Last updated: August 18, 2026
Brimora has no account and no login. Everything you log stays on your device. This policy explains the data we do handle.
The foods you look up, the meals and symptoms you log, your thresholds, and your notes are stored in a local database on your iPhone. They are not uploaded to a Brimora server, because there is no Brimora account server. If you delete the app, that data is gone; use the export feature first if you want to keep it.
Histamine and related values are published, peer-reviewed measurements bundled inside the app and this website. Looking up a food does not send a request describing your search to us — the data is already on your device.
What you log — symptoms, foods, timing — is health-related information about you. It is exactly why the app keeps it local. We do not sell it, share it with data brokers, or use it for advertising. Brimora is not a covered entity under HIPAA, and this is not a medical record.
We use PostHog for product analytics to see which screens are used and where the purchase flow breaks. PostHog uses a pseudonymous, app-generated identifier — not your name or email. Session replay is enabled on this website and in the app. On the website text and user input are masked. In the app the replay is unmasked, so it can include the foods, symptoms and notes shown on screen; we use it only to diagnose and improve the app, never for advertising. We do not sell analytics data or use it for cross-app tracking.
The iOS app uses Firebase Crashlytics, Performance Monitoring, Analytics and Remote Config. Crash reports contain device model, OS version, app version and a stack trace. They do not contain your logs or your symptom history.
If you install Brimora after tapping an Apple Search Ads result, iOS may share an attribution token with us through Apple's AdServices framework so we can tell which campaign produced the install. It identifies the campaign, not you. Brimora shows no ads inside the app and runs no third-party ad SDKs.
Subscription payments are processed by Apple. Your entitlement is managed through RevenueCat, which receives the transaction and subscription data needed to keep your access in sync across your devices. Openverse never receives your card details.
Brimora is not directed to children under 13 and we do not knowingly collect their data.
Delete the app to delete your local data. For any privacy question or request, including deletion of analytics data associated with your device identifier, contact privacy@openverse.tech.