Privacy policy

1. Your journal and device permissions

The local journal works without a collaboration account. It stores the information you enter: meals, ingredients, portions, nutrition, photos, notes, meal times, fasting records and other intake or activity entries. Depending on what you log, this may include sensitive health information, such as medicines or supplements, exercise, mood and alcohol consumption. Saved ingredients, meal templates and preferences are also stored on your device.

Camera access lets you take food photos. The photo picker lets you choose images to add. On supported devices, camera depth and geometry information can help estimate portions. These features do not require you to share your entire photo library.

Location capture is optional. When enabled and permitted in iOS, the app uses location to determine the city and country for an entry. Location coordinates and related context may be cached locally to support this lookup. Saved city, country and time-zone information may be included when you use AI assistance, collaboration or exports. You can turn off location capture or change permissions in iOS Settings.

2. When you use AI features

DietPad sends AI requests through its server to OpenAI to provide the feature you request:

• Photo recognition: the selected meal photos, related notes, shared-portion or leftover context, and available depth or geometry hints.
• Nutrition estimates: the ingredient name, amount and unit you want to estimate.
• Period assistant: your question, conversation context and structured journal information for the selected period. This can include meals, nutrition, intake amounts, fasting, notes and saved location and time-zone context. The assistant does not independently retrieve the rest of your journal.

Only include information you want processed for that request. Responses and conversation state may be stored to support follow-up questions. OpenAI may retain submitted content and responses under its API data controls, including service operation and abuse monitoring; deleting an entry locally does not itself delete provider-held data. See OpenAI’s API data controls for its retention and processing practices.

3. Accounts and dietitian collaboration

If you use collaboration, DietPad stores an account identifier, your display name and any email address you provide, passkey public credentials, session information, invitations and connection settings. Passkey authentication is handled through your device; DietPad does not receive the private passkey.

While you are signed in as a client, journal updates and associated photos sync to the collaboration service. A dietitian can access your journal only through an accepted, active connection and its selected scope: all history or entries from the connection start onward. The service also stores comments, review status and related activity needed for collaboration.

Revoking a connection stops further access through the service. It does not remove your local journal or copies the recipient has already exported or independently retained. If you enable collaboration notifications, DietPad registers a device push token and uses Apple’s push service to deliver relevant alerts. You can disable these alerts in DietPad or iOS Settings.

4. Service operation and security

Online requests expose technical information such as an IP address, request time and device or app information. DietPad uses request identifiers, installation identifiers, Apple App Attest information, public keys, security counters and usage limits to authenticate requests, prevent abuse and operate the service. These records are separate from your local journal.

Local diagnostics can include performance reports and technical app events. Diagnostic exports are designed to exclude journal content, account secrets and session tokens. You choose whether to export and share a diagnostic archive with support.

We use the information described here to provide DietPad’s features, maintain service security and respond to support requests. DietPad does not include advertising or cross-app tracking. Hosting, AI and platform providers process information needed for their respective services. Provider processing may take place outside your country. Apple’s platform services are also covered by Apple’s privacy policy.

5. Your choices, retention and deletion

• Local journal: entries and photos remain on your device until you delete them or remove the app’s data. Removing the app does not by itself delete a collaboration account or previously shared copies. Device backups may retain app data according to your backup settings.
• Exports and backups: you can export reports or a full backup and choose where to save or share them. Full backups contain journal content and photos, but exclude passkeys, collaboration session tokens, push tokens and cached dietitian feedback. Manage or delete exported copies in the destination you chose.
• Sign Out: this revokes the current collaboration session and clears local collaboration caches. It does not delete your account, its connections or your local journal.
• Delete Account: use the account controls in the app to remove your collaboration account, credentials, sessions, connections, shared journal records and server photos. Your local journal stays on the device and can be deleted separately.
• AI and operational records: recognition session state expires separately from journal entries. Provider-held AI responses, security records, service logs and support correspondence have separate retention purposes and are not all removed by local journal deletion or signing out.

We retain service information as needed to provide the features you use, maintain security, resolve support requests and meet applicable obligations. Retention depends on the type of information and service involved. Contact info@dietpad.info to request access, correction or deletion of information held by DietPad, or to ask about a specific record. Depending on your location, you may have additional privacy rights. We may need to verify that a request concerns your own account.

6. Website and support

The demos on dietpad.info run in your browser using example data. They do not upload food photos or send your portion adjustments to the AI service. The website does not use advertising trackers, analytics scripts or tracking cookies. Standard web-server logs may record IP addresses, browser information, requested pages and request times for operation and security.

If you email support, we receive your email address, message and any attachments you choose to send. We use them to respond to your request. Avoid including journal or health information unless it is needed to explain the issue. Links to the App Store and other providers take you to services with their own privacy practices.

7. Policy updates and contact

We will update this page when DietPad’s data practices change and revise the date above. For support or any privacy request, email info@dietpad.info.