Privacy Policy

Who we are

Eat Like This is operated by HealthTech Labs OÜ (registry code 17428736), a company registered in Estonia ("we", "us", "our"). Eat Like This is a meal planning application for iOS and Android. We generate personalized weekly meal plans based on your dietary preferences, goals, and schedule. All recipes are reviewed by registered nutrition professionals.

This Privacy Policy applies to the Eat Like This mobile app, our website at eatlikethis.app, and any related services we operate.

Information we collect

Account information. When you create an account, we collect your email address and name through our authentication provider. You may also sign in with a third-party account (e.g. Apple or Google), in which case we receive your name, email address, and profile photo from that provider. Your name and profile photo may be visible to other members of any group you join.

Group and shared meal planning information. If you create or join a group, we process the group name, membership, invite code, and limited profile and nutrition information needed for shared portion and grocery-list calculations. Other group members can see your name and profile image. The app may also share limited profile inputs with their devices — including weight, height, calculated age, gender, activity level, goal type, lean body mass, calorie-target adjustment, and meal pattern — so the app can calculate portions for each member. Your raw birth date is not shared. Other members see the resulting portion and grocery contributions rather than your full account, check-in history, or private notes.

Dietary and health preferences. To personalize your meal plans, we collect information you provide about your dietary goals, restrictions, allergies, cuisine preferences, and schedule.

Body measurements. During onboarding and weekly check-ins, you may provide weight, height, body fat percentage, lean body mass, and waist/hip measurements. Some jurisdictions classify these as biometric data.

Health and fitness data. With your explicit opt-in, the app can read selected data from Apple Health on iOS or Health Connect on Android: steps, active calories, exercise time or sessions, walking and running distance, floors climbed, heart rate, resting heart rate, VO2 max, body-fat percentage, and weight. We use these categories to show activity and body trends. If you have also accepted the current AI data processing agreement, a derived summary of steps, active calories, exercise, distance, resting heart rate, and weight may provide context for nutrition chat or weekly check-in insights. We do not request permission to write data to Apple Health or Health Connect, and we do not use this data for advertising or marketing.

Meal plan and usage data. We store your generated meal plans, logged meals (including unplanned meals for adaptive replanning), grocery lists, and interactions with the app such as swaps and completions.

Check-in and wellbeing data. During weekly check-ins, we collect self-reported mood, cravings, movement quality, sleep quality, and optional free-text reflections. This data is used to generate personalized insights and adapt future meal plans.

Photos and images. You may use your device camera or photo library to photograph meals for nutritional estimation, share images in the nutrition assistant, scan a product or nutrition label, provide an optional ingredient-image reference, or upload a profile photo. Photos used by AI-powered tools may be sent to OpenAI for the requested estimate, scan, image generation, or safety check. Profile photos uploaded through the app are screened before they can become visible to group members.

Voice recordings. You may use voice input for the AI chat and check-in flows. Audio recordings are sent to our servers and transcribed using an AI service provider. Raw audio is not retained on Eat Like This servers after transcription; provider processing is subject to the OpenAI retention terms described below.

Device and technical data. We automatically collect basic technical information such as your device type, operating system version, app version, and general usage patterns to help us improve performance and fix bugs.

How we use your information

We use the information we collect to:

• Generate and personalize your weekly meal plans
• Power adaptive replanning when you go off-plan
• Track your progress toward your nutritional goals
• Create and manage your grocery lists
• Provide optional AI-powered features including personalized chat, meal estimation, check-in analysis, voice transcription, recipe import, and ingredient scanning
• Automatically create decorative food images for your recipes and ingredients
• Screen group-visible names, group names, and uploaded profile photos for safety before publication
• Improve the app, fix bugs, and develop new features
• Communicate with you about your account, updates, and support

We do not use your data to build advertising profiles or show you targeted ads.

Groups and social features

Groups are invite-only and are designed for people who plan or prepare meals together. Group members can see one another's names and profile images and can view shared portion and grocery-list calculations. The group feature does not allow members to send free-form messages, posts, images, voice recordings, or audio to one another. A group owner may send a fixed profile-completion reminder and remove members, and any member may leave a group.

AI-generated content

Several optional features in Eat Like This are powered by artificial intelligence systems (currently provided by OpenAI). These include the nutrition chat assistant ("Ask Nutrish"), meal estimation, weekly check-in insights, voice transcription, recipe import, and ingredient scanning. When you use generative features, you are interacting with an AI system — not a human nutritionist. The app also automatically creates decorative food images from food-specific recipe and ingredient information, and OpenAI provides the separate automated safety screening described below.

