This policy explains what the FoodieX AI Calorie Tracker app collects, how we use it, and the choices you have. We build the app; we do not sell your data.
FoodieX ("the app", "we", "us") is a mobile calorie and nutrition tracker operated by PowerX Solutions ("the publisher").
This policy covers the FoodieX Android app, our servers and data storage (hosted by Supabase in India), the AI processing performed by OpenAI on our behalf, and the third-party services listed in section 6.
When you take or select a meal photo, the app resizes it and sends it securely to our servers, which pass it to OpenAI (processed in the United States) to identify the meal and estimate its nutrition. OpenAI keeps requests in short-term abuse-monitoring logs for up to 30 days and, by default, does not use them to train its models (see section 6). FoodieX also stores the photo in private storage linked to your account (hosted in India) so you can see it on the meal's detail screen and in your history. Photos are retained until you delete your account. Deleting an individual meal removes it from your history, but its stored photo is removed when you delete your account. Photos are not shared with advertisers and are never used to train third-party AI models.
Profile pictures you upload are stored with your account and displayed through a public image link. The link is not listed or searchable, but anyone who has the exact link can view the image. Your profile picture is deleted when you delete your account.
Besides meal photos, we send OpenAI only what each AI feature needs:
We do not send your email address or account identifier to OpenAI.
When you subscribe to FoodieX Premium, Google Play processes your payment. Through our subscription service (RevenueCat) we receive your subscription status, plan, renewal or expiry date, and platform. We keep a record of each subscription event (such as purchase, renewal, cancellation, or payment issue, with the plan and amount charged) and generate a receipt for it. We never receive your payment method or card details.
If you email [email protected], we retain the message and your reply address until the issue is closed.
At sign-up we determine your approximate country from your IP address (never a precise location) to apply the legal minimum age for that country. If the country cannot be determined this way, we use your device's region setting instead. We store the resulting country, and how it was determined, on your profile; FoodieX does not keep your IP address after this check. Certain third parties listed in section 6 (notably Google AdMob) may separately observe your IP for their own purposes.
If the age check determines you are under the legal minimum age for your country, we store a minimal record — the account identifier, the country, and the times of the attempts only. No date of birth and no other personal data is retained for rejected accounts. This record supports abuse-prevention (detecting repeat attempts to bypass the age check) and is deleted if the associated sign-in account is deleted.
We use the information above only to:
We do not sell your data, share your meal photos or nutrition data with advertisers, or build advertising profiles ourselves.
| Party | Role | Data received |
|---|---|---|
| Supabase | Database, sign-in, file storage, and server processing | All account, profile, meal, photo, chat, reminder, and device data |
| OpenAI | AI for meal scanning, manual logging, AI Coach, and daily insights | Meal photos, meal descriptions and nutrition, AI Coach messages, display name, and profile goals / diet / allergies (see 3.5); no email address or account identifier |
| Google Firebase Analytics | Product analytics | Feature-usage events, account identifier, app-installation identifier |
| Google Firebase Crashlytics | Crash reporting | Error details, device information, account identifier if signed in |
| Expo | Push notification delivery | Push token and notification content |
| Google AdMob | Ad serving (free tier) | Advertising ID, IP address, ad interactions |
| PostHog | Product analytics | Feature-usage events, account identifier, email address |
| Sentry | Crash & error monitoring | Error details, account identifier and email address if signed in |
| RevenueCat | Subscription management | Your account identifier, Google Play purchase records, subscription status |
| Resend | Transactional email: welcome, subscription status (trial, purchase, renewal, cancellation, payment issue, end), and account-deletion confirmation | Your email address, display name, plan, amount charged, and event dates |
| Google Play Billing | Payment processing | Handled entirely by Google; we never receive your payment method |
When you first open the app after signing in, we check with Google's consent service and, where required in your region, show Google's consent form to obtain (or withhold) your consent for personalized ads. Your choice is respected on every subsequent ad request (rewarded, banner, native, app-open).
We use both PostHog and Firebase Analytics and compare their reports for accuracy. The same events are sent to both and are linked to your account identifier after sign-in. Your consent to product analytics and crash reporting is given at signup; to withdraw it, delete your account (Profile → Delete account), which stops all further processing of your data.
New accounts see no banner, native (feed), or app-open ads for the first 3 days after sign-up. After that, free-tier users may see these ads. Optional rewarded ads, which you choose to watch for extra scans or AI Coach questions, are available at any time. When you decline personalization in Google's consent form, ads are served without behavioral targeting.
You can, from within the app:
You can, by emailing [email protected]:
For users in the EU/UK: you also have the right to lodge a complaint with your local supervisory authority.
For California residents: you have the right under CCPA to know what personal information we collect, to request deletion, and to opt out of any "sale" of personal information (we do not sell personal information as defined by CCPA).
FoodieX is a general-audience service. At sign-up we check the age you enter against the legal minimum age for your resolved country; if you are below it, sign-up is refused and no personal data is retained beyond the minimal record described in section 3.10. If you have concerns about the personal data of an individual in your care being processed by FoodieX, please email [email protected] and we will address them.
No system is 100% secure. If you discover a vulnerability, please email [email protected].
Your data is stored in India. Our third-party processors (OpenAI, Firebase, AdMob, PostHog, Sentry, RevenueCat, Expo, Resend) primarily operate in the United States. By using FoodieX, you consent to your data being processed in these jurisdictions.
We will update the "Last updated" date at the top when we change this policy. For significant changes, we will also notify you in the app or by email.
Your consent to product analytics and crash reporting is part of the single consent you give at signup, when you accept our Terms of Service and Privacy Policy. FoodieX does not have a separate in-app switch to turn analytics off. To take back this consent, delete your account (Profile → Delete account). Deletion is immediate and cannot be undone, and it stops all further use of your data.
If you have any grievance, complaint, privacy-related concern, or question regarding your personal data, please contact us at [email protected].
We will acknowledge your request within 24 hours and provide a response within 15 days, or within any shorter period required by applicable law.