Privacy Policy

Effective 10 October 2026 · Version 1.8

Questions or requests about your data: [email protected]

1. Who we are

Fiteath is a food-logging and nutrition app for iOS and Android, built and run by the Fiteath team (“we”, “us”). We are the controller of your personal data when you use the Fiteath app and the fiteath.com website.

This policy follows Vietnam’s Decree 13/2023/ND-CP on personal data protection and the principles of the EU General Data Protection Regulation (GDPR). Send any questions to [email protected].

2. Data we collect

2.1. Account

• Email and password. Passwords are stored only as a hash, so we cannot read your original password.
• If you sign in with Google or Apple: the account identifier and email that Google or Apple provides. Apple sends your name only once, the first time you sign in, and you can choose to hide your real email.
• Display name and profile photo (if you upload one).

2.2. Body profile and goals

Sex, age (stored as birth year), height, weight, activity level (your daily work and how often you exercise each week), goal (lose, maintain or gain weight), your goal weight and the pace you chose, your diet (regular, vegetarian or vegan), foods you say you are allergic to or can’t eat, the extra goals you pick (for example more vegetables, less late-night eating), the daily calorie target calculated from them, and the units you prefer (metric or imperial).

Your list of foods you are allergic to or can’t eat is used to warn you when a dish contains them; if you allow AI services, it is sent along with dish suggestion and dish detail requests (section 2.12). Your answer about pregnancy or breastfeeding is stored only on your device and never sent to our servers; the app uses it to pause weight-loss goals and add calories according to general guidance.

2.3. Food log

• Meals (breakfast, lunch, dinner, snack), time, dishes, estimated calories and nutrients, and your notes.
• The photo’s file name (a one-way hash computed from the photo), so your devices can match the same photo. Our servers do not store the photo itself.
• Recipes you have saved, and recipes you have unlocked by watching an ad.

2.4. Meal photos

• Photos you take are stored in the app’s private storage on your device.
• When you scan a dish, the photo is sent to a third-party AI service to recognize it and return the result for that scan (only if you allow it — see section 2.12). Our servers do not keep the photo.
• If you turn on Settings → Photo backup, photos are uploaded straight from your device to a hidden, app-only folder in your own Google Drive. They do not pass through our servers.
• So that backup works on all your devices, we keep an encrypted authorization from Google that only allows access to Fiteath’s hidden folder in your Drive (we cannot see your other files), together with the email of that Google account. You can remove this access at any time in your Google Account (Security → Third-party apps).

2.5. Health data (only if you allow it)

Daily step count and active calories, read from Apple Health (HealthKit) on iOS or Health Connect on Android. See section 4.

2.6. Location (only when you use the Discover tab)

• Your device’s approximate location (the app does not ask for precise location), used to work out your city or province and suggest dishes nearby.
• If GPS is unavailable, the app estimates an approximate location from your IP address.
• Your area is used to find dishes to suggest. If your city and country cannot be worked out, your approximate location rounded to about 100 m is used instead (section 2.12). Our server stores only the city and country attached to dishes you log, never your coordinates.
• Your last known location is kept on the device so it can be reused when a new fix is unavailable.

2.7. Meal reminders (only if you allow notifications)

The app reminds you to log meals around the times you usually eat. These times are worked out on your device from your food log, and the reminders are scheduled on the device. Nothing about them is sent to our servers. You can turn them off in Settings → Notifications → Meal reminders.

2.8. Premium purchases

Payment is handled by the App Store or Google Play. We never receive or store card details. We only receive the store-signed transaction details (plan, purchase date, expiry date, transaction ID) to activate Premium on the account that bought it.

2.9. Contributions to the shared dish catalog

When you scan or log a dish, its name, estimated nutrition, typical price range and city may be added to a shared dish catalog (after moderation) to help other users. Other users cannot see who contributed. To fight spam, we keep an internal link between a contribution and the account, device ID and a hash of the IP address; this link is deleted when the account is deleted.

