Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains how TrackMeal ("TrackMeal", "we", "us") collects, uses and protects information when you use the TrackMeal mobile app and the website trackmeal.app (together, the "Services"). We follow the Law of Georgia on Personal Data Protection and the EU General Data Protection Regulation (GDPR) where it applies.

1. The short version

• There are no accounts. Your diary, profile, weight, photos and rewards are stored only on your phone.
• When you use AI features, the photo, text or list of ingredients you send is processed to recognise the meal and is not stored on our servers.
• We count AI requests per day using a random identifier created by the app, not your name, email or phone number.
• We do not sell your data.

2. Information stored on your device

Your answers from the onboarding quiz (sex, date of birth, height, weight, goal, activity level), your daily goal, meals, meal photos, weight history, streak and rewards are kept in the app's storage on your phone. We cannot see them. Deleting the app deletes them.

3. Information we process

3.1 AI recognition

When you scan a meal, describe it, list ingredients, photograph a product label or (if available) record a voice note, the app sends that photo, text, ingredient list or audio, with your app language, to our server. The server forwards it to an AI model — currently Google Gemini, provided by Google LLC — and returns the result to your phone. We do not keep the photo, text or audio after the answer is returned. Google processes the request under its own terms.

3.2 Daily limit

To apply the daily limit of AI requests, the app creates a random identifier on first use. Our server stores this identifier with the number of requests made on each day. It is not linked to your name or contacts. The Support ID shown in Settings is this identifier.

3.3 Barcodes

When you scan a barcode, the code is sent to our server, which looks it up in our product base and in Open Food Facts. If you photograph the label of an unknown product, the product name and its nutrition per 100 g are saved in our product base so that other users can find it. This product record contains no information about you.

3.4 Purchases

Subscriptions are bought through Apple. Apple processes the payment; we do not receive your card details. To check your subscription we use RevenueCat, Inc., which receives an anonymous app user identifier and your purchase receipts.

3.5 Technical data

Our hosting provider, Cloudflare, Inc., processes IP addresses and request data to deliver the Services and protect them from abuse. Server logs are kept for a short time.

3.6 Analytics and advertising

At the moment we do not use third-party analytics or advertising tools in the app. If we add them, we will ask for your permission where the law or Apple requires it (for example, through Apple's App Tracking Transparency prompt) and update this policy first.

4. Why we process information

• to provide the features you use, such as meal recognition and barcode lookup (performance of our agreement with you);
• to keep the Services working, secure and within fair-use limits (our legitimate interest);
• to process subscriptions (performance of the agreement);
• to comply with the law.

5. Who receives information

Only service providers that help us run the Services: Cloudflare (hosting), Google (AI recognition), RevenueCat (subscriptions), Apple (App Store and payments) and Open Food Facts (barcode lookups, which contain only the barcode). They may process data outside Georgia, including in the United States and the European Union; we rely on their contractual and legal safeguards for such transfers.

6. How long we keep it

AI requests: not stored after the answer. Daily request counters: up to 90 days. Product records from labels: as long as the product base exists. Data on your phone: until you delete it or the app.

7. Your rights

You can ask us to access, correct or delete information we hold about you, restrict or object to processing, or receive a copy of it. Most of your data never leaves your phone, so you can delete it yourself by deleting the app. To exercise your rights, write to support@trackmeal.app and include your Support ID from Settings. You may also complain to the Personal Data Protection Service of Georgia or your local data protection authority.

8. Children

The Services are not intended for people under 18. We do not knowingly collect information from children.

9. Security

Data travels over encrypted connections and access to our servers is restricted. No system is completely secure, but we work to protect your information.

10. Changes

We may update this policy. If the changes are significant, we will let you know in the app. The date at the top shows the latest version.

11. Contact

TrackMeal · support@trackmeal.app