Foodziyama Privacy Policy

Effective 4 November 2026

Foodziyama is an iPhone app for photographing your meals and keeping a food diary. This policy explains what data the app handles, where it goes, and the choices you have. "We", "us" and "our" mean Yauheni Zeliankou, the operator of Foodziyama.

The short version

There is no account. We don't ask for your name, email or phone number.
Your diary, your cut-out food photos, your weight and your plan (age, sex, height, weight, goal) are stored on your iPhone. If iCloud is on, your diary and weigh-ins are also synced to your own private iCloud, which we cannot read.
When you scan a meal, the photo is sent to our server and on to Anthropic (the company behind Claude), which estimates what the food is and its nutrition. We don't keep the photo.
We don't sell your data, we don't share it for advertising, we don't show ads, and we don't track you across other apps or websites.

1. What stays on your iPhone

Most of what you put into Foodziyama is stored only on your device, in the app's own storage:

Your diary: meals and the dishes in them, dish names, calories and macros, ingredients, portions, prices, ratings, favourites, notes, the people you tagged as eating with you, and the time of each meal.
Food cut-outs: the "sticker" images of each dish that the app cuts out of your photo. The full photo you took is not saved by the app.
Places: the name of the restaurant or place you picked for a meal and its map coordinates, plus places you typed in yourself.
Weigh-ins: the weights you log and their dates.
Your profile and plan: age, sex, height, current and target weight, goal and pace, and the daily calorie and macro targets calculated from them.
Settings such as reminder preferences, and a random identifier created by the app (see section 3).

Cutting dishes out of a photo (the stickers) happens on your iPhone using Apple's on-device image tools. We have no copy of the data above. Like any app data, it may be included in your iPhone backups (iCloud Backup or a computer backup) according to your device settings.

When you use Export CSV or Share, the app creates a file or image and hands it to whatever app or person you choose. What happens next is up to you and that recipient.

2. iCloud sync

If you are signed in to iCloud and iCloud is enabled for Foodziyama, your diary (meals, dishes, cut-outs, places, companions, prices) and your weigh-ins are synced through Apple's CloudKit to the private database in your own iCloud account. This lets your diary appear on your other devices and survive a new phone.

Data in your private iCloud database is stored by Apple under Apple's Privacy Policy. As the app developer, we cannot see or access it.
Your profile and plan (age, sex, height, weight, goal) are not part of iCloud sync; they stay on the device.
You can turn iCloud off for Foodziyama at any time in the iOS Settings app under your Apple Account > iCloud.

3. What we receive

Our server exists to run the AI features. It receives only what those features need:

When you…	We receive
Scan a meal	Your meal photo, reduced to at most 1568 pixels on its longest side and re-encoded without photo metadata (no EXIF or GPS); or, for dishes analyzed later, the individual cut-out images.
Scan a meal with a place picked	The name of the place (for example "Joe's Diner"), used as a hint for naming dishes. Not your coordinates.
Correct a dish ("no egg, extra rice")	The text you typed, plus the dish's current name, calories, macros and ingredients.
Add an ingredient by name	The ingredient name, its weight in grams, and the dish name.
Any of the above	A random device identifier, the app version, your language/region setting, and your IP address (which every internet request carries).

The device identifier is a random code generated by the app on your iPhone. It is not your name, Apple Account, advertising identifier or any hardware ID. We use it to count your daily scans, apply your subscription, and prevent abuse. It is not linked to your identity.

Your IP address is used briefly, in memory, to rate-limit requests and protect the service from abuse. It is not stored with your requests in our database.

We do not receive your diary history, weigh-ins, profile, plan, or coordinates.

4. AI analysis (Anthropic)

To recognize food and estimate nutrition, our server sends your meal photo (or cut-outs), the place name if you picked one, your language setting, and, for corrections, your note and the dish details (or an ingredient name you typed, when the nutrition database has no match) to Anthropic, PBC, through Anthropic's commercial API for its Claude models. Anthropic processes this in the United States and returns dish names, ingredients and nutrition estimates, which our server sends back to your phone.

We do not send Anthropic your device identifier, IP address, or any other identifier.
Under Anthropic's commercial terms, Anthropic does not use data sent through its API to train its models by default. Anthropic retains API inputs and outputs for a limited period for purposes such as safety and abuse monitoring, as described in Anthropic's privacy policy and its commercial terms.
Please don't photograph people, documents or anything other than food. Anything in the photo is sent for analysis.
AI estimates can be wrong. See our Terms of Use.

5. Nutrition database (USDA)

To improve accuracy, our server looks up ingredient names (for example "white rice" or "fried egg") in the U.S. Department of Agriculture's FoodData Central database. Only the ingredient name is sent. No photos, no identifiers about you, and no other diary data are included.

