Eata Privacy Policy
Effective date: October 5, 2026
Eata is a calorie and nutrition tracking app made by Sponsho LLC, a Texas limited liability company ("Sponsho", "we", "us"). This policy explains what information Eata handles, where it goes, and the choices you have. If you have questions, email support@eataai.app.
The short version
- Your food diary stays on your phone. Meals, recipes, weights, targets and the answers you give during setup are stored on your device. We don't receive them.
- When you scan a meal photo, it comes to us. We send it to our AI provider, Anthropic, to estimate the food and portions. Unless you turn off Help improve Eata's scans in Settings, we keep the photo and what you logged from it to make Eata's estimates more accurate.
- No account, no name, no email. Eata doesn't ask who you are. Your phone gets a random ID so scans and subscriptions work.
- No ads, no tracking, no selling. We don't sell or share your information for advertising.
- You can delete everything. Settings → Delete all my data removes your records from your phone and your photos from our servers.
1. Information that stays on your device
These are stored only on your phone (and in your phone's own backups, if you have backups turned on):
- What you log: foods, meals, portions, recipes, saved meals, and photo drafts you haven't sent.
- Your weight entries and targets for calories, protein, carbs, fat and weight.
- What you tell us during setup: goal, sex (used only for the calorie formula), age, height, weight, activity level, pace, and what makes tracking hard for you.
- Your settings, including reminder times.
We don't receive this information. If you use Export my records, the file you create is yours to keep or share as you choose.
2. Information we receive
a. Meal photos and notes. When you scan a meal, Eata sends a copy of the photo (re-encoded, without the location and other metadata stored in the original file) and any note you typed to our servers. We use them to:
- produce the estimate you see (our AI provider analyses the photo; see section 3);
- improve the accuracy of Eata's estimates for everyone, for example by reviewing photos where an estimate was wrong, and testing changes to how Eata estimates meals against past photos, while Help improve Eata's scans is on (see below); and
- keep the service working and prevent abuse.
Help improve Eata's scans (Settings → Photo analysis) is on by default. While it's on:
- we keep your scan photos and notes, and also receive what you logged from each scan: the food names, portions, and calories, protein, carbs and fat after you reviewed them. This tells us how far off the estimate was. We don't receive the date or meal you logged it to, or anything else from your diary;
- we use them only to measure and improve the accuracy of Eata's estimates. We don't sell them.
You can turn it off at any time. When you do, we stop receiving what you log, your existing photos stop being used to improve Eata, and they're deleted on the schedule in section 5.
b. An anonymous ID. The first time you scan, your installation gets a random account ID on our servers. It isn't linked to your name, email, or phone number.
c. Scan records. For each scan we keep the time, whether it worked, the estimate returned, and technical details such as which AI model was used. We use these to apply daily scan limits, keep costs in check, and fix problems.
d. Device check. Before your first scan, Eata asks Apple (App Attest) or Google (Play Integrity) to confirm that the app is genuine and running on a real device. We store the result, not information about you, to stop automated abuse.
e. Subscription status. Purchases are handled by Apple or Google. Our subscription service, RevenueCat, tells us whether your anonymous ID has an active subscription or trial. We never receive your card details.
f. Messages you send us. If you email us, we receive your email address and what you write.
We don't collect your precise location, contacts, browsing history or advertising identifiers, and we don't use cross-app tracking.
3. Who we share information with
We share information only with service providers who process it for us, under contracts that limit how they can use it:
| Provider | What they receive | Why |
|---|---|---|
| Anthropic, PBC (Claude AI) | Meal photos and notes you send for a scan | To identify foods and estimate portions and nutrition |
| Supabase, Inc. | Your anonymous ID, photos, notes and scan records | Hosting our database, file storage and server functions |
| RevenueCat, Inc. | Your anonymous ID and purchase information from Apple or Google | Managing subscriptions and free trials |
| Apple and Google | Purchase details (through their stores) and device check requests | Payments, subscriptions, and confirming the app is genuine |
We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger, sale or reorganisation of our business (in which case this policy will continue to apply to your information).
We do not sell your personal information, and we do not share it for targeted advertising.
4. Reminders and widgets
Meal and weigh-in reminders are scheduled on your phone. Home screen widgets read from your phone. Neither sends information to us.
5. How long we keep information
- On your phone: until you delete it, use Delete all my data, or remove the app.
- Photos, notes and scan records on our servers:
- with Help improve Eata's scans on: up to 2 years from the scan, then deleted automatically;
- with it off: deleted automatically once you haven't opened Eata for 14 days (we can't tell when an app is uninstalled, so we treat 14 days without use as the end of use);
- either way, deleted straight away when you use Delete all my data.
- Device check results: for as long as your anonymous account exists.
- Emails: as long as needed to help you, and as required by law.
6. Deleting your data and your other choices
- Delete everything: Settings → Delete all my data. This erases your records on the phone and, once the app reaches our servers, deletes your photos, scan records and anonymous account there. If your phone is offline, the app tells you and deletes nothing until it can reach us.
- Without the app: email support@eataai.app from your device's email with the subject "Delete my data". Because we don't know who you are, we'll explain how to find the ID we need. See also /delete-data.
- Photo scans are optional. You can add food by searching or typing it in, and no photo is sent.
- Help improve Eata's scans can be turned off in Settings → Photo analysis (see sections 2 and 5).
- Notifications can be turned off in Settings or in your phone's settings.
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, to object to or restrict some processing, to withdraw consent, and to appeal our decision on a request. To use them, email support@eataai.app. We won't discriminate against you for using them. If you are in the EU, UK or another place with a data protection authority, you can also complain to that authority.
Texas, California, Washington and other US states: we don't sell personal data, use it for targeted advertising, or use it for profiling with legal or similarly significant effects. Information about your diet and weight can count as "consumer health data" or "sensitive data" under some state laws; on our servers we only hold the photos and notes you choose to send, and we use them only as described here.
Trinidad and Tobago: we handle personal information in line with the Data Protection Act, 2011, to the extent it is in force.
7. Children
Eata is for adults 18 and older. We don't knowingly collect information from anyone under 18. If you believe a child has used Eata, email support@eataai.app and we'll delete what we hold.
8. Security
We use encryption in transit, private storage that only your anonymous account can read, server-side access controls, and device checks to protect information. No system is perfectly secure, so we can't guarantee absolute security. Keep your phone locked to protect what's stored on it.
9. International transfers
We're based in the United States, and our service providers may process information in the United States and other countries. Where the law requires it, we use appropriate safeguards for these transfers.
10. Legal bases (EU and UK)
Where EU or UK law applies, we process scan photos and notes to provide the service you asked for (contract) and, for improving accuracy, on the basis of our legitimate interest in a working, accurate service, balanced against your rights. You can object at any time by emailing us or deleting your data. Subscription processing is necessary to provide your subscription.
11. Changes to this policy
If we change this policy, we'll update the date at the top and, for significant changes, tell you in the app before they take effect.
12. Contact
Sponsho LLC · support@eataai.app