2.10. Technical data

• A random device ID generated by the app, device name and model, app version and sign-in times. Used to manage sessions (an account can be signed in on up to 2 devices at a time).
• IP address and server access logs, used to stop attacks and apply rate limits.
• Crash reports and usage statistics (such as screens opened).
• An app attestation signal, used to confirm that requests come from the real app.
• Usage counts for limited features (such as scans and rewarded ads), a record of each reward you get from a rewarded ad (reward type, time and a one-time code for that view), and a technical log of each processing request. This log contains no photos or question text.
• When ads are shown (free plan only), our advertising partners collect the device’s advertising identifier (on iOS only if you allow tracking), IP address, device and app information, and how you interact with ads. See section 6.

2.11. When you contact us

The content of your emails and anything you send to support.

2.12. Requests to AI services (only if you allow it)

• To recognize dishes, estimate nutrition and typical prices, write recipes and suggest dishes, the app sends your request to third-party AI services: the photo you scan; the name of the dish, recipe or product you ask about; for dish suggestions, your city and country (or, if they cannot be worked out, your approximate location rounded to about 100 m), how many calories you have left today, whether you are vegetarian or vegan and the foods you said you can’t eat (if any), so those dishes are left out; for dish details, the dish name, its ingredients and the foods you said you can’t eat, to check whether the dish may contain them; for “why this dish suits you”, your daily calorie target, your lose/maintain/gain goal, the extra goals you picked, whether you are vegetarian or vegan and the foods you said you can’t eat (if any); when you edit a scanned meal, its ingredients, amounts and nutrients, so its health score can be recalculated.
• We never send them your name, email, account ID, body measurements, your pregnancy / breastfeeding answer or data from Apple Health / Health Connect.
• The app asks for your permission the first time, before anything is sent. You can turn it off at any time in Settings → Data & privacy → AI services; while it is off, these features do not work (barcode lookup in the product database still does).
• These services process each request to return the answer and may keep it under their own privacy policies.
• AI results are estimates and can be wrong. You can report a wrong, offensive or harmful result in the app; the report sends us the dish name, the text you saw and your note, so we can improve the results.

3. How we use data

We do not use your data for automated decisions that have legal effects on you. Nutrition results are estimates for your reference, not a medical diagnosis.

4. Health data

Health data is sensitive personal data, so we make these specific commitments:

• The app only reads two types of data: step count and active calories. It never writes anything to Apple Health or Health Connect.
• It reads them only after you grant permission. You can revoke it at any time in Fiteath’s Settings → Data & privacy, in iOS Settings → Health → Data Access, or in the Health Connect app.
• Daily totals are stored on our server to show insights and sync across your devices.
• Health data is never used for advertising or marketing, never sold, never passed to data brokers, and never stored in iCloud.

5. Who we share data with

We do not sell personal data. To run the app, we use a number of service providers and share data only as far as needed. The main recipients are:

Each provider processes data under its own privacy policy. In addition:

• Competent authorities, when required by law.
• If Fiteath is merged or transferred, data may pass to the new owner. They must keep following this policy, and we will tell you beforehand.

6. Advertising

The free plan shows ads: banners, ads within lists, and full-screen ads when you move between some screens or after you save a meal. You can also choose to watch a rewarded ad to get one extra scan or unlock a recipe. Premium shows no ads.

• Ads are provided by advertising partners. Their software in the app collects the data listed for them in section 5 and processes it under their own privacy policies.
• We never give advertisers your food log, body profile, health data, photos, precise location, name or email. Health data is never used for advertising.
• iOS: the app asks whether it may track you (App Tracking Transparency). If you decline, the advertising identifier is not shared and ads are not based on your activity in other apps and websites. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
• EU/EEA, UK and Switzerland: before any ads load, the app asks for your consent to personalized ads. You can change your choice at any time in Settings → Data & privacy → Ad preferences.
• Android: you can reset or delete your device’s advertising ID in the device settings (usually Settings → Privacy → Ads or Settings → Google → Ads).
• If ads are not personalized, you still see ads, but they are based on context (such as the app and your approximate area) rather than your interests.
• Rewarded ads: to grant the reward and apply the daily limits, we record the reward type, the time and a one-time code for that view. The advertising partner may also send us a signed confirmation of the view (transaction ID, ad unit and reward). A recipe you unlock with an ad stays unlocked on your account.

7. Where data is stored

Data may be stored and processed outside Vietnam. By using Fiteath, you agree that data may be transferred outside Vietnam for the purposes in this policy. We only use providers with appropriate data protection measures.

