1. Scope and data controller
This Privacy Policy (the “Policy”) applies to the Fooda AI mobile application, the Fooda AI website, related AI, cloud, support and notification features, and any other Fooda AI service that links to this Policy (collectively, the “Service”).
The data controller, business or responsible operator for the Service is the person or legal entity identified as the application provider or seller for Fooda AI in the applicable app-store listing (the “Operator,” “Fooda AI,” “we,” “us” or “our”). The relevant store listing contains the Operator’s published business information. Privacy questions may be sent to hello@foodaai.com.
This Policy describes our practices and does not replace notices supplied by Apple, Google or another third party for data they process independently. If you use Fooda AI through an organisation or a third-party service, that party may have its own privacy responsibilities and notices.
Data controller / Operator: Vadym Tovstik.
2. Privacy summary
- Fooda AI stores the information needed to maintain your account, history, preferences and requested features across devices.
- Meal photos, label photos, descriptions, chats and voice recordings are processed only when you choose to submit or record them.
- AI requests may be sent through our authenticated server to third-party AI providers, including OpenAI, Anthropic (Claude) and Google (Gemini), to generate analysis, transcription or other requested output.
- Firebase supports authentication, cloud data, file storage, analytics, messaging and server functions.
- AppsFlyer measures installs, campaigns and selected in-app events; RevenueCat manages subscription and entitlement status.
- Apple or Google processes app-store purchases. Fooda AI does not receive or store your complete card or bank-account details.
- You may request access, correction or deletion, subject to applicable law. Account deletion is described in our Deletion Policy.
3. Information we collect and process
3.1 Account and identity information
We process a Firebase account identifier and authentication status. Fooda AI may create an anonymous account so that progress can be saved before you link a sign-in method. If you choose Sign in with Apple or Google, we may receive an account identifier and, depending on your provider choices and what the provider makes available, your email address, display name and profile details. Apple may provide a private relay email address instead of your regular address.
3.2 Profile, wellness and fitness information
Information you enter may include your name, age or date-of-birth range, sex or gender selection, height, current and target weight, weight history, activity level, calorie and nutrient goals, dietary preferences, allergies or exclusions, eating patterns, coaching preferences, language, week-start setting and other onboarding or personal-plan responses. Depending on the feature, this information may reveal health, fitness or dietary information.
3.3 Meals, nutrition labels and activity records
We process meal and ingredient descriptions, photos, nutrition-label photos, barcode or product information, portions, dates and times, estimated calories, macro- and micronutrients, water intake, physical-activity descriptions, streaks, goals, rewards, AI analyses and corrections you make. Where the app supports import or export, it also processes the files you deliberately select.
3.4 Chats, prompts, feedback and generated content
Fooda AI stores messages you send to AI assistants, selected assistant style, conversation language, attachments, generated responses and limited context needed to make a conversation useful. Context sent for a response may include relevant profile details, goals, recent meals, streak information or recent chat history. Support messages and feedback you send may include your contact details and the content of your request.
3.5 Camera, photos, microphone and audio
With device permission, the app may access the camera or photos you select to analyse a meal or nutrition label. With microphone permission, the app may record audio for speech-to-text. An audio file is transmitted through our server for transcription when you activate that feature. Permissions can be changed in device settings, although the corresponding feature may then stop working.
3.6 Device, network and diagnostic information
We and our providers may process device type and model, operating-system and app version, language, time zone, platform, IP address, network and carrier information, timestamps, app instance or installation identifiers, Firebase Cloud Messaging token, crash or error details produced by a failed request, and security or authentication logs. We use the time zone and push token to schedule and deliver notifications at appropriate local times.
3.7 Usage and analytics information
We may collect app opens, screen or feature interactions, onboarding completion, registration completion, paywall views, subscription-related events, AI-feature requests, performance information and similar product events. Analytics events are intended to understand reliability and feature use and should not contain meal photos, chat text, complete email addresses or complete payment details.
3.8 Attribution and advertising measurement
AppsFlyer may process an AppsFlyer identifier, our customer user identifier, app-install and launch information, campaign or referring-ad information, selected in-app events, device and technical information, IP address, and advertising or device identifiers when available under platform rules and device settings. We use this information to understand which campaigns lead to installs, registrations, trials, subscriptions and other measured events, and to help detect attribution fraud. Fooda AI does not send meal photos, health-profile fields or chat contents to AppsFlyer as event parameters.
3.9 Subscription and transaction information
RevenueCat and the applicable app store process product identifier, offer, purchase and renewal status, subscription entitlement, trial or promotional status, transaction environment, expiration, cancellation, refund, billing issue and related identifiers. We use these records to unlock Premium access, provide support and measure subscription performance. The store processes your payment method; we do not receive or store your full card number, bank-account number or store-account password.
