Your food log lives on your device. We upload a meal photo when you take one — to estimate its nutrition, and to back it up to your own private space in the cloud so your meals still have their pictures if you reinstall or change phone. The AI provider that reads the photo does not keep it or use it to train anyone’s models. Your backup is readable only by you, and you can export or delete everything at any time from Profile.
• Account: your email address, and your name and profile photo if you sign in with Google. If you use the app without an account, you get an anonymous ID instead.
• Your entries: the foods you log, portions, calories and macros, meal times and categories, your weight entries, and your goal and the details you entered to calculate it (sex, age, height, weight, activity level).
• Meal photos: kept on your device, and — if you are signed in — backed up to your private cloud storage so they can be restored. A compressed copy is also sent to our server for the length of the estimate, then discarded by the AI provider.
• Preferences: units, theme, reminders, and any allergies or diet preferences you choose to save.
• Diagnostics: crash reports and basic usage events (for example "a scan succeeded"), which do not include your photos or food names.
When you scan a meal or a food label, the app sends the image to our server, which forwards it to an AI vision provider to produce the estimate. We send no name, email or account identifier with it. We do not store the image after the response, and our provider accounts are configured to opt out of using submitted data for training. Estimates are approximate by nature — see "Not medical advice".
The authoritative copy of your log is the database on your device. If you are signed in, it is mirrored to Google Firebase under your user ID — entries in Firestore and photos in Firebase Storage — readable and writable only by you. If you use the app without an account, nothing is backed up and your photos never leave the device.
We do not sell your data and we do not share it for advertising. We use a small number of processors to run the app: Google Firebase (authentication, backup, crash reporting, analytics), Cloudflare (our API), and the AI vision providers described above. Each receives only what it needs to perform its function.
• Export: Profile → Export my data produces a file containing everything we hold about you.
• Deletion: Profile → Delete account permanently removes your cloud data, your backed-up photos and your account, and wipes the local database and photos on this device. This cannot be undone.
• You can use the app without an account, in which case nothing is backed up to the cloud.
• You can turn reminders off at any time in Profile.
The app is not directed at children under 13 (or the equivalent minimum age where you live), and we do not knowingly collect their data.
If this policy changes materially we will say so in the app before the change takes effect. Questions, or a request about your data: ${LegalInfo.contactEmail}.