In short
- We collect what the app needs to work: your account, what you log, and your goals.
- Your age, sex, height, weight and activity stay on your phone. They're never sent to our servers.
- Meal photos are sent to Google's Gemini AI to recognise the food. We don't store them.
- We don't sell your data, show ads, or use tracking — in the app or on this website.
- You can export or delete everything from inside the app.
Who we are
EquiliEat is operated by [Operator legal name], in Canada ("we", "us"). For anything about your privacy, email support@equilieat.ca.
What we collect, and where it goes
These are every place your data is stored or sent.
| Data | Where it goes | Why |
|---|---|---|
| Email address and sign-in details | Supabase (our database and sign-in provider) | Your account |
| Meals you log: foods, amounts, scores, times | Supabase | Scores, history and Progress |
| Your daily goals | Supabase | Personal targets |
| Water you log, and your water goal | Supabase | Hydration tracking |
| Saved improvements | Supabase | Your Improve archive |
| Subscription status | Supabase, Apple, RevenueCat | Knowing whether you have Pro |
| Meal photos | Our server (a Cloudflare Worker), then Google Gemini | Recognising the food. Not stored by us |
| Barcodes you scan, and product searches | Open Food Facts, directly from your phone | Looking up the product |
| Technical logs: account ID, time, errors | Cloudflare | Running the service and fixing faults |
| Error alerts | Resend (email), to our support inbox | Telling us when something breaks. May include your account ID and part of an analysis result |
| Account emails, such as sign-up confirmation and password reset | Supabase | Signing in |
| Age, sex, height, weight, activity, goal | Your phone only | Working out your targets. Never sent to us |
We don't knowingly collect your precise location, contacts or payment card details.
What stays on your phone
When you set goals, your answers — age, sex, height, weight, activity level, and whether you want to lose, maintain or build — are stored only on your iPhone, under your account. They're used on the phone to calculate your targets; only the resulting targets are saved to your account.
If someone else signs in on the same phone, they can't see your answers. Deleting your account removes them from the phone.
Meal photos
When you analyse a meal by photo, each photo is sent over an encrypted connection to our server, and from there to Google's Gemini API, which recognises the food and estimates portion sizes. We don't store your photos. Google processes them under its Gemini API terms.
The nutrition and environmental values are then looked up in public databases. They aren't generated by the AI.
Barcodes and Open Food Facts
Scanning a barcode, or searching for a packaged product, sends that request from your phone directly to Open Food Facts. Like any website, they receive your device's IP address with it. Their privacy policy applies to that request.
Subscriptions
Payments are handled entirely by Apple; we never see your card details. RevenueCat manages subscription status for us, linked to your account ID. We store only whether you have Pro.
How we use your data
- To calculate your Health score, Eco score and CO₂e, and show your history.
- To keep your account working and your data in sync.
- To answer you when you contact us.
- To find and fix faults.
We use your data with your consent, given when you create an account and use its features, and to provide the service you've asked for. You can withdraw consent at any time by deleting your account.
How long we keep it
- Your account data — meals, goals, water, saved improvements, subscription status — is kept while your account exists, and deleted when you delete your account.
- Meal photos aren't stored by us.
- Server logs are kept by Cloudflare for a limited period.
- Error alert emails are kept in our support inbox.
- Your body profile stays on your phone until you change it, delete your account, or delete the app.
Your rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you can:
- See your data. In the app, go to Profile → Data & Privacy → Export my data. You'll get a file with everything we hold, plus the profile kept on your phone.
- Correct it. Edit your meals and goals in the app, or ask us.
- Delete it. Profile → Data & Privacy → Delete my account permanently deletes your account and everything linked to it. This can't be undone.
- Withdraw consent, by deleting your account.
- Complain, to us at support@equilieat.ca, or to the Office of the Privacy Commissioner of Canada.
We reply to privacy requests within 30 days.
Where your data is processed
Our service providers may process your data outside Canada, including in the United States, where it may be subject to local law.
Security
Data is encrypted in transit. Your account data is protected by access rules that let each account read only its own records. No system is perfectly secure: if a breach creates a real risk of significant harm to you, we'll tell you and the Privacy Commissioner, as the law requires.
Age
EquiliEat is for people 16 and over. We don't knowingly collect data from anyone younger. If you think we have, contact us and we'll delete it.
This website
equilieat.ca sets no cookies and runs no analytics or tracking scripts. Its fonts, scripts and images are all served from our own site, so visiting it doesn't send your data to anyone else. Our host, Cloudflare, keeps standard server logs to deliver and protect the site.
Changes
When this policy changes, we'll update this page and the date at the top. For significant changes, we'll also tell you in the app.
Contact
[Operator legal name] · support@equilieat.ca