01 Information we collect
Information you give us
- Account: your email address and password (stored only as a secure hash), or the identifier and email address Apple provides if you use Sign in with Apple. With Apple's "Hide My Email" we only receive a relay address. Optionally, a display name.
- Profile and goals: date of birth, sex, height, weight, goal (lose, maintain or gain), target weight, preferred pace, activity level, your daily calorie and protein targets, unit preferences, and workout preferences (experience, location, frequency, session length).
- Meals: the photos you take or pick from your library, text descriptions you type or dictate, the meal slot (breakfast, lunch and so on), the time you log them, and any corrections you make to ingredients or portions.
- Body and training logs: weight entries, workout sessions and sets, and calendar notes.
- Messages to us: anything you send to support.
Information created when you use the app
- Meal analysis results: recognised ingredients, estimated portions, calories and macronutrients, and the AI model's raw response for that meal.
- Depth data: on iPhones with a LiDAR sensor, the depth map embedded in a meal photo, used to estimate food volume.
- Notifications: your device's push token, your reminder preference, and a record of the reminders we've sent you (so we don't send duplicates).
- Subscription status: whether you have Premium, which plan, and when it renews or expires. Payments are handled by Apple; we never see your card details.
- Usage counters: how many AI meal analyses you've used this month, to apply the free-tier limit.
Information from Apple Health (only with your permission)
- Steps, active energy burned, body weight, height and workouts. See section 04.
Technical and diagnostic information
- Product analytics: which screens you open and which actions you take (for example "meal logged", with its source, slot and calorie total, or your calorie target when you finish onboarding), plus device model, OS and app version. These are linked to a random account ID, never to your email, meal text or photos. You can turn analytics off in Settings.
- Crash reports: technical details about errors and crashes (stack trace, device and OS, app version), linked to your account ID only.
- Server logs: IP address, request time and endpoint, kept briefly for security and troubleshooting.
02 How we use your information
- To analyse meals you log and estimate their calories and nutrients.
- To calculate your daily calorie and protein targets and show your progress.
- To keep your food diary, weight history and workouts, and sync them across sessions.
- To send the reminders you've enabled (one meal reminder and one step-goal nudge per day at most).
- To manage your account, sign-in, Premium status and the free-tier limit.
- To keep the service secure, prevent abuse and fix bugs.
- To understand, in aggregate, which features are used so we can improve the app.
- To answer your support requests and meet our legal obligations.
We do not sell your personal information, use it for advertising, or share it with data brokers.
03 Meal photos & AI processing
When you log a meal, the photo (or your description) is sent from our server to an AI model that identifies the foods and estimates portions. We access the model through OpenRouter, which forwards the request to the model provider (currently Google's Gemini). The request contains the photo or text and our instructions, not your name, email or profile.
We then look up nutrition values in USDA FoodData Central using generic food names only (for example "Rice, white, cooked"). No personal data is sent to the USDA.
- Photos are used to analyse your meal. They are not used to recognise faces or create biometric identifiers, and they are never shown to other users.
- Our agreements with AI providers prohibit them from using your content to train their models.
- We may review meal analyses and the corrections you make, without linking them to your identity, to measure and improve the accuracy of our estimates.
- Dictation is converted to text by Apple's speech recognition, on your iPhone or on Apple's servers, under Apple's privacy policy. We receive only the resulting text, never audio.
- You keep ownership of your photos and descriptions.
Nutrition estimates are informational and are not medical advice.
04 Apple Health
If you allow it, VeriTrack reads steps, active energy burned, body weight, height and workouts from Apple Health. We don't write to Apple Health. We use this data only to show your activity, weight trend and step goal inside the app, and to send the step-goal nudge if you've enabled reminders.
- Health data is never used for advertising or marketing, and never sold or shared with third parties for those purposes.
- Health data is never sent to our analytics or crash-reporting providers.
- You can revoke access at any time in iOS Settings → Health → Data Access & Devices → VeriTrack. Data already synced stays in your account until you delete it or your account.
05 Legal bases (EEA, UK and similar laws)
- Contract: to provide the app and the features you use, including meal analysis, your diary and Premium.
- Explicit consent: for health-related data (your body measurements, meals and Apple Health data), given when you enter it or grant access. You can withdraw consent by deleting the data, revoking Apple Health access or deleting your account.
- Consent: for push notifications, given through the iOS permission prompt.
