FHE’s Meal Tracker Privacy Policy
Effective date: 11 August 2026
Policy version: 2026-08-11
This Privacy Policy explains how FHE’s Meal Tracker (“FHE”, “we”, “us”, or “our”) collects, uses, stores, and shares personal data when you use the FHE’s Meal Tracker mobile application and related services.
- Operator: Gabriel Yap Beng Chih
- Privacy contact / Data Protection Officer: privacy@fhemealtracker.com
1. Scope
This policy applies to the FHE’s Meal Tracker iOS application, its hosted application programming interface, and the account, meal tracking, nutrition estimation, progress, data export, and account deletion features provided through them.
2. Data we collect
Depending on the features you use, we may collect:
Account information
- Email address and account identifier.
- Authentication and session information.
Passwords are handled by our authentication provider. FHE does not store your password in readable form.
Profile, goals, and optional health context
- Name, age, sex, height, current weight, target weight, and optional target date.
- Activity level, exercise preferences, dietary style, meal preferences, eating window, and foods to avoid.
- Nutrition targets and the nutrients you choose to display.
- Allergies, medical conditions, and medications if you choose to provide them.
Meal and progress information
- Meal photographs, meal date and time, meal type, descriptions, and correction comments.
- Estimated calories, protein, fats, carbohydrates, fibre, sugar, sodium, and related nutrition values.
- Weight entries, targets, meal history, progress records, and AI-generated meal coaching.
Optional location information
If you turn on Save photo location, the app may store latitude and longitude from a selected photograph’s metadata or from your phone when a photograph is taken. This feature is off by default and can be turned off in App Settings.
The service decodes and re-encodes uploaded meal photographs before cloud storage or analysis. This removes embedded EXIF/GPS and camera metadata from the stored file. If you separately enable Save photo location, the app reads the location on your device and saves the coordinates as part of the meal record.
Technical and security information
- App version, build number, account identifier, consent status, Terms and Privacy acknowledgement versions and timestamps, and limited API-usage records used for security, abuse prevention, and service limits.
- Apple, TestFlight, hosting, or infrastructure providers may provide technical diagnostics such as crash or service logs under their own terms.
Subscription information
If subscriptions are enabled, we process your plan or entitlement, product identifier, subscription expiry status, and related Apple transaction information needed to unlock paid features, restore purchases, provide customer support, and prevent misuse. FHE does not receive your complete payment-card details.
FHE does not use third-party advertising trackers and does not sell personal data.
3. How we use data
We use personal data to:
- Create and secure your account.
- Save and display your meals, photographs, nutrition values, goals, weight, and progress.
- Analyse meal photographs and correction comments when you request AI analysis.
- Generate nutrition-target suggestions or coaching when you request those features.
- Personalise estimates using the profile and goals you provide.
- Export your data and process account deletion.
- Operate, secure, troubleshoot, and improve the service.
- Respond to support, privacy, and security requests.
- Comply with applicable legal obligations.
FHE is intended only for general well-being purposes and to encourage or maintain a healthy lifestyle. Its estimates and coaching may be incomplete or inaccurate and are not medical advice, diagnosis, monitoring, management, or treatment. Do not use FHE to determine whether food is safe to eat or free of an ingredient or allergen. Consult a qualified healthcare professional for medical or dietary decisions.
4. AI processing and your choices
FHE offers different AI modes:
- Advanced Cloud and Lite Cloud may send selected meal photographs, meal notes, correction comments, regional cuisine hints, and relevant profile or goal information to OpenAI to provide the analysis you request.
- Private Lens, if available in a supported build and selected by the user, performs its supported photograph analysis on the device and does not provide cloud goal or progress analysis.
Cloud meal-photo analysis is used only after you enable its separate consent control. Optional medical conditions and medications are included in cloud goal or progress analysis only after you separately enable health-context consent.
You can withdraw either consent in App Settings. Withdrawal applies to future AI requests and does not alter meal records you previously chose to save.
Do not submit information about another person unless you are authorised to do so.
5. Service providers and disclosure
We use service providers to operate FHE. Depending on the feature, personal data may be processed by:
- Supabase for authentication, database hosting, and private photograph storage.
- Render for the hosted FHE application programming interface.
- OpenAI for cloud AI analysis that you request and consent to.
- RevenueCat for subscription entitlements, purchase restoration, and subscription-status management.
- Expo for application build and delivery services.
- Apple for iOS, App Store, TestFlight, and related diagnostics.
These providers process information for the services they provide to us and under their respective agreements and privacy terms. We may also disclose information when required by law, to protect users or the service, or as part of a properly managed business transfer.
We do not sell or rent personal data and do not share it for behavioural advertising.
6. International processing
Some providers may process or store data outside Singapore. Where applicable, we take reasonable steps to use providers and arrangements intended to provide a standard of protection comparable to applicable Singapore data-protection requirements.
7. Storage, security, and retention
We use access controls, authenticated requests, private storage, encrypted network connections, row-level database security, per-account data separation, and operational safeguards designed to protect user data.
Your account data is generally retained while your account is active and while it is needed to provide the service. When you complete in-app account deletion, FHE deletes the account and associated application records, including profile, meals, weights, goals, photographs, saved location records, progress records, AI-usage records, subscription entitlement records, the associated RevenueCat customer profile, and the app’s local FHE cache, except where retention is required by law or necessary to establish, exercise, or defend legal claims.
Photographs uploaded for analysis but not saved as a meal are treated as temporary drafts and enter routine deletion after 24 hours. Cleanup may complete later if the service is unavailable or a storage provider temporarily rejects the deletion.
Deleting your FHE account does not cancel an Apple subscription. You must cancel an active subscription through your Apple Account if you do not want it to renew. If you later reinstall the app or restore an Apple purchase, Apple and RevenueCat may create a new subscription record as needed to validate that purchase.
Limited residual information may remain temporarily in provider backups or security logs until it expires under the applicable provider’s retention cycle.
No system can guarantee absolute security. Contact us promptly if you believe your account or data may have been compromised.
8. Your choices and rights
Inside the app you can:
- Review and update your profile and goals.
- Turn optional location collection on or off.
- Enable or withdraw cloud-photo and optional health-context consent.
- Export a machine-readable copy of your account data.
- Permanently delete your account and associated FHE data.
You may also contact us to ask about access, correction, withdrawal of consent, or a privacy concern. We may need to verify your identity before fulfilling a request. We aim to respond within 30 calendar days. If more time is reasonably required, we will tell you in writing when we expect to respond, subject to applicable law. Withdrawing consent may prevent us from continuing to provide a feature that requires the affected data.
9. Age requirement
FHE is intended only for people aged 18 or older. We do not knowingly permit children to create accounts. If you believe a person under 18 has provided personal data, contact us so that we can investigate and take appropriate action, including deletion where appropriate.
10. Changes to this policy
We may update this policy as the service changes. We will update the date at the top and provide additional notice when a change is material or when required by law.
11. Contact
Operator: Gabriel Yap Beng Chih
Location: Singapore
Privacy contact / Data Protection Officer: privacy@fhemealtracker.com
For general help, use the public FHE Support page linked from App Settings.