3.10 Communications
If you email or otherwise contact us, we process your email address, message, attachments, account-identifying information you supply and our response. Do not send passwords, complete payment-card data, government identification or unrelated sensitive information in a support message.
4. Sources of information
We obtain information:
- directly from you when you enter, photograph, record, upload, import or send it;
- automatically from the app, device and network when you use the Service;
- from Apple or Google when you sign in or purchase through their services;
- from RevenueCat concerning subscription and entitlement status;
- from AppsFlyer concerning installation and campaign attribution; and
- from service providers that return requested AI output, transcription, authentication, delivery or technical results.
5. How we use information
We use information to:
- create, authenticate, secure and synchronise your account;
- save and display your meal history, nutrition, weight, water, activity, preferences and progress;
- provide AI meal analysis, nutrition-label analysis, plans, coaching, chats, transcription and personalised notifications you request;
- calculate estimates, trends, goals, streaks and summaries;
- verify Premium access, process restoration and respond to purchase support;
- deliver push notifications and apply notification or language preferences;
- analyse feature use, campaign performance and subscription performance;
- debug failures, maintain availability, prevent abuse, enforce limits and protect users and the Service;
- respond to support, privacy and legal requests;
- comply with law, valid legal process and platform obligations; and
- develop and improve the Service using aggregated, de-identified, statistical or appropriately protected information where permitted.
We do not use your meal photos, private chat content or health-profile data to serve third-party behavioural advertisements. We do not sell that content for money.
6. Legal bases for processing
Where the GDPR, UK GDPR or similar law applies, our legal basis depends on the information and purpose:
- Contract: processing needed to provide the features, account, synchronisation, subscription access and support you request.
- Consent: optional camera, photo, microphone, notification or other device access, and processing that applicable law requires you to authorise. You may withdraw consent through the app, device settings or by contacting us.
- Legitimate interests: securing and improving the Service, preventing abuse, understanding reliability and measuring acquisition, balanced against your rights.
- Legal obligation: records, responses or disclosures required by tax, accounting, consumer, privacy, safety or other applicable law.
- Legal claims and vital interests: limited processing needed to establish or defend claims, investigate serious misuse, or protect a person where legally permitted.
If information qualifies as special-category or sensitive data, we rely on your explicit action and consent where required, or another applicable legal condition. Fooda AI is a general wellness service, not a medical-record system.
7. Artificial-intelligence processing
When you request an AI feature, the information needed for that request is transmitted to our authenticated server and then to our AI service provider. Depending on the feature, input can include text, meal or label images, audio, selected profile information and recent relevant history. The response is returned to Fooda AI and may be stored in your account as an analysis or message.
Fooda AI uses third-party AI services from OpenAI, Anthropic (Claude) and Google (Gemini) to provide these features. Depending on the feature, one or more of these providers may process the request data and limited technical logs needed to generate, secure and deliver the requested result. Their privacy practices are described in the OpenAI Privacy Policy, Anthropic Privacy Policy and Google Privacy Policy. We require providers processing information on our behalf to protect it consistently with this Policy, applicable contracts and privacy law. Do not submit data that is unnecessary for the feature or information about another person without permission.
AI output is probabilistic and may be inaccurate. It is not used by Fooda AI to make a legal, employment, credit, insurance or similarly significant decision about you. Please see the Terms of Use for health and accuracy notices.
9. International data transfers
Fooda AI and its providers may process information in countries other than the country where you live. Privacy laws in those countries may differ. Where required, we rely on recognised safeguards such as adequacy decisions, contractual protections, data-processing terms or other lawful transfer mechanisms. Provider policies contain more information about their locations and transfer safeguards.
10. Data retention
We retain account and user-created data while your account is active and as needed to provide the Service. Individual records may remain until you delete them, delete the account or ask us to delete them, subject to technical and legal limits. We retain support correspondence for the time reasonably needed to resolve the request and document the response.
Security, diagnostic, analytics and attribution records are retained according to operational need and provider settings. Purchase, refund and entitlement records may be kept for accounting, fraud-prevention, dispute and legal obligations. When an account is deleted in the app, a restricted administrative snapshot of the active account data is retained for no longer than 30 days solely to investigate security incidents, fraud or abuse and to protect users and the Service where permitted by law. This snapshot is unavailable to users and ordinary product operations and is automatically deleted when the 30-day period ends. Limited data may also remain temporarily in protected backups or logs until they are overwritten, isolated from ordinary use. We may retain data longer when law requires it or when necessary for legal claims.
Aggregated or de-identified information that can no longer reasonably identify you may be retained for statistics, security and service improvement.
