Privacy Policy

The short version

• We don't sell your information, and we never give your health information to advertisers.
• There are no ads, ad pixels or tracking scripts in the app.
• Your plan answers are saved to our server only if you say yes on the "Your stats stay yours" screen. You can take that back any time in ⚙️.
• Deleting your account (👤 → Delete account) deletes everything we hold about you.

What we save

• On your device: your plan, meal log, workout log and saved meals are kept in your browser's storage, so the app works without an account.
• Your account, if you make one: your email address, a scrambled form of your password (a salted PBKDF2 hash; we can't read your password), when you signed up, your plan (free or Pro), and how many photo scans and meal descriptions you used each day.
• Your meal and workout log, if you have an account: saved month by month so it follows you to any device, along with the meals you saved with ⭐.
• Your plan answers, only with your consent: goal, sex, birth year, height, weight, target weight, pace, everyday activity, training, food rules and what breaks your streak, plus the calorie and protein targets we worked out, your settings (when your day starts, hide calorie numbers, quiet mode), and when you agreed. Details are on the health data page.
• Marketing answers: where you heard about us and which calorie apps you've used before, if you answer (both can be skipped).
• A login cookie: a random code that keeps you logged in. We keep only a scrambled copy of it. It lasts up to a year, or until you log out. It's the only cookie we set.
• Guests: if you make the plan without an account and agree to save it, or use a photo scan, we create a guest record tied to that login cookie, so your answers and free scans are kept.

What we don't keep

• Meal photos: a photo you scan is sent to our server and to the AI that reads it, then thrown away. We don't store it.
• Meals you describe in words: what you type is sent to our server and to the AI that works out the meal, then thrown away. We don't store it; only the meal you choose to log is kept, like any other.
• Your IP address: we don't log it. To limit free photo scans and meal descriptions per network we keep a salted, scrambled version of it for two days, then delete it.
• Barcodes: when you look one up, our server asks Open Food Facts about that barcode number. Nothing about you is sent.

Apple Health and Health Connect (phone app)

In the XP Eats phone app you can connect Apple Health (iPhone) or Health Connect (Android). It stays off until you turn it on in settings, and you can turn it off there at any time.

• What we read: your active calories and your workouts (type, start and end time, calories, and the app or watch that recorded them), to add them to your daily food budget.
• What we write: the meals you log (name, time, calories, protein, carbs and fat). When you edit or delete a meal, we change or remove it in Health too.
• Where it goes: nowhere. What we read from Health stays on your phone. It isn't sent to our server, saved to your account or to iCloud, used for ads or marketing, shared or sold.

Who processes it for us

• Cloudflare hosts the site, the database and the AI that reads meal photos and descriptions (Workers AI). To deliver pages and block abuse, Cloudflare processes the connection details every web request carries, including your IP address, under Cloudflare's privacy policy.
• We use no other services that receive your personal information. We'll update this page before adding one.

How long we keep it

• Account, log and plan answers: until you delete them or your account.
• Guest records: deleted automatically when their login cookie expires, a year after it was made.
• Daily photo-scan and meal-description counts: about four months. Network counts: two days.

Your choices

• See and change your answers: ⚙️ → Your plan.
• Stop saving your answers: ⚙️ → "Answers saved to your account" → Off. We delete them from our server; your plan stays on your device.
• Delete everything: 👤 → Delete account.
• Anything else (a copy of your data, a question, a correction): email seanstemm@yahoo.com. We'll answer within 45 days.

Kids

XP Eats is for adults 18 and over. We don't knowingly collect information from anyone younger. If you think someone under 18 has given us information, email us and we'll delete it.

Security

The site only works over HTTPS. Passwords and login codes are stored only in scrambled form. Only the person who runs XP Eats can reach the database. If your information were ever exposed, we would tell you and the authorities as the law requires.

Changes

When this policy changes, the date at the top changes too. If a change affects how we use health information you've shared, we'll ask for your consent again first.