Privacy & trust
Your nutrition and health data belongs on your phone. Here is exactly what stays there, what leaves and when, and what we never do. The binding details are in the privacy policy.
Stays on your phone
- Meals and meal photos, weight, water, targets and your profile
- Everything the app reads from Apple Health or Health Connect
- The AI analysis: the model runs on the device, even offline
- Your chats with the AI, recipes, plans and settings
Leaves only when you choose
- A care-circle link, end-to-end encrypted: the key is only in the link, so our server stores the data in a form that can't be read without the link. It expires when you chose, and you can revoke it at any moment.
- A missing product, a restaurant menu, feedback or a report you send us: for review, never for marketing.
- Cloud AI, only if you connect a provider with your own key: straight from your device to that provider, after you approve.
- Diagnostic reports: off by default.
- Backups: only where you save them — an export file, or on Android an encrypted automatic copy in a folder you pick. The app never uploads them.
Never
- Accounts or sign-up
- Ads, analytics kits or tracking
- Selling or renting personal data
- Using health data for advertising or profiling
- Your birth date for age checks: where a US state law requires one, the store shares only an age range, and the check runs on the device
Routine downloads
The app downloads its AI models and food packs from our storage (Cloudflare R2) and checks for app notices. These requests carry no personal data, and every file is checked against its SHA-256 fingerprint.
Who processes what
- Amazon Web Services (Frankfurt, Germany): our database, for the items above
- Cloudflare: stores and delivers the model and pack files
- Amazon Web Services and Cloudflare: host and deliver this website
Found a security issue? Write to us. The contact is also in /.well-known/security.txt.
Read the full privacy policy