Privacy policy

• We never sell your personal or health data, and we don't use it for advertising.
• Meal photos are private to your account. A photo is sent to our AI provider only when you ask for an estimate, and it isn't used to train AI models.
• You can export your data or delete your account at any time from the Me tab. Deleting your account also deletes your photos.
• We don't use advertising or analytics trackers.

• Account data: your name and email address, and a securely hashed password (we never see the password itself).
• Profile and health data you choose to provide: goals, sex, age, height, weight, activity level, diet preferences, injuries or limitations, and your preferred units.
• Training data: workouts, sets, weights, reps, personal records, routines, custom exercises, and exercise notes such as machine settings.
• Nutrition data: meals and foods you log, servings, calories and macros, water intake, and recipes you log.
• Meal photos: if you use Snap a meal, the photo you take or choose, the AI's itemised estimate, and any changes you make to it.
• Messages you send us: contact-form messages (name, email, topic, message) and newsletter sign-ups (email).
• Technical data: your time zone (so your days line up correctly), and standard request logs (IP address, browser, time) kept by our hosting provider for security and reliability.

• To provide the service: logging, history, progress charts, nutrition targets, suggestions and insights.
• To produce AI meal estimates when you ask for one (see below).
• To limit AI use to a fair amount per person: we record when an estimate is requested, but not the photo or result in that record.
• To answer your messages, and to send updates only if you signed up for them.
• To keep the service secure, prevent abuse, and fix problems.

When you tap Snap a meal, your browser shrinks the photo and re-saves it, which removes hidden location data. The photo is then saved privately to your account and sent through the Vercel AI Gateway to Anthropic's Claude model, which returns a list of foods with estimated portions, calories and macros.

We send only the photo and our instructions to the model: not your name, email or other account data. Our providers process the photo to return the estimate and don't use it to train their models.

If you cancel without logging, or the photo isn't recognised as food, we delete it straight away. If you log it, the photo and the estimate are kept with that diary entry until you delete the entry or your account.

Estimates are approximate. You can edit or remove any item before logging.

Where GDPR or similar laws apply, we use your account data to provide the service you signed up for (contract). We use health and nutrition data, including meal photos, only with your explicit consent: you choose what to enter, and you can delete it or withdraw consent at any time. We use security logs and abuse prevention on the basis of our legitimate interest in keeping the service safe.

We share data only with providers that help us run the service. Our contracts with them limit how they may use it:

• Vercel: hosting the website and app, and the AI Gateway that forwards meal photos to the AI model.
• Supabase: our database, sign-in, and private photo storage.
• Anthropic: the AI model that analyses meal photos you submit.

Some providers may process data outside your country. Where the law requires it, we rely on safeguards such as standard contractual clauses. We disclose data to authorities only when the law requires it.

We use only what the app needs to work. We don't use advertising or tracking cookies.

• Sign-in cookies, which keep you signed in.
• A time-zone cookie, so that “today” matches your local day.
• Your browser's local storage, for a workout in progress (so it survives losing signal or closing the tab), workouts waiting to sync, and your bookmarked exercises.

Recipe pages show recommended YouTube videos. Nothing loads from YouTube until you press play. Videos then play in YouTube's privacy-enhanced mode (youtube-nocookie.com), and Google's privacy policy applies to that playback. Video thumbnails load from YouTube's image servers.

Data is encrypted in transit (HTTPS) and at rest. Database access rules mean each account can read and change only its own records. Meal photos are kept in private storage, in a folder only your account can access, and are shown through links that expire after an hour.

• We keep your data while your account is active. You can delete individual entries at any time. Deleting a meal entry deletes its photo.
• Deleting your account permanently removes your profile, training, nutrition and body data, and your meal photos, straight away. Backups held by our database provider are overwritten on their normal schedule.
• Contact-form messages are kept for as long as we need them to deal with your request. Newsletter addresses are kept until you ask us to remove them.

Depending on where you live (for example under the GDPR, the CCPA/CPRA or India's Digital Personal Data Protection Act), you can access, correct, export or delete your data, object to or restrict processing, and withdraw consent. You can download an export (JSON, or a CSV of your sets) and delete your account yourself from the Me tab.

For anything else, email hello@procutta.io. We'll reply within 30 days. You can also complain to your local data protection authority.

The service is not intended for anyone under 16, and we don't knowingly collect their data. If you believe a child has signed up, contact us and we'll delete the account.

If we make material changes, we'll tell you in the app or by email before they take effect. The date at the top shows when this policy was last updated.