Foodia is an application for logging what you eat and estimating its calories and macronutrients from a photo. This policy explains what data we collect, what we use it for, who we share it with and what you can do with it.
It is written to be understood. If anything isn't clear, write to us.
Who is responsible for your data
Gustavo Morales, a natural person, domiciled in Chile. Contact: gus.morales@me.com
We are the controller of the personal data described here, under the terms of Chilean Law No. 21,719 on the protection of personal data.
What data we collect
Your account data
Foodia uses Sign in with Apple and, on Android, also Sign in with Google. From whichever provider you choose we receive the user identifier it gives us and your email address. If you choose "Hide My Email" with Apple, we receive an anonymous relay address and we never see your real one.
You can optionally add a name and a profile photo.
Health data
This is sensitive data and we treat it as such:
- Physical profile: sex, age, weight, height, activity level, sports you practise and your goal (lose, maintain or gain weight).
- Nutrition goals: daily calories, protein, carbohydrates, fat and water, calculated from the above or adjusted by you.
- Meal log: what you ate, at what time, in which category, the identified foods with their grams and macronutrients, and any notes you add.
- Photos of your meals, when you log with a photo.
- Body measurements, if you choose to record them: weight, waist, hips, chest, arm, thigh, neck and body fat percentage.
- Hydration: how much water you log and when.
- A daily summary of your activity, only if you connect Apple Health: steps, active and resting energy, workout minutes and whether there was a strength workout. One number for each per day; never the minute-by-minute records or the times.
Data about how the analysis performs
Every time we analyse a meal we store a technical record: whether there was a photo, the language, which model was used, how long it took, how many items were detected and whether the analysis succeeded or failed. This record does not include the photo or what you ate: only figures about how the service is performing.
We also store the corrections you make to an estimate — for example, if the analysis said 50 grams and you adjust it to 100 — along with the version of the model that produced it. It helps us measure how often it gets things wrong and improve it.
How you use the app
We store some events about app usage: which onboarding step you're on, when you saved a meal, when the subscription screen appeared and how a purchase ended, plus the errors that occur on your phone. Each event carries the app version and the date.
They do not include your photos, what you ate, or any text you write. They are only signals about how the app is working, and they help us know where people get stuck and what breaks.
We process this ourselves, on our own servers: these events never leave Foodia. The only thing that goes to a third party is what the next section describes.
Measuring our advertising (Meta SDK)
To know whether the ads we run on Facebook and Instagram are worth anything, Foodia includes the Meta SDK. It is what lets Meta count, in aggregate, how many people installed the app after seeing an ad and how many of them kept going.
What the SDK sends to Meta is six signals, and nothing else: that the app was installed, that it was opened, that you created an account, that your trial started, that you analysed your first photo and that you subscribed to Foodia Pro (with the plan's price). Each signal travels with a device identifier (on iPhone, the one Apple assigns to each app; on Android, the one the SDK itself generates for that install), an anonymous identifier generated by the SDK, your phone model, the OS and app versions, the language, the time zone and your IP address. On neither platform the advertising identifier.
We do not send Meta your photos, what you eat, your macros, your weight or anything from Apple Health. Nor your name, your email or your account identifier. Foodia does not ask for iOS tracking permission and does not read the advertising identifier — the IDFA on iPhone, Google's on Android, where the app does not even declare the permission to read it: Meta cannot follow you across apps through Foodia, and what it receives is handled in aggregate under its own privacy policy.
Your subscription
If you subscribe to Foodia Pro, we store which plan you have, until when it is valid and the transaction identifier the store gives us — Apple on iPhone, Google Play on Android — along with the history of sign-ups, renewals and cancellations. That is what lets us know you're entitled to run analyses without asking the store on every photo.
We never see or store your payment method. The store processes the purchase end to end; only the result reaches our servers.
If you share with a professional
If you link your account with a nutritionist, we store that link and a record of every time they access your data. That record exists for your protection: you can request it whenever you want. What the professional sees is what you see: your meals, your measurements, your goals and, if you connected Apple Health, the daily summary of your activity.
What we do NOT collect
We do not use your phone's advertising identifier — neither iPhone's nor Android's — or follow you across apps, we do not build profiles for commercial purposes, and we do not collect your location, your contacts, your payment details or your activity outside Foodia.
What we use your data for
- To make the app work: estimating the macronutrients of your meals, calculating your goals, showing you your history and your progress.
- To sync across your devices so you don't lose your information if you change phones.
- To share with the professional you authorise, and only with them.
- To improve the accuracy of the analysis, using the corrections you make.
- To keep the service running: detecting failures, abuse and anomalous consumption.
- To know whether our advertising works, with the aggregate signals described in the Meta SDK section.
We do not sell your data or transfer it to third parties for their own advertising. The only thing that goes to a third party for an advertising purpose is those aggregate signals, which serve to measure our ads and not to show you anyone else's.
