Privacy Policy

This Privacy Policy describes how SeeFoody (“we”, “us”, “our”) collects, uses, and shares information when you use our website at seefoody.com, our mobile applications, and related services (collectively, the “Service”).

Information we collect

Account information

When you create an account, we collect your email address and a hashed password. If you sign in with Google, we receive your Google account identifier, email address, and name as provided by Google. If you sign in with Apple, we receive your Apple account identifier, email address, and name as provided by Apple.

Food, nutrition, and health-related data you provide

Depending on how you use the Service, we may store food logs, meal descriptions, calorie and macro totals, weight entries, body-fat estimates, nutrition goals, photos you upload for meal estimation, and related notes. You choose what to log.

Apple Health (HealthKit) data

On iOS, you may grant the SeeFoody app read-only permission to access selected Apple Health data such as step count, active energy burned, walking/running distance, body weight, and workouts. This data remains entirely on your device. SeeFoody does not upload Apple Health data to our servers, does not store it in our database, and does not share it with any third party. You can revoke this permission at any time in your iPhone's Health app settings.

Mobile app authentication

If you use our mobile app, we issue an API access token after you sign in. The token is stored on your device by the app. We store only a one-way hash of that token on our servers, not the token itself.

Payment information

Paid subscriptions are processed by Stripe. We do not store full payment card numbers. Stripe provides us with subscription status and customer identifiers needed to manage billing.

Automatically collected information

We collect basic technical data such as IP address, browser or app type, and request logs needed to operate, secure, and troubleshoot the Service. We may use hashed IP addresses to limit abuse of guest AI features.

How we use information

• Provide and maintain the Service, including syncing your data across devices when signed in
• Authenticate you and protect accounts
• Generate AI-assisted meal estimates when you choose to use that feature
• Process subscriptions and prevent fraud
• Improve reliability, security, and product experience
• Respond to support requests

Third-party services

We use trusted providers to operate the Service, including:

• Stripe — subscription billing and in-app purchases (iOS)
• Google — optional sign-in (OAuth)
• Apple — optional sign-in and in-app purchase verification (iOS)
• OpenAI — optional AI meal and body-fat estimates from content you submit
• USDA FoodData Central — food search for signed-in users
• Open Food Facts — barcode product lookup
• Cloudflare — email delivery for account notifications and support messages
• Infrastructure and storage providers that host the Service and user media

These providers process data according to their own policies and only as needed to perform services on our behalf.

How we share information

We do not sell your personal information. We share information only:

• With service providers that help us run the Service
• When required by law or to protect rights, safety, and security
• In connection with a merger, acquisition, or asset sale, with notice where required

Data retention

We retain account and log data while your account is active. API tokens remain valid until they expire or are revoked. When you delete your account, we delete your account record, all associated food logs, meal entries, weight entries, body-fat estimates, meal photos, nutrition goals, and API credentials. Request account deletion by contacting us as described below.

Your choices and rights

• Access and update profile and goal information in the app
• Delete individual meals, foods, and weight entries in the app
• Sign out of the mobile app to revoke the current API token
• Request account deletion by emailing [email protected]

Depending on where you live, you may have additional privacy rights. Contact us at [email protected] to exercise them.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

Security

We use industry-standard measures such as encrypted connections (HTTPS), hashed passwords, and hashed API tokens. No method of transmission or storage is completely secure.

International users

If you access the Service from outside the United States, your information may be processed in the United States or other countries where we or our providers operate.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date above.

Contact

Questions about this Privacy Policy: [email protected] · Support page