AI-generated responses and insights may be inaccurate or incomplete. They are intended as general guidance and do not constitute medical or dietary advice. Always consult a qualified health professional for decisions about your health.

Legal basis for processing

If you are in the European Economic Area (EEA), UK, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following:

• Contractual necessity. Processing your account information, dietary preferences, and meal plan data is necessary to provide the service you signed up for.
• Consent. We rely on your explicit opt-in when you enable Apple Health or Health Connect and select the health categories the app may read. We separately rely on your explicit AI data processing consent before an optional interactive AI feature can send a summary of enabled health metrics, or other personal, health, voice, photo, or free-form content, to OpenAI. You can turn off the health integration, revoke individual health permissions in the platform settings, or withdraw AI consent at any time.
• Legitimate interests. We process food-specific recipe and ingredient information to automatically create decorative food images and provide a consistent visual experience. We also process group-visible names, group names, and uploaded profile photos for proportionate safety moderation to protect members and enforce our Community Guidelines, and device and technical data to maintain security, fix bugs, and improve the service. We balance these interests against your rights and freedoms.
• Legal obligations and legal claims. After account deletion, we may retain the minimized, pseudonymized consent evidence described below where necessary to demonstrate compliance or to establish, exercise, or defend legal claims.

Data sharing

We do not sell your personal information. We only share data with third parties when necessary to operate the service:

• Other users / group members. When you join or participate in a group, your name and profile image are visible to the other members of that group. To provide shared portions and grocery lists, limited profile and nutrition inputs described above are also sent to and stored on group members' devices for local calculations. This sharing is limited to members of the group you join and is part of the group feature. We do not share your private chat conversations, mood, cravings, sleep responses, free-text check-in reflections, waist/hip measurements, or personal notes with group members.
• AI service providers. Optional AI-powered features — including the nutrition assistant and chat-title generation, meal estimation, voice transcription, check-in insights, recipe import, and ingredient scanning — currently use OpenAI. Depending on the feature, message text, photos, voice recordings, meal-plan and check-in context, recipe URLs and retrieved content, recipe hints, custom ingredient information, or a summary of steps, active calories, exercise, distance, resting heart rate, and weight read from Apple Health or Health Connect may be sent to OpenAI after you accept the current AI data processing agreement. Health summaries are included only when the health integration is also enabled and are used to personalize nutrition chat or check-in insights. For automatic food-image generation, food-specific recipe or ingredient descriptions and an optional product reference photo may be sent to OpenAI without account, profile, or health identifiers intentionally included in the request. Separately, group names, group-visible names, and profile photos uploaded through the app may be sent to OpenAI for automated safety moderation before publication. Food-image generation and mandatory safety processing do not depend on optional AI consent. Safety processing is disclosed by the Group Community Guidelines agreement or profile-photo upload permission. We have a Data Processing Agreement with OpenAI that includes Standard Contractual Clauses. OpenAI does not use API inputs to train its models by default unless we opt in. We configure supported Responses API requests not to store response application state, but we do not promise Zero Data Retention without verified production controls. For endpoints subject to OpenAI's default abuse monitoring, customer content may be retained for up to 30 days; endpoint-specific retention and longer legal or safety exceptions may apply. Withdrawing AI consent stops future optional AI processing and disables the features covered by that agreement. It does not delete profile or account data needed for core non-AI features, previously saved chat or check-in content, or data sent before withdrawal; those records follow the retention and deletion rules below. Withdrawal does not disable automatic food-image generation or required safety moderation. See OpenAI's API data-controls documentation and Privacy Policy.
• Authentication. We use Clerk to manage accounts and sign-in. Clerk processes your email and authentication credentials on our behalf. See Clerk's Privacy Policy.
• Subscription management. We use RevenueCat to manage in-app subscriptions and purchases. RevenueCat receives your anonymized user identifier and purchase data to process and validate subscriptions. See RevenueCat's Privacy Policy.
• App stores. If you subscribe through the Apple App Store or Google Play Store, your payment is processed entirely by those platforms. We do not receive or store your payment card details.
• Push notifications. We use Expo's push notification service to deliver notifications to your device. Expo receives your device push token and platform information. See Expo's Privacy Policy.
• Infrastructure. We use cloud hosting providers to store and process your data. All data is encrypted in transit and at rest.

We may also disclose information if required by law, to protect our rights, or to prevent fraud or security threats.

