Product analytics

The included PostHog adapter is deliberately narrow. It captures allow-listed, typed product events and disables autocapture, lifecycle capture, session replay, and GeoIP. Identity is the stable Supabase UUID—not email.

Prompt

Read agent-skills/wire-analytics.md and agent-skills/add-onboarding-analytics.md.
Audit the typed event union, define my consent and retention choices, then
activate PostHog in separate development and production projects. Do not send
email, prompts, meal or health values, photos, audio, file paths, tokens, or
unbounded properties. Keep opt-out working before capture.

ATT is a separate decision

Ordinary first-party product analytics does not automatically require Apple's tracking permission. The starter keeps attribution tracking and ATT off by default. Enable them only if the final app performs cross-company tracking that actually requires it, then update disclosures and native configuration.

Verify

• expected onboarding, paywall, Scan, and Coach events arrive exactly once,
• no rerender creates duplicate events,
• shared-device sign-out resets identity before the next account,
• opt-out stops capture,
• no autocapture, replay, email, prompt, image, audio, or nutrition content appears,
• mock mode starts no PostHog timers or network calls.

Update Privacy and store data forms from observed production behavior, not from the intended event list alone.