Privacy Policy
This policy explains how FoodLog handles information when you use the mobile app, website, API, and AI connectors.
Information we process
- Account information such as email address, optional display name, authentication provider, and internal account identifier.
- Food diary content including food names, portions, meal times, calories, nutrients, notes, product brands, and product image references.
- Authentication and security records including hashed session, MCP, OAuth, and refresh credentials. Passwords are stored as salted derived hashes, never plaintext.
- Support messages you choose to send.
- Basic server logs needed for security and reliability. FoodLog does not use advertising trackers.
How information is used
We use information to operate your diary, synchronize it across your devices, authenticate you, provide food search, secure accounts, answer support requests, and let assistants act only after you authorize them.
Service providers and AI connectors
Product searches use Open Food Facts. When you authorize ChatGPT, Claude, or another MCP client, that provider may send requested food information to FoodLog and receive the diary information needed to answer your request. Their handling of conversation data is governed by their own policies. FoodLog never gives an AI provider your FoodLog password.
Retention and deletion
Your account data is retained while your account exists. You can permanently delete it in the app or at the account deletion page. Deletion removes account, diary, social identity, session, MCP, and OAuth records from FoodLog’s active database, except information we must retain by law. Backups age out under the backup retention schedule.
Your choices
You can edit your display name, disconnect AI clients, revoke manual tokens, sign out, and delete your account. Contact [email protected] for privacy questions.
Children
FoodLog is not directed to children under 13 and does not knowingly collect their information.
Changes
Material changes will be reflected by updating this page and its effective date.