6. Location and places

Location is optional. If you allow it ("While Using the App"), Foodziyama uses your current location when you take a photo to suggest nearby restaurants and cafés. For photos you import from your library, the app reads the location saved in the photo, if any, for the same purpose.

To find nearby places, the app asks Apple Maps for points of interest around your coordinates. Apple handles that request under Apple's Privacy Policy. We never receive your coordinates.
The coordinates of a meal and of the place you pick are saved in your diary on your device (and in your private iCloud, if sync is on).
Only the place's name is sent to our server and to Anthropic, as described above.
If you don't allow location, you can still type a place name or skip it.

7. Purchases

Subscriptions and the one-time purchase are sold and billed by Apple through the App Store. We never see your payment card or Apple Account details.

We use RevenueCat to manage subscription status. RevenueCat receives the App Store purchase information for your device identifier (product, purchase and expiry dates, trial status, store country, transaction IDs), along with basic device information and IP address as part of its service. RevenueCat then notifies our server so we can apply your plan's scan allowance. Our server stores only your device identifier, your plan level and its expiry. See RevenueCat's privacy policy.

8. Analytics and crash reports

To understand which features work and to fix bugs, we use:

Amplitude for product analytics: app events such as "app opened", "scan completed", "dish edited", "paywall viewed", "purchase", with simple details like counts, timings, and the goal type you chose (lose, maintain, gain). Events are tied to a random analytics identifier, not to your name. We do not send dish photos, dish names, notes, your weight, age, height, calorie values, Apple Health data, places or coordinates. We configure Amplitude not to collect your IP address, mobile carrier or city, and we do not use session recording.
Sentry for crash and error reports: technical details such as device model, iOS version, app version, and what the app was doing when it failed. We configure Sentry not to collect IP addresses or other personal data by default.

You can turn off usage analytics in the app under You > Privacy. Crash reports contain technical information only.

We do not use advertising SDKs, advertising identifiers (IDFA), or data brokers, and we do not track you across apps or websites owned by others.

9. Notifications

Meal reminders, evening nudges and the trial-ending reminder are local notifications scheduled on your iPhone. Their content is not sent to or through our server. You can turn them off in the app or in iOS Settings. The app may also receive silent system notifications from Apple that keep iCloud sync up to date; these carry no content from us.

10. How long we keep data

Data on our server	How long
Meal photos and cut-outs	Not stored. Held in memory only while the request is processed.
Notes and typed ingredient names	Not stored. Held in memory only while the request is processed.
Analysis results cache: a one-way fingerprint (hash) of the image, linked to the dish names, ingredients and nutrition returned for it, so an identical image isn't analyzed twice	30 days, then deleted. Not linked to you, except that for a scan with a place name the fingerprint also includes your device identifier, so that result is only ever reused for your device.
Daily scan counters (device identifier, date, number of scans)	90 days.
Subscription status (device identifier, plan level, expiry)	While the subscription is active and for up to 12 months after it ends, to handle restores, refunds and disputes.
Server logs (device identifier, request type, status, timing, cost of the AI call)	Up to 30 days.
Rate-limit data (IP address)	In memory only, for minutes.

Data on your iPhone and in your iCloud stays until you delete it (see section 13). Our service providers keep data according to their own policies (for example, Anthropic's API retention period).

We share data only with service providers that help run Foodziyama, only for the purposes above:

Anthropic: AI food recognition and nutrition estimates (section 4).
U.S. Department of Agriculture FoodData Central: ingredient-name lookups (section 5).
Fly.io, Inc. (United States): hosts our server and database.
RevenueCat: subscription management (section 7).
Amplitude and Sentry: analytics and crash reporting (section 8).
Apple: App Store purchases, iCloud sync and Apple Maps place search, under Apple's own terms.

We may also disclose information if required by law, to protect the rights and safety of users or others, or as part of a merger, acquisition or sale of the app, in which case this policy will continue to apply to your data.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it to build advertising profiles.

12. Health data

What you eat, your weight and your goals can be sensitive. Some laws, such as Washington's My Health My Data Act, treat this kind of information as "consumer health data". Here is how we handle it:

What we collect: we don't collect your diary, weigh-ins or body data at all; they stay on your device and in your private iCloud. Our server does briefly process meal photos, dish details and correction notes, which could reveal something about your diet.
Why: only to provide the feature you asked for, identifying food and estimating nutrition.
Sources: you, through the app, and Apple Health if you connect it (your latest weight only).
Shared with: Anthropic (photos, dish details, notes) and USDA FoodData Central (ingredient names only), as processors acting for us. We don't sell health data or use it for advertising.
Your choices: you decide each time you scan or correct a dish. You can use the diary without scanning by entering dishes yourself. You can request access to or deletion of what we hold (section 14).

Foodziyama is not a medical device.