Cookies and local storage

Our marketing website does not use tracking cookies or third-party analytics. The only client-side storage we use on the website is localStorage to remember your light/dark theme preference.

The mobile app does not use cookies. It stores your authentication session and cached data locally on your device to provide offline access.

Data retention

We retain your account data and meal plan history for as long as your account is active. When an in-app account-deletion request is accepted, we immediately remove the account's application data from our active database, including profiles, check-ins, meals, favorites, calorie records, group membership, referral information, and local subscription history. Group ownership is transferred to a remaining member, or the empty group is deleted.

Both the mobile app and our account-deletion website send the deletion request to our service. We remove the RevenueCat customer record and consent state before deleting the corresponding Clerk authentication identity and profile image. A durable retry process completes transient processor failures; Clerk webhooks only confirm an identity deletion and do not initiate this process. We keep only the provider identifiers and technical retry status needed to finish and verify that cleanup, and remove that deletion metadata no later than 30 days after all processors confirm deletion. Deleting a RevenueCat customer does not cancel an Apple App Store or Google Play subscription; users must cancel the store subscription separately to stop renewal. Some data may remain in encrypted backups for up to 90 days before being permanently overwritten.

We retain a minimized record of consent grants and withdrawals — consent type, policy version, action, and timestamp — in pseudonymized form for up to six years after account deletion where needed to demonstrate compliance or establish, exercise, or defend legal claims. We remove the in-app source label and all current consent state. We do not retain user-linked nutrition, check-in, meal, subscription, referral, or usage records for analytics after account deletion.

AI-related data specifically:

• Chat messages: Stored until you delete the conversation or your account.
• Health integration data: Turning off Apple Health or Health Connect stops future reads and future inclusion in AI requests. Withdrawing AI consent stops future AI processing. Health summaries already incorporated into saved chat or check-in content follow the retention period for that content and are deleted when you delete it or your account.
• Voice recordings: Raw audio is not retained on Eat Like This servers after transcription. OpenAI processing is subject to the provider retention terms described above.
• Meal photos: Processed for nutritional estimation only and not retained on our servers.

Statistics that were already irreversibly aggregated and detached from individual accounts (for example, a total count of cuisine preferences) may be retained indefinitely to improve the service.

International data transfers

Our database is hosted in the EU (AWS Europe, Frankfurt) and our API runs in the EU (GCP, Stockholm). Your core account and meal plan data stays within the European Economic Area.

However, some of the third-party services we use to operate the app — including our AI provider (OpenAI), authentication provider (Clerk), subscription manager (RevenueCat), and push notification service (Expo) — are based in the United States. When you use features powered by these services, relevant data may be transferred to and processed in the US or other countries that may not provide the same level of data protection as your home country.

Where required, we rely on appropriate safeguards for these transfers, including Standard Contractual Clauses approved by the European Commission, or the service provider's participation in recognized frameworks such as the EU-U.S. Data Privacy Framework. You can request more information about the specific safeguards we use by contacting us.

Apple Health and Health Connect controls

Apple Health and Health Connect are optional and read-only in Eat Like This. Enabling the in-app health setting opens the platform permission screen, where you choose which categories to allow. You can turn the integration off in Eat Like This at any time, and you can review or revoke individual permissions in Apple Health or Health Connect. Turning the integration off stops future reads; it does not change data in either health platform because Eat Like This does not write health records.

Health data is read on your device for trends and nutrition personalization. A derived summary leaves the device only when you invoke a consent-gated AI feature, such as nutrition chat or AI check-in insights. Without current AI consent, the app does not send Apple Health or Health Connect data to OpenAI.

Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Ask us to correct inaccurate or incomplete information.
• Deletion. Request that we delete your personal data and account. You can delete your account here or from within the app.
• Portability. Receive your data in a structured, machine-readable format.
• Restriction. Ask us to limit how we process your data in certain circumstances.
• Objection. Object to processing of your data where we rely on legitimate interests.

To exercise any of these rights, contact us at jackie@eatlikethis.app. We will respond within 30 days.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority. Our lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia — www.aki.ee.

Children's privacy

Eat Like This is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Security

We take reasonable technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The "Last updated" date at the top of this page reflects when the policy was most recently revised.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please reach out:

• HealthTech Labs OÜ (registry code 17428736)
• Tornimäe tn 5, 10145 Tallinn, Estonia
• Email: jackie@eatlikethis.app
• Website: eatlikethis.app