- Legitimate interests: security, abuse prevention, crash reporting, and privacy-friendly product analytics, which you can switch off in Settings.
- Legal obligation: where the law requires us to keep or disclose information.
06 Service providers
We share data only with providers that help us run VeriTrack. They act on our instructions and are bound by contracts to protect it.
| Provider | Purpose | Data involved |
|---|---|---|
| netcupGermany | Server hosting: our database, API and backend services | All account and app data |
| CloudflareGlobal | Network security and delivery | IP address and traffic in transit |
| Object storage provider | Storing meal photos and depth data | Meal photos, depth maps |
| OpenRouterUSA | Routing requests to the AI model | Meal photos and descriptions |
| Google (Gemini API)USA | AI meal recognition | Meal photos and descriptions |
| AppleUSA | Sign in with Apple, in-app purchases, push delivery, speech recognition, Apple Health | As described in Apple's own policies |
| RevenueCatUSA | Managing subscriptions and Premium status | Account ID, purchase and subscription records |
| Expo (650 Industries)USA | Delivering push notifications to Apple | Push token, notification text |
| PostHogEU | Product analytics | Account ID, app events, device info |
| SentryEU (Germany) | Crash and error reporting | Account ID, technical error data |
| Email provider | Sending sign-up and password-reset codes | Email address |
We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or to a successor if Veritas Apps LLC is involved in a merger or acquisition. We'll tell you before your data becomes subject to a different privacy policy.
07 Storage & security
Your account and app data are stored on servers in Germany (EU). All traffic between the app and our servers is encrypted with HTTPS. On your iPhone, your sign-in session is kept in the iOS Keychain. Inside our systems, access is enforced per account, so one user can never read another's data, and only a small number of authorised staff can access production systems.
Meal photos are stored privately and are reachable only through short-lived signed links issued to your account.
No system is perfectly secure. If a breach affects your personal data, we'll notify you and the relevant authorities as the law requires.
08 International transfers
Some of our providers process data outside your country, including in the United States. Where data leaves the EEA or UK, we rely on adequacy decisions (such as the EU–US Data Privacy Framework, where the provider is certified) or on Standard Contractual Clauses, together with additional safeguards where needed.
09 Retention & deletion
- While your account exists, we keep your data so the app works: your diary, history and trends.
- Deleting a meal removes it from your diary and deletes its photo and depth data. The analysis record itself (ingredients, portions, totals and any description, but not the photo) is hidden and kept in your account until you delete the account, so the meal still counts toward the monthly free limit.
- Deleting your account (Settings → Account → Delete account) permanently erases your account and all associated data from our database right away: profile, meals, photos, weight, workouts, health data, push tokens and notification history. We also ask RevenueCat to delete your subscription record and, if you used Sign in with Apple, revoke the app's access to your Apple ID. Encrypted backups are overwritten within 30 days.
- Server logs are kept for up to 30 days. Analytics and crash data are kept for up to 12 months.
- Purchase records held by Apple are kept under Apple's own policies. Deleting your account does not cancel an App Store subscription. Cancel it in your Apple ID settings.
10 Your rights & choices
Depending on where you live (for example under the GDPR, UK GDPR or California law), you have the right to:
- access the personal data we hold about you and receive a copy in a portable format;
- correct inaccurate data (most of it you can edit directly in the app);
- delete your data (in the app, or by emailing us);
- restrict or object to certain processing, including analytics;
- withdraw consent at any time, without affecting earlier processing;
- lodge a complaint with your local data protection authority.
In-app controls: turn off usage analytics and reminders in Settings, and manage camera, photos, microphone, speech recognition, notifications and Apple Health access in iOS Settings.
To exercise any other right, email [email protected] from the address on your account. We'll respond within 30 days. We don't discriminate against you for exercising your rights.
11 Children
VeriTrack is intended for people aged 16 and over. We don't knowingly collect data from children under 16. If you believe a child has created an account, contact us and we'll delete it. Calorie targets are designed for adults and should not be used by people with, or recovering from, an eating disorder without medical supervision.
12 This website
veritrack.app is a static site. It has no accounts, forms, analytics or advertising cookies. Our hosting and network providers record standard server logs (IP address, browser, pages requested), kept for up to 30 days for security. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
13 Changes to this policy
We'll update this page when our practices change and revise the date at the top. If a change is significant, we'll also tell you in the app before it takes effect.
14 Contact
Veritas Apps LLC, Republic of Armenia
Privacy: [email protected]
Support: [email protected]