11. How we protect information
We use technical and organisational measures designed to protect information, including authenticated access, database and storage access rules, separation of user records, transport encryption (such as HTTPS/TLS), restricted server credentials, platform security controls, backups, monitoring and provider security measures. Cloud providers may also apply encryption at rest and other infrastructure safeguards under their service terms.
No internet transmission, device, account or storage system is completely secure. We therefore cannot guarantee absolute security. Protect your device and sign-in credentials, use device security features, and contact us promptly if you believe your account or data may have been compromised.
12. Your choices and controls
- Camera, photos and microphone: grant or revoke permission in device settings. Data is submitted only when you use the relevant feature.
- Notifications: change Fooda AI notification settings in the app or disable notification permission in device settings.
- Profile and records: edit available profile, meal, ingredient and preference fields in the app.
- Advertising identifiers: use platform privacy or advertising settings where available. Availability depends on your device and jurisdiction.
- Account linking: you may use an anonymous account or choose an offered Apple or Google sign-in method, subject to feature requirements.
- Subscription: manage or cancel recurring billing through the store account used for purchase.
- Deletion: use the in-app deletion control or follow the Deletion Policy.
13. Your privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability or a copy of personal data; to withdraw consent; and to appeal or complain to a data-protection authority. These rights may be subject to identity verification, exceptions and legal limits.
Send a request to hello@foodaai.com from the email associated with your account where possible. Describe the right you wish to exercise and the relevant account. We may ask for information needed to verify that you control the account, but we will never ask for your password or complete payment-card details. Authorised agents must provide proof of authority where law permits their use.
We will respond within the period required by applicable law. You may lodge a complaint with the supervisory authority where you live or work, although we encourage you to contact us first so we can try to resolve the concern.
14. Additional regional disclosures
14.1 European Economic Area, United Kingdom and Switzerland
The controller and contact details are in Sections 1 and 19, the categories and purposes of processing are in Sections 3–8, legal bases are in Section 6, and transfers and retention are in Sections 9–10. You have the rights described in Section 13 and may contact your competent supervisory authority.
14.2 United States
State law may grant rights to know, access, correct or delete information and to opt out of certain sale, sharing, targeted-advertising or profiling practices. Fooda AI does not sell meal photos, private chat content or health-profile data for money. We use attribution technology to measure advertising campaigns; whether a particular disclosure is legally classified as “sharing” or targeted advertising can depend on jurisdiction and configuration. Contact us to submit an applicable request. We will not discriminate against you for exercising a privacy right.
14.3 Other locations
You may have additional rights under local law. Nothing in this Policy limits non-waivable privacy or consumer rights.
15. Account and data deletion
You can delete your Fooda AI account and associated active account data from the app by opening Settings, scrolling to the bottom and selecting “Delete account permanently.” After required confirmation, the in-app process immediately deletes the account and associated active account data from ordinary product systems, revokes supported Apple or Google sign-in access, and retains the restricted 30-day security and abuse-review snapshot described in Section 10.
Alternatively, email hello@foodaai.com. We will complete a verifiable email deletion request within 48 hours after receiving the information reasonably needed to identify and verify the account. Full details, exceptions and subscription consequences are in our Deletion Policy.
Deleting Fooda AI or your Fooda AI account does not automatically cancel a subscription billed by Apple or Google. You must manage recurring billing in the applicable store. Store, RevenueCat, analytics or attribution records may remain where independently controlled, aggregated, de-identified, or required for transactions, security, fraud prevention or law.
16. Age eligibility
Fooda AI is not directed to, and may not be used by, anyone under 18. We do not knowingly permit an under-18 person to create or use a Fooda AI account. If you believe that an under-18 person has supplied personal information or obtained access, contact us so we can investigate and delete the information where appropriate.
The age gate does not replace parental, device or app-store controls. We ask adults who share a device to prevent an under-18 person from accessing the Service through their account.
17. Website data and external links
When you visit the Fooda AI website, the hosting provider may automatically receive ordinary web request information such as IP address, browser, device, requested page, referring page and timestamp for delivery, security and logs. The site may request font resources from Google. The current informational site does not itself require a Fooda AI login or ask for meal and wellness data.
Links may take you to app stores, providers or other sites. Their privacy practices are governed by their own policies. Review them before submitting data.
18. Changes to this Policy
We may update this Policy to reflect changes to features, providers, law or security practices. The “Last updated” date identifies the current version. Where required, we will provide additional notice in the app, by email or by another appropriate method before a material change takes effect. Earlier versions may be retained where operationally practical or legally required.
19. Contact us
Privacy questions, rights requests and account-deletion requests may be sent to:
Fooda AI
Data controller / Operator: Vadym Tovstik.
Email: hello@foodaai.com
In-app support is also available.
Website: https://foodaai.com/