Overview
IBS Log is a local-first iPhone app for quickly recording food, symptoms, stool, sleep and notes. Your diary entries, transcripts, local audio files and exported files are stored on your device unless you choose an action that sends data to the server.
Data Stored On Your Device
The app stores your log timeline, transcripts, structured log items, local queue state, local audio and app settings on your device. You can export local logs from the app before resetting the device or deleting the server account.
Data Sent To The Server
The server is used for account control, purchases, action balance and AI processing. It may store account, device and session records, action ledger entries, purchase claim records, processing request metadata, temporary processing content, usage events, safety checks, client diagnostics, device transfer packages and data snapshot packages when those features are used.
IBS Log server infrastructure is hosted with Hetzner. Server data and encrypted backups are stored on infrastructure we operate there.
IBS Log uses Sentry for sanitized crash and error diagnostics. Sentry diagnostics are configured to avoid storing diary content, transcript text, audio, request or response bodies, local database contents, session tokens, device credentials, transfer tokens, IP addresses and derived geolocation. Diagnostic events may include technical app, device, operating system, release, stack trace and timing details needed to diagnose crashes and server errors.
AI processing only happens after you submit a processing action. Text, audio, transcription text and AI output are processed temporarily to create the requested transcript and structured log output.
IBS Log uses the OpenAI API for AI processing. OpenAI API data is not used for training by default. IBS Log sends extraction requests with OpenAI's storage flag disabled and disables provider request storage or logging where those OpenAI controls are available. Standard OpenAI abuse-monitoring retention may still apply unless an approved retention control is active, so IBS Log does not claim Zero Data Retention at this time.
After the result is delivered to the app, or after at most 48 hours if the app never acknowledges it, IBS Log deletes or scrubs the processing content from the server. Limited operational metadata remains, such as request status, timing, failure codes, usage records and action accounting records. A succeeded action stays consumed even if the temporary result expired before the app downloaded it.
Server Account Deletion
You can delete the server account in the app from Settings, Account, Delete server account. This is different from resetting local data on one device.
Server account deletion removes the server account, action balance, sessions, device links, transfer state, snapshot state, processing metadata, usage events, safety checks, client diagnostics and related server blobs. It also revokes old session tokens and device credentials.
After deletion, the app clears identity and local data on this device and returns to a fresh-start state. If the app later creates a new server account on the same install, that new account starts with 0 actions.
Purchase Retention
Consumable App Store purchases are not refunded by account deletion. Refund requests go through Apple.
After account deletion, IBS Log keeps only minimal scrubbed App Store transaction retention needed for accounting, fraud prevention and preventing duplicate purchase claims. Account linkage, app account tokens, signed transaction payloads and raw account-bound purchase payloads are removed.
Other Devices
Deleting the server account does not remotely erase local data that may already exist on another device. Export or delete local data on each device you control.
Contact
For privacy or deletion questions, contact [email protected].