8. How long we keep data and how it is deleted

• We keep data for as long as your account is active.
• Deleting your account: go to Settings → Data & privacy → Delete account. The account is locked immediately and every device is signed out. After 30 days, the account and its data are permanently erased. Within those 30 days, if you change your mind, simply sign in again to restore your account.
• Deleting data, keeping your account: go to Settings → Data & privacy → Delete data and tick what to delete: your food log and photos (including the photos backed up to your Google Drive), goals and body measurements, saved dishes, and steps and active calories. What you tick is erased immediately and cannot be restored. Your account, Premium, usage counts for limited features (such as the free scans you have already used, which are not reset), unlocked recipes, your photo backup connection and your privacy settings stay as they are.
• If you cannot open the app, you can ask us by email to delete your account or some of your data. The steps are on our Delete your account or data page.
• Database backups rotate automatically and the oldest is deleted after at most 14 days. So deleted data disappears from all backups no later than 14 days after it is permanently erased.
• What remains after deletion is no longer linked to you: dishes you contributed to the shared catalog (with the link to your account removed), confirmations of rewarded ads you watched (kept to reconcile ad revenue) and aggregate statistics.
• When you delete your account or sign out, the app removes the food log, profile, saved and unlocked recipes, and cached scan results from the device. Meal photos in the app’s storage remain until you uninstall the app.
• Photo backup authorization: pausing sync keeps it. Settings → Disconnect and delete data deletes every backed-up photo from your Drive, revokes the authorization and deletes the Google account email from our servers. Deleting your Fiteath account also deletes the authorization and the email and revokes the access at Google.
• Photos backed up to Google Drive belong to you and are not deleted with your Fiteath account unless you use Disconnect and delete data first. You can also delete them yourself: open Google Drive on the web → Settings → Manage apps → Fiteath → Delete hidden app data.
• Scan results are cached on the device for up to 30 days so the same photo does not need to be scanned again.
• Server access logs rotate by size and are overwritten after a short time.

9. Your rights

Under Decree 13/2023/ND-CP (and the GDPR if you are in the EU), you have the right to:

• Be informed about what data is processed and why (this policy).
• Give or withdraw consent, using the switches in Settings → Data & privacy (including Ad preferences where available) or your device’s permission settings (such as tracking on iOS). Withdrawing does not affect processing that happened before.
• Access and get a copy of your data: email us.
• Correct your data: edit your profile and food log in the app.
• Delete your data: in the app, delete your whole account or only the data you choose (Settings → Data & privacy), or email us. See Delete your account or data.
• Restrict or object to a specific processing activity.
• Complain to a data protection authority: in Vietnam, the Department of Cybersecurity and High-Tech Crime Prevention (A05), Ministry of Public Security; in the EU, the data protection authority in your country.

Send requests to [email protected] from your account’s email address. We may ask for more information to confirm it is you. We will reply as soon as we can and within the time limits set by law.

10. Children

Fiteath is for people aged 16 and over. We do not knowingly collect data from anyone under 16. If you are a parent or guardian and know that your child has created an account, tell us and we will delete it.

11. Security

• All connections between the app and our servers are encrypted with HTTPS.
• Passwords, sessions and one-time codes are stored only as hashes.
• The database is not exposed to the internet. Only a few operators can access it, and only when needed for support, moderation or fixing bugs.

No system is perfectly secure. If a data breach happens, we will notify the competent authority and the people affected as required by law.

12. Cookies and this website

The fiteath.com website uses no cookies, no trackers, and loads nothing from third parties.

Inside the app, some features open a third-party web page in a hidden web view. That party may set cookies in the web view under its own policy. These cookies stay on your device and are removed when you uninstall the app.

Ads in the app: advertising partners may use the device’s advertising identifier and similar technologies stored on your device to show ads, limit how often you see them and measure them (see section 6).

13. Changes to this policy

When this policy changes, we update the effective date at the top. For important changes (such as collecting a new type of data or using data for a new purpose), we will tell you in the app or by email before they apply, and ask for your consent again where the law requires.

14. Contact

See also our Terms of Use. This policy exists in English and Vietnamese. If the two versions differ, the English version prevails.