Your health details are yours

On your device. Your situation (pregnancy, allergies, diet, conditions), history, favourites, tallies and household members are stored on your phone or in your browser, and synced to your account so your devices match. They are only used to give you answers.

Photos. When you photograph a label, menu or plate, the photo is sent to our server and to an AI model (Claude or Gemini, via OpenRouter, with data retention switched off) to read the ingredients. Your health details are not sent with it, and we don’t store your photos. Verdicts are worked out on your device.

Typed meals. When you check a meal by name (for example “sausage and egg McMuffin”), only the words you typed are sent to the AI model to look up its usual recipe. The answer is cached for everyone without anything about you.

Barcodes. Barcode lookups go to Open Food Facts, an open database. Only the barcode number is sent.

Your account. We store your email and your synced data (situation, household, history) on our servers in order to sync your devices. You can delete your account and everything in it from Settings at any time.

Usage counts and errors. To improve the app we count how often features are used each day (for example “a barcode was scanned”), without any user id, IP address or cookie, and we collect error messages when something breaks. Neither includes your health details.

Who processes data for us. Railway (hosting and database), Logto (sign-in), OpenRouter with Anthropic or Google models (reading photos and meal names, with data retention off), Open Food Facts (barcode lookups), Apple, Google and Stripe (payments, if you buy Plus).

Never. We never sell or share your data, and never use it for advertising.

Your rights. Export or delete everything at any time from Settings. We follow the New Zealand Privacy Act 2020 and the Australian Privacy Principles. Questions or requests: support@canieat.co.nz.