Apple Health

Foodziyama connects to Apple Health only if you turn on You > Settings > Apple Health; iOS then asks which kinds of data to allow. With it on:

Written to Health: for each dish you log from that day on, its time, its name, and the estimated calories, protein, carbohydrates and fat (AI estimates, adjusted for your portion). Editing or deleting the dish updates or removes it in Health. The weights you log in the app are also written to Health.
Read from Health: your most recent weight from other apps or devices (for example a smart scale), added to your weigh-ins so your plan stays current.
Health data stays on your device, in Apple Health and in your private iCloud. It is never sent to our server, to the AI service (Anthropic), to analytics (Amplitude) or crash reporting (Sentry), and it is never used for advertising, marketing or data mining, nor sold or shared with anyone.
You can turn the switch off, or change the allowed data types in the Health app under your profile > Apps > Foodziyama. Data already in Health stays there until you delete it in the Health app; Delete all my data also removes the food entries Foodziyama added to Health.

13. Deleting your data

In the app: You > Delete all my data erases your diary, cut-outs, places, weigh-ins, profile and plan from this iPhone and from your private iCloud, removes the food entries the app added to Apple Health, and resets the app's device identifier.
Deleting the app removes everything stored on that iPhone. Data in your iCloud stays until you delete it there, either in the app first or in iOS Settings under your Apple Account > iCloud > Manage Account Storage.
On our server: what we hold is limited and expires on the schedule in section 10. To delete it sooner, email us at foodziyama.support@agentmail.to with your device identifier, shown in the app under You.

Subscriptions are not cancelled by deleting data or the app. Cancel in the iOS Settings app under your Apple Account > Subscriptions.

14. Your rights

Depending on where you live, you may have the right to:

know what personal data we hold about you and get a copy;
correct it;
delete it;
object to or restrict certain processing, and withdraw consent;
receive it in a portable format (the in-app CSV export covers your diary);
not be discriminated against for using these rights;
appeal our decision on your request, and complain to a data protection authority.

Because there is no account, we can only find server-side data by your device identifier. Email foodziyama.support@agentmail.to and include it (shown under You in the app). We will reply within the time the law requires (generally 30 days in the EEA/UK and 45 days in US states). If we decline a request, you can appeal by replying to our answer with "Appeal" in the subject line.

Yauheni Zeliankou is the controller of the personal data described in this policy. Our legal bases are:

Performance of a contract: processing your photos, notes and ingredient names to give you the AI features, counting scans, and applying your subscription.
Explicit consent: where a meal photo or note reveals information about your health, we process it only because you choose to send it for analysis. You can withdraw consent at any time by not using the AI features; this does not affect processing already done.
Legitimate interests: keeping the service secure and preventing abuse (rate limits, logs), crash reports, and product analytics that you can turn off. You may object at any time.
Legal obligation: keeping records the law requires, such as for tax.

International transfers. We and our service providers, including Anthropic, process data in the United States. Where data is transferred out of the EEA, UK or Switzerland, we rely on the provider's certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where available, or on the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant). You can ask us for a copy of the relevant safeguards.

You can complain to your local data protection authority. In the UK, that is the Information Commissioner's Office.

Not required: the operator is established in the EU (the Netherlands).

16. US state privacy notices

California (CCPA/CPRA) and other US states. In the past 12 months we have collected these categories of personal information, from you through the app, for the purposes in sections 3 to 8:

Identifiers: random device identifier, IP address.
Commercial information: subscription plan and status.
Internet or other electronic activity: app usage events, crash reports.
Sensitive personal information: meal photos, dish details and notes, which may reveal health-related information, processed only to provide the service you request.

We disclose these categories only to the service providers listed in section 11, for business purposes. We do not sell or share personal information, including sensitive personal information, and have not done so in the past 12 months. We do not use sensitive personal information to infer characteristics about you. We don't knowingly sell or share data of anyone under 16. Retention periods are in section 10.

You or an authorized agent can exercise your rights by emailing foodziyama.support@agentmail.to. We will verify a request by asking for your device identifier and, if needed, other information to confirm the request comes from the device's user.

17. Children

Foodziyama is not directed to children. You must be at least 13 years old to use it, or at least 16 if you live in the European Economic Area or another country where a higher age applies. We don't knowingly collect personal data from children under these ages. If you believe a child has used the app's AI features, contact us and we will delete what we hold.

18. Security

Data between the app and our server is encrypted in transit (HTTPS). Our server keeps as little as possible, for as short a time as possible. Data on your iPhone is protected by iOS, and iCloud data by Apple. No system is perfectly secure, so we can't guarantee absolute security.

19. Changes to this policy

We'll update this policy when the app changes. The date at the top shows the latest version. If a change materially affects how we use your data, we'll let you know in the app before it takes effect.

20. Contact

Yauheni Zeliankou
De Rijpgracht 15, 1056 XP Amsterdam, Netherlands
Email: foodziyama.support@agentmail.to