Lattice: Privacy Policy
Last updated 2026-10-27
Short version: your health data stays on your phone and in your own Google Drive. I don't run a database that holds it, I don't sell anything about you, and there are no ads, analytics or crash-reporting tools in the app.
On your phone
Everything you log or connect (workouts, food, weight, sleep, lab results, readings from Health Connect and the rest) is stored on your phone. Uninstalling Lattice or using Delete All Data in Settings removes it.
Google sign-in and your Drive
- Signing in gives Lattice your Google account's name, email address and account id, and permission to the files Lattice creates in your Drive (Google's
drive.filepermission). It can't see your other files, your Gmail or your contacts. - With Daily Backup, Lattice saves a copy of its data to your Drive every day and whenever you ask. That copy is yours: it sits in your Drive, and you can delete it there at any time.
Lattice Connect (optional)
- When you add Lattice to your AI app, a small connector run by Blue Hour on Google Cloud reads your Lattice backup in your Drive each time your AI app asks for it, and passes it to your AI app. The connector keeps no copy of your data and has no database. Its logs hold only codes, counts and timings.
- What your AI app does with what it reads is covered by that app's own privacy policy.
- If your AI app suggests a change, nothing changes until you approve it there. Lattice then applies it on your phone. To let Lattice know, the connector sends your phone a silent signal through Google's Firebase Cloud Messaging. The signal carries no health data, only "there's a change waiting".
- You can disconnect at any time, in your AI app or in your Google account's third-party access settings.
Other things that leave the phone
- Photo reading, optional: if you save your own key for an AI provider (Anthropic, OpenAI or Google) and ask Lattice to read a nutrition label, a supplement label or a lab-result screenshot, that one photo goes straight from your phone to that provider. Nothing else goes with it, and Lattice doesn't keep the photo.
- Food search: typed search words go to USDA FoodData Central, and a scanned barcode number goes to Open Food Facts. No diary entries are sent.
- Purchases: Google Play handles payment, and I never see your card. RevenueCat, the service that tracks which plan you have, gets your purchase records and your Google account id.
What I don't do
No ads, no selling or sharing data for advertising, no analytics or crash-reporting tools, no location tracking.
Your choices
- View, export or delete everything in the app, under Settings.
- Delete the backup in your Google Drive.
- Remove Lattice's access to your Google account: Google Account → Security → Third-party access → Lattice → Remove access.
Children
Lattice is meant for people 18 and older.
Changes and contact
If this policy changes, the date at the top changes too. Questions: privacy@bluehourapps.dev