SnackletGet the app

Privacy Policy

Last updated 4 October 2026

The short version: we collect what Snacklet needs to work, like your plan, your food diary and your fasts. We never sell your data or use it for ads. Meal photos are analysed and then thrown away. Your duo partner never sees your weight, calories or food. You can export or delete everything from the app at any time.

Who we are

Snacklet is made by dezical (“we”, “us”). We are responsible for the personal data described here. If you have a question or want to use any of your rights, email support@snacklet.app.

Using Snacklet without an account

You can try Snacklet without signing in. Until you create an account, your plan, diary and progress stay on your phone and nothing is sent to us, except for features that need our server: looking up a barcode sends only the barcode number, and the public count of people fasting right now sends nothing about you. AI photo scans and chat estimates need an account.

What we collect and why

Your account
Your email address, your name, and a password (stored only as a secure hash), or the name, email and photo from Google or Facebook if you sign in with them. We use it to keep your account and data in sync across devices. When you sign in we also store the session, including the IP address and device type, for 30 days to keep you signed in securely.
Your plan
Your weight, goal weight, height, sex, birth year, activity level and the pace you pick. We use it to work out your daily calorie target and your progress.
Your diary and progress
The meals you log (food name, calories, macros and portion), water, steps, weigh-ins, fasts and how a fast felt (mood, energy and an optional short note), plus your coins, streaks, quests and buddy items. This is the app itself: it lets us show your history and restore it on a new phone.
Meal photos and descriptions
When you scan a meal or describe it in chat, the photo (reduced in size) or text is sent to our server and on to Google’s Gemini AI service to estimate the food. We do not store the photo or the text. Only the food you choose to log is saved to your diary. We count how many scans you use each day to apply the daily limit.
Barcodes and labels
Barcode lookups are sent to Open Food Facts, a public food database, without any information about you. If you photograph the nutrition label of a product that isn’t in the database, the product’s barcode and nutrition values are saved so the next person who scans it gets them too. Nothing about you is saved with it.
Health data
If you allow it on Android, we read your steps and your latest weight from Health Connect, and on iPhone we count steps with the phone’s motion sensor. These are saved with your diary. We never write to Health Connect or Apple Health.
Insights
Plus members get short daily insights. To write them we send 14 days of daily totals (calories, protein, meals, water, steps, longest fast and weight) and your goals to Google’s Gemini AI service, and save the resulting text.
Your profile
Your display name, a profile photo if you add one, your buddy’s name and look, and your theme. Photos are stored with Cloudflare.
Purchases
If you subscribe to Plus, Apple or Google handles the payment. Our billing provider RevenueCat tells us your subscription status, linked to a random account ID. We never see your card details.
Device and support
Your time zone, so reminders arrive at the right time. If you send feedback, the message and your app version, device model and system version.
Notifications
Reminders are scheduled on your phone. We do not currently store a push token.
Usage stats
Which screens you open and what you do in the app, for example that you finished onboarding, logged a meal, started a fast or opened the paywall, with your device type and app version. We use it to see what works and where people get stuck. It is linked to a random account ID, never your email or name, and never includes your health data: no weights, calories, food or photos. You can turn it off any time in Settings → Share usage stats.

Health data is sensitive, and we treat it that way

Your weight, body measurements, food, fasting and step data are health data. We collect it only when you enter it or allow access to it, and we use it only to provide Snacklet to you. We do not sell it, we do not use it for advertising or marketing, we do not share it with data brokers, and we do not use it to train AI models.

Data we read from Health Connect is used only as described above, in line with the Health Connect Permissions policy and its Limited Use requirements. You can turn off access in Health Connect at any time.

Who can see your data

Your duo partner

If you pair up in Duo mode, your partner sees your first name, your buddy, your streak, whether you are fasting right now and since when, and simple yes/no check-ins for today: whether you logged a meal, reached your water and step goals, and stayed under your calorie target. They also see your shared pet and who fed it. They never see your weight, calorie numbers, food or photos. Leaving the duo stops all sharing.

Your weekly league

Leagues group up to 20 people each week by coins earned. Other members see your rank, weekly coins, display name, profile photo or avatar, buddy and streak. Turn off Show me on leaderboard in Settings and they will see only your rank and coins.

Friends you invite

If a friend joins with your invite code, you are told their first name when your reward is added.

Service providers

We use a small number of companies to run Snacklet. They process data only on our instructions and only to provide their service to us.

Google (Gemini API)
Estimates food from meal photos and descriptions, and writes Plus insights.
Open Food Facts
Public food database for barcode lookups (no personal data sent).
Cloudflare
Stores profile photos.
RevenueCat
Manages Plus subscriptions bought through Apple or Google.
Apple and Google
App stores, payments, sign-in with Google, and Health Connect on Android.
Meta
Sign-in with Facebook, if you choose it.
Resend
Sends account emails, like sign-in links and password resets.
Our hosting provider
Runs our server and database.
PostHog
Usage stats (see above), in the United States. Can be turned off in Settings.

If we start using crash reporting, we will limit it to technical details, never your diary or photos, and update this policy first.

Legal bases (EEA and UK)

  • To provide the service you asked for (performance of a contract): your account, plan, diary, sync, Plus and support.
  • Your explicit consent for health data, which you give when you enter it or allow Health Connect or motion access. You can withdraw it by deleting the data, turning off access, or deleting your account.
  • Our legitimate interests in understanding how the app is used (usage stats, which you can turn off), and in keeping Snacklet secure, preventing abuse (like daily scan limits) and fixing problems.
  • Legal obligations, for example keeping records of purchases where the law requires it.

How long we keep it

We keep your data while you have an account. Meal photos and chat text are not kept at all. Sign-in sessions expire after 30 days. When you delete your account, your data is deleted straight away (see below).

Your choices and rights

  • Export your data: Settings → Privacy & data → Export my data gives you everything in your account as a file.
  • Delete your account: Settings → Privacy & data → Delete account, or follow our delete account page.
  • Correct your data: edit your plan, diary and profile in the app.
  • Control sharing: leave your duo, or hide yourself on the leaderboard.
  • Usage stats: turn off Settings → Share usage stats.
  • Permissions: camera, photos, motion, Health Connect and notifications can be turned off in your phone’s settings.

Depending on where you live, you may also have the right to access, correct, delete or port your data, to object to or restrict how we use it, and to complain to your data protection authority. Email support@snacklet.app and we will reply within 30 days. We do not sell or share personal data as defined by California law.

When you delete your account

We delete your account, profile and photo, your plan, diary and progress, your league and duo membership, invites, usage counts and insights, and your subscription record with RevenueCat. The data on your phone is erased too. A few things are kept because they are not linked to you: feedback messages you sent (with the link to your account removed), product nutrition you added from a label, and our billing provider’s purchase records, which carry only a random ID. Deleting your account does not cancel a subscription; cancel it in your App Store or Google Play settings.

Security

Data is encrypted in transit. Passwords are stored only as secure hashes, and photos are served through short-lived links. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you as the law requires.

International transfers

Our providers may process data in other countries, including the United States. Where the law requires it, we rely on safeguards like the European Commission’s standard contractual clauses.

Children

Snacklet is not meant for anyone under 16, and we do not knowingly collect data from them. If you believe a child has given us data, email support@snacklet.app and we will delete it. Users aged 16 or 17 never get a calorie deficit in their plan.

Changes

If we change this policy, we will update the date at the top, and tell you in the app before any change that affects how your data is used.

Contact

Questions or requests about your privacy: support@snacklet.app.