Privacy policy
Last updated 14 October 2026
No legalese, no “trusted partners”. Everything below is what actually happens, and every control described here works the same way in the app’s Privacy Centre.
What we collect and why
Your meal photos
Analysed to estimate calories and macros. Nothing else.
Your food and weight logs
So your history, streaks and trends exist at all.
Your weight, age, sex and activity
Used to calculate your daily targets. We don't ask for your height.
Groups (only if you join one)
Up to 5 people you invite see which meals you've logged today, your calories against your target and your supplements tick — each can be switched off. They never see your photos, food names or weight. Leave any time and your days disappear from the group straight away; deleting your account removes you from it.
Crash and usage events
Counts and screen names — never food content or health values.
What we never do
We never sell your data.
We never use your health data for advertising.
Location is stripped before upload.
EXIF — including the GPS coordinates of where the photo was taken — is removed on-device, and photos are downscaled before they're sent.
Who processes your data
OpenAI
Receives: The meal photo and its analysis
Kept by OpenAI for up to 30 days to check for abuse, then deleted. Not used to train models by default.
Supabase
Receives: Account, logs, photos
Our database. Row-level security is enabled on every table.
RevenueCat
Receives: Purchase receipts, anonymised user id
Receives no health data.
PostHog
Receives: Product events
Event names and counts only — never food content or health values.
Sentry
Receives: Crash reports
Personal information is scrubbed from crash breadcrumbs.
Apple or Google
Receives: Your name and email, when you sign in with them
Used only to create your account and sign you in.
How long we keep it
While your account exists
Your profile, food and weight logs, targets and group membership are kept until you delete them or your account.
When you delete your account
It's erased from our database and storage straight away, and any backups that still hold it expire within 30 days. Deleting your account doesn't cancel an Apple subscription — cancel that in Settings.
What stays after deletion
A scrambled code for your device and how many of the 7 free scans it used, so they can't be claimed again by reinstalling. It isn't linked to your account, your name or any health data.
Usage events and crash reports
Never include food or health values, and stop as soon as you turn Analytics off in the Privacy Centre.
Your controls (in the app's Privacy Centre)
Analytics & diagnostics
Anonymous usage and crash reporting. Turning this off doesn't limit any feature.
Personalised ads
Off unless you allow tracking. Reflects your iOS tracking choice.
Your rights
Get a copy of your data
Export everything we hold as a file you can keep — logs, weights and profile.
Correct the AI's estimate
Edit the ingredients of any scan before you save it.
Delete your account and data
Permanent, and available from the app's Privacy Centre.
Where you live matters
UK/EU (UK GDPR & GDPR), California (CCPA/CPRA), India (DPDP Act) and Japan (APPI) each grant additional rights — all of the above apply to you regardless.
Questions or a complaint? Email privacy@pocketcalorie.com and we’ll respond within 30 days. To export your data or delete your account, open PocketCalorie → Profile → Privacy Centre.