Privacy Policy

What happens to your information.

Last updated: 7 August 2026

Posh Tunnel Ltd (“Posh Tunnel”, “we”, “us”) provides the Rescue Your Future Self mobile app (“RescueMe”) and this website. We are responsible for the personal information described in this policy.

1. Information that stays on your iPhone

Exact Apple Health samples and identifiers, selected and generated Future Me pictures, meal-camera previews, receipt images, private kitchen inventory, reminder schedules, and detailed adaptive-learning records normally stay on your device.

Your food, water, training, weight, profile, and game progress are also stored locally. If you sign in and choose account backup, an approved progress snapshot can be stored with your account. Current snapshots exclude photos, raw Apple Health samples, passwords and sign-in codes, analytics queues, private kitchen inventory, and current free-form Rescue Log text.

2. Information we process away from your device

Accounts, backup, and purchases

If you create an account, we process your verified email address, random account and device identifiers, device name, app version, sign-in security state, signed-in devices, and the progress you choose to back up.

Apple gives us purchase status such as the product, entitlement, renewal, and expiry state. We do not receive your payment-card details. We keep limited AI usage and cost records so we can apply allowances, reconcile provider costs, and prevent abuse.

Rescue Circle and cooperative play

Optional social features can store your display name, rotatable friend code, invitations, friend relationships, mute and block choices, sharing settings, preset encouragements, daily summaries, cooperative party progress, boss and quest labels, contribution records, and trophies.

Sharing starts off. Friends do not receive your email, account backup, food names, weight, photos, raw Apple Health data, AI usage, billing information, or product analytics. Before cooperative play, the app shows the limited boss-related information that will be shared.

Product analytics

RescueMe sends first-party analytics to help us find setup problems, crashes and failures, understand which features help, and measure whether players return. We do not use an advertising analytics service or session replay.

These events may include random identifiers, app and build version, platform, locale, timezone offset, broad device class, screens and actions, success or failure category, coarse timing, reminder state, broad route, water or weight ranges, and a derived workout category, bounded duration, calorie estimate, and completion-time range.

They do not include photos, raw Apple Health samples, exact weight or water, meal calories or macros, free-form notes, custom quest text, email, credentials, raw barcodes, recordings, full transcripts, or keystrokes.

Anonymous food-search trends

We keep a separate trend dataset containing exact food searches and the food name selected or logged. It may also include brand, category, meal, source, method, result position, and a random identifier that lasts for one search flow only. It is deliberately not connected to your account, installation, device, email, IP address, photo, or raw barcode.

We use this dataset to improve food coverage and search results. Edamam-derived product names and brands are excluded from it. Because the dataset is not linked back to a person, we cannot include it in an account export or remove an individual row in response to an account deletion request.

Website, support, and security

If you email us, we receive what you choose to send. Our hosting and security providers can process ordinary request information such as IP address, time, requested page, response status, and abuse signals. We do not use your IP address as a product-analytics identity and do not place advertising cookies.

Information comes from you, your app or device, Apple, providers you ask us to use, and friends who invite or interact with you.

3. Apple Health, widgets, notifications, AI, voice, and food

Apple Health and iPhone features

Apple Health access is optional and controlled by iOS. Exact samples are read on your iPhone for activity summaries, calorie estimates, quests, and rescue progress. Only the broad derived workout analytics described above may be sent to us. You can change access in iOS Settings or the Health app.

The optional widget and Live Activity receive only small device-local summaries needed to show their controls. They do not receive photos, food names, private quest text, exact Health or wellness values, friend data, or AI allowance.

Signed-in Circle notifications require an Apple push token linked to your current device. Lock-screen text is generic and excludes names and private wellness details. We remove or disable the token after sign-out, device revocation, account deletion, or Apple invalidation.

Meal Photo and Future Me

When you tap Analyse or Create, a compressed image is sent through RescueMe’s server to OpenAI. We temporarily hold it only to complete that request, then delete it. We do not add the source or result image to server logs, analytics, account backups, or exports.

Voice logging

After you tap Stop, a recording of up to 30 seconds is sent through our server to OpenAI for transcription. Temporary audio is deleted after processing. We do not retain the recording or full transcript, and you review the suggestion before saving anything.

Extended food search and barcode lookup

Food search may send the words you type, a broad GB or US market, app language, and a random request identifier to RescueMe and services such as USDA FoodData Central, Open Food Facts, or Edamam. Barcode lookup sends the code needed to find a product. Product analytics does not retain the raw barcode.

