Eat'n'Fit
Privacy Policy
EATNFIT Inc.
Last Updated: September 21, 2026
Effective Date: September 21, 2026
1. Introduction
Welcome to EatnFit ("App", "Service"). EatnFit is operated by EATNFIT Inc., a Delaware Corporation with its registered address at 131 Continental Drive, Suite 301, Newark, DE 19713, United States ("we", "us", "our").
We are committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have — including rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).
If you do not agree with this Policy, please do not use the App.
2. Who This Policy Applies To
This Policy applies to all users of the EatnFit mobile application and website (collectively, the "Service"), regardless of location. Additional rights apply depending on where you live — see Section 12 (Your Rights) for details.
3. Data We Collect
3.1 Account Information
When you create an account, we collect:
- Your name and email address
- Authentication credentials if you sign in via Google Sign-In or Apple Sign-In (we receive only the profile information these services share with us)
- Profile preferences you choose to set (e.g., age, sex, goals)
3.2 Health and Metabolic Data
To provide core features of the App, you may provide:
- Body metrics: weight, height, BMI
- Dietary data: daily caloric intake, macronutrient targets, meal logs
- Metabolic indicators: activity levels, basal metabolic rate estimates
- Goals: weight loss, maintenance, muscle gain, or custom nutrition targets
You may enter this data manually, or — with your explicit permission — allow the App to sync it from connected health platforms such as Apple HealthKit and Google Health Connect. You control this connection and can revoke it at any time in your device settings. Data we receive from Apple HealthKit is never used for advertising and is never sold or shared with third parties for marketing.
⚠️ This data qualifies as health data under GDPR Article 9 and requires your explicit consent before we process it. You provide this consent during onboarding and can withdraw it at any time (see Section 9).
3.3 Food Photos
When you photograph a meal, the image is processed by AI to identify food items and estimate their nutritional content. We collect:
- The photo itself
- The AI-generated nutritional analysis
- Any corrections or notes you add to the result
Photos are transmitted to our AI processing partners (see Section 6) and are not stored longer than necessary for analysis unless you save them to your meal log.
3.4 Device and Technical Information
We automatically collect:
- Device type, operating system version, and language settings
- App version and crash reports
- Anonymized usage analytics (screens visited, feature interactions, session duration)
- IP address (used to determine approximate region for service delivery)
3.5 Subscription and Payment Information
We collect records of your subscription status and plan. Payment card details are processed entirely by Apple App Store or Google Play and are never seen or stored by us.
4. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing the core AI food recognition and calorie tracking features | Performance of contract (Art. 6(1)(b)) + Explicit consent for health data (Art. 9(2)(a)) |
| Creating and managing your account | Performance of contract (Art. 6(1)(b)) |
| Processing your subscription | Performance of contract (Art. 6(1)(b)) |
| Sending service-related communications (billing, policy updates) | Performance of contract / Legitimate interest (Art. 6(1)(f)) |
| Improving and training our AI models using anonymized, aggregated data | Legitimate interest (Art. 6(1)(f)) — we do not use your identifiable health data for model training without explicit consent |
| Ensuring security and fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Sending marketing communications (opt-in only) | Consent (Art. 6(1)(a)) |
5. Important Health Data Disclaimer
EatnFit is a general wellness and nutrition tracking tool, not a medical device or healthcare service. The calorie estimates, nutritional data, and metabolic insights provided by the App:
- Are generated by artificial intelligence and may be inaccurate
- Are for informational and educational purposes only
- Do not constitute medical advice, diagnosis, or treatment
- Should not replace consultation with a qualified healthcare professional
Always consult a doctor, registered dietitian, or other qualified health professional before making significant changes to your diet or exercise regimen, especially if you have a medical condition.
6. Sharing Your Data
We do not sell your personal data. We share data only in the following circumstances:
6.1 AI Processing Partners
Food photos and associated meal notes are transmitted to third-party AI providers to perform nutritional analysis. These providers include services such as OpenAI, Google Cloud AI, and similar platforms. They are contractually bound to process your data solely for this purpose and to maintain security standards consistent with this Policy.
6.2 Infrastructure Providers
Your data is stored and processed using cloud infrastructure providers (such as Firebase / Google Cloud Platform and AWS). These providers act as data processors under GDPR and are bound by appropriate data processing agreements.
6.3 Analytics Partners
We use the following analytics tools to understand how the Service is used:
- Firebase Analytics (Google LLC) — mobile app event tracking and crash reporting
- Amplitude — product analytics: user flows, retention, and funnel analysis
These providers process data as data processors under GDPR, bound by Data Processing Agreements (DPAs). Analytics data is anonymized or aggregated before sharing; these tools do not identify individual users.
