stores manually entered measurements, imported body-weight samples, phase plans and export settings as JSON/settings in local iOS UserDefaults. Measurements contain a date, weight and source. The optional GitHub token is stored in iOS Keychain. There is no WeWeight account or developer-operated health-data server. WeWeight does not add application-level encryption to stored measurements or CSV files. Device security and any device backup depend on your Apple settings and services.
Health access
Only choosing Import Weight from Health requests Health permission. The app requests read access to body mass only and no write access. It fetches available body-weight history and stores a local copy for display and calculations. Manual tracking and goal planning work without this permission. You can change Health permissions in iOS. Revoking permission does not itself delete measurements already imported into WeWeight. iOS does not tell apps whether read access was denied; if Health returns no data or an error, WeWeight keeps the existing local copy unchanged.
Optional GitHub connections and exports
GitHub export is optional. Test Repository sends a request to GitHub with the configured repository identity and, if entered, the access token. Upload actions send the selected phase-plan CSV or a CSV of your stored weight history to the configured repository using GitHub’s contents API over HTTPS. The weight history contains manual entries and body-weight measurements imported from Apple Health. Versions after 1.1.1 show a confirmation first that states how many measurements are sent, how many come from Health, and the destination; nothing is uploaded without that confirmation. GitHub receives normal connection metadata, including your IP address, and processes requests under its own terms and privacy policy. The developer does not receive an additional copy through this app flow.
Use a private repository and restrict collaborators and token permissions. Weight exports contain dates and weights; phase exports contain phase dates, type and target weights. CSV exports are not encrypted by WeWeight. Public repositories disclose their contents publicly. Git history, forks, clones, provider backups and other copies may retain earlier versions even after a current file is deleted. GitHub processing locations and retention are governed by GitHub, not a WeWeight or Hetzner retention schedule.
Files, retention and deletion
You choose phase-plan imports and local CSV export destinations using system file pickers. Importing a phase CSV replaces the current phase plan. Exported files are independent copies and may be stored or synced by a service you select. The app does not automatically remove these files.
There is no timed automatic deletion of local app data. You can delete manual measurements and phase plans in the app. In versions released after 1.1.1, Delete Imported Copies (Weight data screen) deletes WeWeight’s local copy of measurements imported from Health after confirmation; it does not change data in Health, manual measurements, goals, GitHub settings, exports or existing device backups. Version 1.1.1 and earlier have no such action. Deleting the app normally removes its app container; offloading it preserves its documents and data. Keychain items, device backups, original Health records and exports may remain independently; versions released after 1.1.1 delete a GitHub token left over from an earlier installation on the first launch after reinstalling and mark the token as device-only, so it is not restored to a different device from a backup. Remove GitHub Connection in Settings, or clearing the token field, deletes the token from Keychain on the device. To invalidate the token itself, revoke it in GitHub; neither action deletes previous exports. Manage original Health records in Health and remove shared or backed-up copies through the relevant services. There is no developer health-data database to purge or restore.
Analytics, diagnostics and support
The inspected app contains no advertising, tracking, third-party analytics or crash-reporting SDK. Apple may collect or share system diagnostics according to your settings and Apple’s policies; no particular report contents or retention period are promised here. If you email support, the recipient and mail providers receive the information you choose to send. Do not send tokens or unnecessary health information. No fixed support-email retention schedule has been verified.
Choices and sensitive information
Health information is sensitive. Use device access protection and carefully choose file destinations and repository permissions. The app does not verify your age or provide supervised clinical care. Simulator screenshots use fictional Sample data; those fixtures are not loaded on physical devices.
Health and use notice
Use the app at your own risk. To the extent permitted by law, it is provided without warranties of accuracy, completeness, availability or fitness for a particular purpose. To the extent permitted by law, liability for damage from use or unavailability is excluded, including data loss, lost profits and consequential damage. Mandatory legal rights and liability remain unaffected, including for intentional misconduct or gross negligence and where liability for personal injury cannot be excluded.
Further information
GitHub privacy statement · Apple privacy · WeWeight product page
Material changes to app data flows require a corresponding policy update.