Privacy Policy

Last updated: 8 October 2026 · version 2026-10-08

1. Service Status

foodchaine is an early-stage service under active development. We work to keep your data safe and available, but features may change and occasional interruptions can occur while the Service matures. You can delete your account and data at any time (see Data Retention & Deletion below).

2. Information We Collect

When you use foodchaine, we collect the following types of data:

  • Account information: name, email address, and authentication credentials when you create an account.
  • Self-reported nutrition data: food descriptions, estimated calories, macronutrients, micronutrients, and beverage/alcohol intake that you choose to log.
  • Self-reported body data: weight measurements you choose to log.
  • Profile information: dietary goals, calorie targets, and preferences you provide during onboarding.
  • Usage data: timestamps of interactions and technical metadata needed to operate the Service.
  • Apple Health data (iOS app, optional): if you choose to connect Apple Health, the iOS app can read your weight and step count from HealthKit and write your logged nutrition and weight back to HealthKit. This sync is off until you grant permission and can be turned off at any time in the app or in iOS Settings.

3. How We Use Your Data

We use your data to:

  • Provide and operate the nutrition tracking service.
  • Display your nutrition history, trends, and progress toward goals.
  • Improve the accuracy of AI-generated nutritional estimates.
  • Communicate with you about your account or the Service.

4. Health Data Classification

Some of the data you provide, including dietary intake, weight, and nutritional information, may be classified as consumer health data under applicable state laws (including the Washington My Health My Data Act, California Consumer Privacy Act, and similar legislation). We treat all nutrition and body-related data with heightened care and do not sell this data to third parties.

Data obtained from Apple HealthKit is used only to provide the sync features you enable. We never use HealthKit data for advertising or marketing, never sell it, and never share it with third parties for their own purposes, consistent with Apple's HealthKit guidelines.

5. Third-Party Data Processing

Your data may be processed by the following categories of third parties in order to provide the Service:

  • Backend infrastructure: Convex (database and server functions).
  • Hosting and deployment: Vercel.
  • Authentication: Third-party auth provider for account login.
  • Payments: subscriptions in the iOS app are sold and billed by Apple. We never receive your payment details; Apple tells us only whether a subscription is active.
  • AI processing: when you log food by typing or speaking, we send that entry through OpenRouter to the DeepSeek model to estimate what it contains. What we send is the entry as you wrote it, the dietary details on your profile that allow us to warn you (such as allergies), and the entries you have already logged that day so the estimate can take them into account. We ask OpenRouter to route the request only to providers that do not retain prompts or responses. We do not send your name, your email address or your weight history.
  • Speech to text: when you dictate an entry in the iOS app, your device shows a first transcript using Apple's speech recognition (on your device where it supports that, otherwise through Apple's service). When you stop talking, the app also sends the recording to our servers, which pass it through OpenRouter to a transcription model to produce a more accurate transcript, especially in noisy places. The recording goes with no name, email address or other account details. We ask OpenRouter to route it only to providers that do not retain prompts or responses, and foodchaine does not store the recording: it is discarded once the text comes back.
  • Analytics: we use PostHog to understand how the app is used and to monitor the quality of nutrition estimates. That monitoring records the food entries sent for estimation and the results returned, against a scrambled identifier rather than your name or email address.
  • AI assistants you connect: when you connect foodchaine to an AI assistant (such as Claude or ChatGPT), the data you request through that assistant, including your logs, stats, profile details, and recommendations, is returned to it and then handled under that assistant provider's own terms and privacy policy. foodchaine only sends data to an assistant in response to requests you make in it.

We do not sell your personal or health data. We do not share your data with advertisers.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can permanently delete your account and all associated data at any time, directly in the app:

  • iOS app: Profile → Delete Account. This immediately revokes your access tokens and permanently deletes your profile, food logs, weight history, health data, workouts, and account records.
  • By request: you can also email us (address below) and we will delete your data within 30 days.
  • If you signed in with Apple: deleting your account here removes everything we hold, but Apple separately remembers that you once used Sign in with Apple for foodchaine. To remove that too, open the Settings app and go to your name, then Sign-In & Security, then Sign in with Apple, and choose foodchaine. That part is held by Apple and we cannot clear it for you.

Deletion is permanent and cannot be undone. Data you exported to Apple Health remains in Apple Health under your control and can be removed via the Health app.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

  • Access: Request a copy of your personal data.
  • Deletion: Request deletion of your personal and health data.
  • Correction: Request correction of inaccurate data.
  • Portability: Request your data in a portable format.
  • Withdraw consent: Withdraw consent for data processing where applicable.

To exercise any of these rights, please contact us using the information below.

8. Data Security

We implement reasonable technical and organizational measures to protect your data. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

foodchaine is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Each version carries the identifier shown at the top of this page, and the version you agreed to is recorded with your account.

When we change it in a way that affects what we collect, who receives it, or what we do with it, we ask you to agree again the next time you open the app. We do not treat carrying on using foodchaine as agreement to something you have not seen.

11. Contact

foodchaine is operated by Baaha, Inc.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@baaha.ai.