6.4 Advertising and Attribution Partners
We work with advertising and mobile attribution partners to measure the effectiveness of our marketing campaigns and attribute app installs to specific channels. These partners are:
- Meta Platforms (Facebook/Instagram) — conversion tracking and retargeting via Meta Pixel and Conversions API (CAPI)
- TikTok — conversion tracking via TikTok Pixel and Events API
- Google LLC — conversion tracking via Google Ads Tag
- AppsFlyer — mobile measurement partner (MMP) for attributing installs and in-app events to ad campaigns
We have entered into Data Processing Agreements (DPAs) with each of these partners, as required by GDPR. On our website, none of the above tracking technologies load or fire before you make a choice on our cookie banner. On iOS, no advertising or attribution SDK accesses your device identifier before you respond to the App Tracking Transparency (ATT) prompt.
6.5 Legal Requirements
We may disclose your data if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of EATNFIT Inc., our users, or others.
6.6 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you before your data is subject to a different privacy policy.
7. International Data Transfers
EATNFIT Inc. is based in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data will be transferred to and processed in the United States, which may not have data protection laws equivalent to those in your jurisdiction.
We safeguard such transfers using:
- Standard Contractual Clauses (SCCs) approved by the European Commission, entered into with all US-based data processors
- Appropriate technical and organizational security measures
By using the App, you acknowledge that your data will be transferred and processed in the United States subject to these safeguards.
8. Data Retention
We retain your data for as long as your account is active. Specifically:
- Account data: Retained for the duration of your account, plus 30 days after deletion request to allow for recovery
- Health and metabolic data: Retained until you delete it from the App or delete your account
- Food photos: Deleted from our servers within 90 days of the analysis unless saved to your meal log
- Anonymized analytics data: May be retained indefinitely as it cannot identify you
- Legal/financial records: Retained for 7 years as required by US law
9. Your Rights
Depending on your location, you have the following rights:
9.1 Rights Under GDPR (EEA, UK, Switzerland)
- Right to access: Request a copy of the personal data we hold about you
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten"): Request deletion of your data
- Right to restriction: Ask us to limit how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interest
- Right to withdraw consent: For processing based on consent (including health data), withdraw at any time without affecting prior processing
- Right to lodge a complaint: File a complaint with your local supervisory authority (e.g., your national Data Protection Authority)
9.2 Rights Under CCPA/CPRA (California Residents)
- Right to know what personal information we collect and how it is used
- Right to delete personal information
- Right to correct inaccurate personal information
- Right to limit the use of sensitive personal information
- Right to opt out of the "sale" or "sharing" of personal information
- Right to non-discrimination for exercising your rights
"Sale" and "Sharing" of personal information. We do not sell your personal information for money. However, our use of advertising and attribution technologies (such as the Meta Pixel, TikTok Pixel, Google Ads Tag, and AppsFlyer described in Section 6.4) to measure and target advertising may qualify as a "sale" or "sharing" of personal information for cross-context behavioral advertising under the CPRA. We do not knowingly sell or share the personal information of consumers under 16 years of age.
How to opt out. You can opt out of this activity at any time:
- On our website: select "Reject All" on our cookie banner, or reopen it via the "Cookie Settings" link in the footer.
- In the mobile App: decline the App Tracking Transparency (ATT) prompt on iOS, or disable ad personalization in your Android settings.
- By request: email contact@eatnfit.com with the subject line "Do Not Sell or Share My Personal Information."
9.3 How to Exercise Your Rights
Submit a request by email to contact@eatnfit.com with the subject line "Privacy Rights Request." We will respond within 30 days (or 45 days where an extension is permitted by law). We may ask you to verify your identity before processing the request.
10. Cookies and Tracking Technologies
On our website, we use cookies and similar technologies. Please see our separate Cookie Policy for full details.
The mobile App uses device identifiers and analytics SDKs as described in Section 3.4.
11. Children's Privacy
The Service is not directed to individuals under the age of 13, and residents of the EEA, UK, and Switzerland must be at least 18 to use the Service. We do not knowingly collect personal data from children below these ages. If you believe we have inadvertently collected such data, please contact us at contact@eatnfit.com and we will delete it promptly.
12. Security
We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no system is completely secure, and we cannot guarantee the absolute security of your information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last Updated" date at the top of this Policy and is effective as soon as it is posted. We encourage you to review this Policy periodically. Your continued use of the Service after the updated Policy is posted constitutes your acceptance of the changes.
14. Contact Us
For any privacy-related questions or to exercise your rights:
EATNFIT Inc.
131 Continental Drive, Suite 301
Newark, DE 19713
United States
Email: contact@eatnfit.com
For users in the EEA, if you are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority.
← Back to Eat'n'Fit