Who we share it with
To operate, Foodia relies on three providers that do not use your data for their own ends, and on one more, Meta, which only receives the aggregate measurement signals described above:
| Provider | What for | Where |
|---|---|---|
| Supabase | Stores your account, your entries and your photos | United States |
| Google Cloud | Processes the analysis of your meals (Vertex AI, Gemini model) and hosts the Foodia server | United States |
| Apple | Sign-in and subscription billing on iPhone | Per Apple's policy |
| Google Play | Sign-in and subscription billing on Android | Per Google's policy |
| Meta | Measures, in aggregate, whether our ads on Facebook and Instagram bring installs and subscriptions (Meta SDK; no photos, no health data, no advertising identifier) | United States |
About your photos: when you log a meal with a photo, that image is sent to Google Cloud so the model can analyse it. Google acts as a processor and handles that content in accordance with the terms in force for its Vertex AI service for enterprise customers. The photo is kept in private storage, accessible only with your session or that of the professional you have authorised.
International transfer: your data is stored and processed in the United States. By using Foodia you accept that transfer, which is carried out under each provider's contractual terms.
We may also disclose data if required to do so by a competent authority under the law.
Apple Health
These are two separate permissions and you grant them separately:
- Writing. If you authorise it, Foodia writes to the Health app the calories, protein, carbohydrates, fat and water you log. What we write there stays on your device.
- Reading. If you connect Apple Health from Profile, Foodia reads your weight and body fat percentage (for example, those written by a scale), your steps, your active and resting energy and your workouts (for example, from an Apple Watch), and, if you ask for it when creating your profile, your date of birth, sex and height. With that we adjust the day's goal, calibrate your activity level and show your progress. What is stored in your account is your weight and body fat as measurements, and a daily summary of your activity (the six numbers above), to calculate your goals with history and, if you link a nutritionist, so that they can see it. We never store the minute-by-minute records.
We never use Health data for advertising, nor sell it, nor share it with anyone other than the professional you linked, nor use it for purposes other than those in this policy. Reading can be turned off from Profile → Apple Health, and either permission can be revoked from Settings → Health → App access.
Health Connect (Android)
On Android, Foodia only writes: if you allow it, it copies to Health Connect the calories, protein, carbs, fat and water you log, and nothing else.
It reads nothing from there. On Android we do not adjust your daily goal with your activity or import your weight from other apps: those two exist only on iPhone. What Foodia writes stays on your phone, and the permission can be revoked from Settings → Security and privacy → Health Connect.
How long we keep it
We keep your data for as long as your account exists. When you delete it from the app, it is erased at that moment, not within some period.
The technical performance records, which do not make it possible to know who you are or what you ate, are kept for up to 12 months.
Your rights
Law No. 21,719 grants you these rights over your personal data:
- Access: knowing what data we hold about you.
- Rectification: correcting data that is wrong or incomplete.
- Erasure: asking us to delete it.
- Objection: objecting to certain processing.
- Portability: receiving your data in a format you can take with you.
- Blocking: requesting the temporary suspension of its processing.
How to exercise them: write to us at gus.morales@me.com from the email associated with your account. We reply within 30 calendar days.
From the app you can also, at any time and without asking us:
- Export your meal log in JSON format, from Profile → Export my data.
- Delete your account, from Profile → Delete my account. Everything is erased: your diary, your photos, your measurements, your goals, your profile, your link with the professional and the user itself. It is immediate and cannot be undone.
The only thing that survives that deletion are the technical analysis records — how long it took, how many items it detected, whether it failed — and they do so without your identifier: they remain as performance figures that can no longer be associated with you or with what you ate.
If you believe we have not respected your rights, you may complain to Chile's Personal Data Protection Agency.
How we protect your data
- All communication between the app and our servers travels encrypted (HTTPS).
- Each user can only access their own data: the database enforces this with row-level rules, not just the application.
- Your photos are in private storage, they are not public and have no guessable URL; they are accessed through temporary signed links.
- A nutritionist only sees the data of a patient who explicitly accepted the link, and every access is recorded.
- Access to the infrastructure is restricted and credentials are rotated.
No system is completely secure. If a security breach affecting your data were to occur, we will notify you and report it to the authority, as the law requires.
If you are a minor
You may use Foodia with the authorisation of your mother, father or guardian. If you are their representative and want us to delete the account of a minor in your care, write to us and we will do it.
Foodia is not medical advice
Foodia's estimates are approximate: they come from a model that interprets a photo or a description, which is why you can correct them. We are not a medical device and we do not replace the guidance of a health professional.
If you have a history of eating disorders, talk to your doctor or nutritionist before keeping a daily record of calories.
Changes to this policy
If we modify it, we will update the date in the header. When the change is significant — for example, if we start processing a new category of data — we will tell you inside the app before it takes effect.
Contact
Gustavo Morales gus.morales@me.com
If you have a question about your data, write to us: we answer personally, not through a form.