Mamba Privacy Policy

Effective September 24, 2026

The short version: your data lives on your phone. Mamba has no accounts, no ads, no analytics SDKs, and no tracking. We do not sell your data and we do not share it with anyone except as described below. Exactly two optional features send data off your device — the AI coach line and AI meal parsing — and each is off until you allow it in the app, on a screen that lists what will be sent and who receives it.

What stays on your device

Your workouts, nutrition logs, progress photos, body measurements, and face scans are stored on your phone. There is no Mamba account and no sign-in. The only server we run is the AI relay described below; it has no user accounts and keeps no copy of your data beyond the short-lived caches described there. Mamba never uploads data imported from Apple Health, face scans or face photos: the only copy of any of it that can leave your phone is a backup file you export yourself (see Apple Health and Face scans and selfies below).

iCloud sync

If your phone is signed into iCloud, Mamba backs up your workouts, nutrition logs, progress photos, measurements, and templates to your own private iCloud database so your data survives a lost or new phone. This is Apple infrastructure tied to your Apple ID: it is encrypted by Apple, the developer cannot access it, and nothing in it is shared with us or anyone else. Face scans and workouts imported from Apple Health are excluded from sync. You can turn sync off for Mamba in iOS Settings → your name → iCloud → Saved to iCloud.

Apple Health

If you grant access, Mamba reads your workouts (with their average heart rate and active energy), resting heart rate and VO₂max from Apple Health, read-only. It uses them only inside the app: imported workouts count toward your training load, and the heart-rate and VO₂max figures appear on the cardio screens. Mamba never writes to Apple Health. Imported Health data stays on your device: it is never synced to iCloud, never sent to our server or to Anthropic, and never included in the AI-coach snapshot — not even indirectly, as your streak or muscle status. A backup file you export yourself (You → Data & privacy → Export backup) does include imported workouts, so a restore is complete; it goes only where you send it.

Face scans and selfies (TrueDepth camera)

Putting your face on your avatar is optional. On iPhones with a TrueDepth camera, Body → Customize → Scan face in 3D uses Apple's ARKit face tracking for a few seconds to read the shape of your face and your expression, so it can capture a neutral, a smiling and a tired photo of you at the right moments. Two things are kept, both on your phone only: those photos, saved as ordinary selfie images, and a small map of the shape of the front of your face — a 96×96 grid of depth values plus six measurements (chin, eye, brow and nose rows, and face width), about 36 KB. No raw depth map, no face mesh, no expression data and no biometric template is stored, and nothing from the scan is used to identify you, to unlock anything, or for analytics or advertising.

The photos have one use: they are drawn onto your own 3D avatar and muscle map inside Mamba. The shape map was captured for an avatar-shaping feature that is switched off in this version; it stays on your phone only so you would not need to rescan if that feature is turned on, and it is not used for anything else. Both are stored in Mamba's private app container under iOS Data Protection and, like every app file, are part of your own iPhone backup if you have that turned on. They are never sent to our server, to Anthropic or to anyone else; they are excluded from iCloud sync and from the AI-coach snapshot, and the week card you can share shows the avatar without your face. If you export a Mamba backup file yourself (You → Data & privacy → Export backup), that file includes the shape map (not the photos) so a restore is complete; it goes only where you send it.

Your scan and photos stay until you replace or remove them. Body → Customize → Remove deletes the scan and all face photos from your phone immediately, and deleting the app deletes everything. If you use Photos or the plain selfie option instead of the 3D scan, only the photo is kept, and it is handled the same way.

AI features (optional — off until you allow them)

Two features send data off your device: the AI coach line on the Home screen and AI meal parsing in Fuel (Describe and Scan). Both are off by default. Before the first send, the app shows a consent screen that lists exactly what will be sent and who receives it, and nothing is sent until you tap Allow. You can turn either feature off at any time in You → Preferences → AI Features, and read the same disclosure at any time under You → Data & privacy → AI features & your data. When a feature is off, the app does the work on your device instead (a template coach line; matching against Mamba's built-in food database) and sends nothing.

Who receives the data

  1. Mamba's own server — a Cloudflare Worker operated by the developer of Mamba (this site). It receives each request over HTTPS, applies rate limits and caching, and forwards it. It has no user accounts, so there is no identity to attach the data to.
  2. Anthropic, PBC — the company that makes the Claude AI model. Its API generates the response. Anthropic processes the request under its commercial API terms and privacy policy: it does not use the data to train its models and, per its published data-retention policy, deletes API inputs and outputs within 30 days (longer only where required by law or to enforce its usage policies).

No other third party receives any of this data. It is not sold, not used for advertising or analytics, and not used to build a profile of you. The data is used for one purpose each: writing your coach line, or turning your meal into food entries.

The AI coach line — what is sent

If you allow the AI coach, at most once per day (and again after you finish a workout) the app sends a training snapshot to generate one short coaching line. The snapshot contains exactly:

It never contains your name, email or Apple ID, progress photos, face scans, body measurements, workouts imported from Apple Health, your location or contacts. Our server stores only the generated line, for up to 72 hours, then deletes it automatically; the snapshot itself is not stored.

AI meal parsing — what is sent

If you allow AI meal parsing, the app sends, only when you ask it to log a meal:

The only purpose is to turn that meal into food entries with estimated portions and nutrition. Nothing else about you — your profile, workouts, other meals or photo library — is included. Our server never stores the text or the photo; it stores only the parsed food list, for up to 7 days, under a cryptographic hash of the content (not under who sent it) so an identical meal returns instantly. Barcode scanning does not use AI (see below).

Barcode scanning

When you scan a food barcode, only the barcode number is sent to Open Food Facts and, if no match is found there, to the USDA FoodData Central database (via our server, which holds the USDA key). Nothing else about you is attached to the lookup.

What we don't do

Deleting your data

Deleting the app deletes everything stored on your phone. Your face scan and face photos can also be removed on their own from Body → Customize → Remove. If iCloud sync was on, your synced copy stays in your private iCloud until you remove it (iOS Settings → your name → iCloud → Manage Account Storage → Mamba). Data held by our AI relay ages out automatically: coach lines within 72 hours, parsed meal lists within 7 days. Anthropic deletes API data per its retention policy above.

Changes to this policy

This policy is updated whenever the way Mamba handles data changes. The effective date above changes with it.

Contact

Questions? Email info@pacificdigitalventures.org.