Edamam lookup is available only to a signed-in user and is performed live without adding its response to RescueMe's shared food cache. If you confirm an Edamam result, only the provider fields RescueMe is permitted to keep—food ID, label, calories, protein, net carbohydrates, fat, image, and your serving or log details—may be saved in your private account history. Edamam-derived brand, barcode, sugar, sodium, aliases, freshness metadata, and full provider responses are not retained. Missing sugar or sodium is shown as unavailable, not as zero.

Loading an Edamam or Open Food Facts image sends an ordinary network request to that provider's reviewed image host. Provider food information and images can be incomplete, wrong, changed, or removed, so you should check the package and review an entry before saving it.

4. Why we use information and our legal bases

• To provide an account, backup, purchases, social play, and requested AI features: to perform our contract with you or take steps you request.
• For optional permissions and sharing: with your choice or consent where consent is the appropriate basis. You can turn these features off.
• For service analytics, reliability, security, fraud prevention, and improvement: our legitimate interests in running and improving a safe, useful service, balanced against your rights.
• For tax, accounting, lawful requests, and disputes: legal obligation or our legitimate interests in establishing and defending legal rights.

Health information may receive extra protection under data-protection law. Where this applies, we also identify and document the additional legal condition required for that processing. RescueMe does not make automated decisions that have legal or similarly significant effects. Device-local adaptation only changes optional game suggestions, and you can pause or reset it.

5. Who receives information and international transfers

We do not sell personal information. We do not use it for third-party advertising, cross-company tracking, data-broker sharing, insurance decisions, or employment decisions. Health and fitness information is not used for advertising or marketing.

Only when needed, information may go to hosting and security services, email delivery providers, Apple, OpenAI, USDA FoodData Central, Open Food Facts, Edamam, professional advisers, or public authorities where law requires it. Each service receives only what it needs for its role. If information is processed outside the United Kingdom, we use an applicable adequacy decision, approved contract, or other lawful safeguard where required. Contact us for details relevant to your information.

6. How long we keep information

• Current account progress stays until it is replaced or your account is deleted. Up to 10 replaced safety snapshots are kept for 30 days.
• Circle daily summaries are kept for 30 days, preset encouragement history for 90 days, and pending invitations for 14 days.
• Cooperative run records are kept for 90 days.
• Pseudonymous product events and journeys are kept for up to 24 months. Durable installation, session, and onboarding identifiers are then removed.
• The separate anonymous food-search trend dataset may be kept indefinitely because it is deliberately not linked to a person.
• Device analytics queues are limited to seven days and 500 events.
• Security, billing, fraud, legal, backup, and deidentified provider-cost records are kept only as long as needed for those purposes.
• We do not retain Meal Photo or Future Me source or result images on our server.

Signed-in users can open Menu → Profile → Account & devices to export account information or delete the account after a fresh ownership check. Deletion removes direct identity, sessions, devices, snapshots, social records, push tokens, and entitlements, subject to limited legal, security, and backup retention.

Deleting the app removes RescueMe information stored only on that iPhone, subject to iOS backup behaviour. Apple Health data remains under your control in Apple Health. Deleting your account or the app does not cancel an App Store subscription.

7. Your choices and privacy rights

You may decline optional Health, camera, microphone, photo, notification, AI, social, and account features and continue using available manual or local features. You can change iOS permissions at any time.

Depending on where you live, you may ask us to access, correct, erase, restrict, or provide a portable copy of personal information. You may object to processing based on legitimate interests and withdraw consent where we rely on consent. Withdrawing consent does not affect earlier lawful processing. We may need to verify account ownership.

You can complain to the UK Information Commissioner’s Office or your local data-protection authority. We would appreciate the chance to help first.

8. Security, age, and wellbeing

We use transport encryption, restricted access, short-lived and hashed credentials, iOS Keychain storage, strict analytics allowlists, rate limits, deletion controls, and separate environments. No internet service can promise perfect security.

RescueMe is for adults aged 18 or older and is not directed to children. RescueMe is a wellness game, not medical diagnosis, treatment, or emergency care. Stop using a feature and seek qualified help if it is unsuitable or distressing for you.

9. Changes and contact

We may update this policy when the app, website, providers, law, or our practices change. The date above identifies the current version. We will explain material changes where required.

Return to Posh Tunnel