Privacy Policy

Effective date: July 3, 2026 · Last updated: August 13, 2026

1.Information we collect

We collect only what the App needs to work. Categories:

We do not intentionally collect precise location, contacts, or advertising identifiers.

2.How we use your information

• Provide core features: log foods, estimate nutrition, show condition-aware recommendations, track biomarkers and progress.
• Analyze food/fridge photos you submit to identify foods and estimate nutrition.
• Personalize targets and meal suggestions to your conditions and goals.
• Maintain security, prevent abuse, fix bugs, and improve the App.
• Respond to your requests and provide support.

We do not sell your personal information, and we do not use your health data for advertising.

3.Legal bases (EEA/UK users)

• Consent — for health data, photos, and importing Apple Health data. You may withdraw consent at any time.
• Contract — to provide the App you request.
• Legitimate interests — security, preventing abuse, and improving the App.
• Legal obligation — where we must retain or disclose data by law.

4.Service providers we share data with

We use trusted providers ("sub-processors") to run the App. They may process your data only to provide services to us:

Photos and text sent to OpenAI's API are used solely to return results to you and, per OpenAI's API terms, are not used to train their models. We may also disclose information if required by law or to protect rights and safety.

Third-party AI service — what is sent and your consent

Some optional features generate results using a third-party AI provider, OpenAI, L.L.C. (United States). We ask for your explicit permission inside the app before any data is sent, and nothing is sent until you agree. You can withdraw permission at any time in Settings → AI features & Privacy; the AI features then stop and no further data is sent.

We do not send your name, email address, account identifier, or the lab values you record (such as LDL, blood pressure, or glucose) to OpenAI. Data is sent only at the moment you use one of these features. Responses are shown in the app; only the meals you choose to log are saved to your account. Data shared with OpenAI is never used for advertising, and OpenAI is contractually required to protect it under terms equivalent to this policy.

5.Apple Health (HealthKit)

• We access Apple Health data only after you grant permission, and only the types needed (e.g., body weight).
• HealthKit data is never used for advertising or marketing, is not sold, and is not shared with third parties for their own purposes.
• You can revoke access anytime in the iOS Settings > Privacy & Security > Health.

6.Data retention

We keep your data while your account is active. You can clear your logged data in the App ("reset my data"), or ask us to delete your account and associated data by emailing khgsyk@gmail.com. We will delete or anonymize data within a reasonable period unless we must keep it to comply with the law.

7.International transfers

We are based in the United States, and our providers (including Supabase and OpenAI) process data in the United States. If you use the App from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our providers operate.

8.Your rights and choices

Depending on where you live (e.g., EEA/UK under GDPR, or California under CCPA/CPRA), you may have the right to:

• Access, correct, or delete your personal information;
• Export a copy of your data (portability);
• Withdraw consent or object to certain processing;
• Not receive discrimination for exercising your rights.

We do not sell or "share" personal information as defined by the CCPA/CPRA. To exercise any right, email khgsyk@gmail.com. You may also manage or delete much of your data directly in the App.

Account & data deletion

You can permanently delete your account and all associated data at any time:

• In the app: open Settings → Delete account and confirm. This immediately and permanently deletes your account and all data linked to it — your profile, health interests, weight / blood pressure / blood glucose and other biomarker records, food and meal logs, photos, medication reminders, and app preferences.
• By email: if you can't access the app, email khgsyk@gmail.com from your account's email address and we will delete your account and data within 30 days.

Deletion is permanent and cannot be undone; deleted data cannot be recovered. We may retain limited records only where required by law (for example, tax or fraud-prevention) and remove everything else. Anonymized or aggregated data that can no longer identify you may be kept.

9.Security

We protect your data using encryption in transit (HTTPS/TLS), access controls, and row-level security on our database. No method of transmission or storage is 100% secure, but we work to protect your information and limit access to it.

10.Children's privacy

HealDiet is intended for adults and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11.Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, provide notice in the App or by other reasonable means. Continued use after changes means you accept the updated policy.

12.Contact

Heung Gi Kim (individual developer)
Email: khgsyk@gmail.com