1. Who we are
Eat is the meal-planning app for iPhone and the website at theeat.app. When this policy says "we", it means the operator of Eat, who is the data controller for the personal data described here. You can reach us at privacy@theeat.app.
2. What we collect
Your account. Your email address, your name if you give one, your date of birth (to confirm you are old enough to use Eat), and a profile photo if you add one. If you sign in with Apple or Google, we receive the name and email those services share with us.
Your plan inputs. Your body measurements, goal and activity level, food preferences and restrictions, allergies, kitchen equipment, chosen supermarkets and weekly budget. These are used to build your plan and are stored on your phone, not on our servers.
Your plans and logs. The meal plans Eat generates, meals you swap, save or log, and photos or barcodes you scan to log food. These also stay on your phone.
Subscription and referral records. Which plan you have, whether you have used a free trial, and any referral code you generate or redeem.
Technical information. Standard server logs such as your IP address, browser or device type and the time of each request, kept briefly for security and to keep the service running.
3. How we use your data
We use your information to build and reshape your weekly plan and shopping list; keep every plan within your restrictions, allergies and budget; show live supermarket prices for your chosen stores; run your account, subscription and referrals; answer your messages; and keep Eat secure and working. We do not use your data for third-party advertising, and we do not sell it.
4. Health and nutrition data
To set your calorie and macro targets, Eat asks for your weight, height, age, sex, activity level and goal, and may ask about allergies and dietary restrictions. This is sensitive information and we treat it that way: it is stored on your device, sent to our plan-generation service only for the moments needed to build your plan, and is not used for any other purpose. You can delete it at any time by deleting the app or your account.
5. Sharing and third parties
We share data only with the processors that make Eat work, and only what each one needs:
- Google Firebase (account sign-in, profile photo storage and hosting of the price data).
- Cloudflare (our API, security and email forwarding).
- Anthropic (generating your meal plans from your inputs) and OpenAI (meal images on the Power plan). Your inputs are sent without your name or email.
- Stripe (payments for web subscriptions) and Apple (payments for App Store subscriptions). We never see your full card number.
- Resend (sending our verification and billing emails).
- Nutrition databases such as USDA, Open Food Facts and FatSecret, used to look up foods you log. Only the food or barcode is sent, never your identity.
Each processor is bound by contract to protect your data. We may also disclose information where the law requires it.
6. Payments and subscriptions
Subscriptions bought on the website are handled by Stripe, which collects your payment details directly. Subscriptions bought in the app are handled by Apple through your Apple Account. We receive confirmation of your plan and its status so we can unlock it on every device you sign in on. Billing history for web subscriptions is available through the Stripe billing portal linked from your account.
7. Retention
We keep your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where we must keep records such as billing history for legal or accounting reasons. Verification codes expire within ten minutes. Server logs are kept for a short period for security.
8. Your rights
Wherever you live, you can ask us to access a copy of the data we hold about you, correct anything that is wrong, or delete your account and personal data entirely. You can delete your account from the app under Profile, Settings, Delete account, or email privacy@theeat.app and a person will help. If you are in the UK or EU you also have the right to complain to your data protection authority.
9. Children
Eat is not intended for children under 13, and we ask for your date of birth when you create an account to confirm this. If you believe a child under 13 has given us personal data, contact us and we will delete it.
10. International transfers
Our processors operate in several countries, including the United States and the EU. Wherever your data travels, we rely on the safeguards those providers offer, such as standard contractual clauses, to protect it.
11. Changes to this policy
If we make a material change we will tell you in the app or by email before it takes effect. The date at the top of this page shows when it was last updated.
Contact
Questions about this policy: privacy@theeat.app or via the contact page.