Privacy Policy

Nutrition goals and manual meal macro entries are health-adjacent data processed solely to provide personalised meal planning features and are not shared with third parties except as outlined in this policy.

The in-app calorie calculator collects biological sex, age, weight, and height inputs solely to compute a calorie and macro estimate. These inputs are never transmitted, stored in our database, or retained in any form. They exist only in device memory for the duration of the calculation and are discarded when the calculator is closed. The one exception is the Fuel tab: there, sex, birth year, height and activity level can be saved to your profile so estimates do not have to be re-entered: see the Fuel tab paragraph below. Weight is never saved to your profile.

Fuel tab. If you connect Apple Health (iOS) or Health Connect (Android), Frittu reads your steps, energy burned, workouts, sleep, water, weight and resting heart rate from your phone's health store, and (only if you turn it on) writes the meals you log in Frittu (calories, protein, carbohydrates, fat) back into that store. By default everything read stays on your phone and is never sent to us. Nothing is read until you connect, and you can revoke Frittu's access at any time in the Health app or Health Connect settings.

If you turn on "Use my activity in my meal plans", Frittu stores on our servers one row per day with your daily totals (steps, energy burned, workout minutes and types, sleep minutes, water, weight, resting heart rate) and one row per workout (type, start and end time, minutes, energy burned, distance, and the name of the app that recorded it, so a session recorded by two apps is counted once). Where your health app records no resting energy for part of a day, the energy-burned figure fills those hours from the sex, age, height and weight you gave Frittu, and the row notes how much of it was estimated. We never store per-minute samples, heart-rate traces, location or routes. In Fuel settings you choose which kinds of data Frittu keeps; switching a kind off deletes what we already hold for it, and we stop storing it. This data is used only to shape your meal plans and the weekly read (a Frittu Pro feature). It is never sold, never used for advertising, and never shared with third parties for their own use. The weekly read is written by fixed rules, on your phone or on our servers: no AI writes it. When you ask Frittu to make a meal or a plan (for example "Plan it", a next-meal suggestion, or a weekly read's suggestion for next week), the shared figures that request needs (such as recent workouts, energy burned or last night's sleep) are sent with that one request to our AI provider (Anthropic), together with your food preferences and goals, so it can write the recipes. Your name, email and account id are never sent, kinds you switched off in Fuel settings are never included, and with "Use my activity in my meal plans" off only the kind of moment (for example "after a workout") is sent, never the figures.

Background updates. With this setting on, the upload can also happen in the background (after a workout and through the day, even while Frittu is closed) so a meal idea can reach you soon after you train or on a far more active day than usual. If you use Frittu on two phones, your health data is taken from one of them so the two never overwrite each other: the first one that syncs, or the one you pick with "Use this phone instead" in Fuel. If that phone hasn't synced for a day (for example after you reinstall Frittu or replace your phone), the next phone that syncs takes over. You can switch background updates off on their own in Fuel settings; Frittu then uploads only while you use it. Background uploads use a separate key stored on your phone that can only send these health rows; it is deleted when you switch this off, turn background updates off or delete your account, and it stops working on your phone when you sign out. Before a message about last night's sleep, our servers may send your phone a silent request to sync first, so the message uses your latest data; it shows nothing on screen.

Daily and workout rows are deleted after 90 days; weight is kept only as a monthly average after that. Turning the setting off deletes everything we hold immediately. Deleting your account deletes it too.

Fuel preferences. Your Fuel settings (the hours you usually eat, "Hide calories" and "Never adjust my plans") are saved to your account so they apply on every phone you sign in on. They contain no health data and are deleted with your account. If you tap "Already had …?" on the Fuel tab, Frittu saves that you've had that meal (the date and which meal, nothing about the food) for up to a week, so a suggestion doesn't offer it again. They can also include a temporary eating window (for example, for Ramadan) and "My day starts when I wake". If your phone has recently changed time zone, Fuel may tell the recipe service only that you are away from home, so suggestions don't depend on your kitchen: your location and time zone are never sent.

Sharing a Fuel card. If you share a card from the Fuel tab, the image is made on your phone and goes only where you choose to send it: Frittu never uploads it. Weight is left off unless you switch it on for that share, and sleep and heart-rate detail never appear on a card, and our analytics record only that a card was shared, never the values on it.

About you. To size calorie and macro estimates, the Fuel tab can save your biological sex, birth year, height and activity level to your profile. These are optional, editable and removable in your profile at any time, and are deleted with your account. Your weight is never saved to your profile: it is read from your health store as a time series, under the rules above.

We use your information to:

• Provide the core service: ingredient scanning and recipe generation
• Personalise recipe suggestions based on your cuisine preferences, fitness goals, and dietary restrictions
• Check recipes against your allergens: your allergen list goes with every AI recipe request, so recipes are generated without your allergens, and every recipe is checked against your list again before you see it
• Track your scan quota and subscription status
• Send you the notifications you have turned on: reminders before a free trial or free week ends, your planned dinner, recipe imports and weekly plans that are ready, and, with a health app connected, meal ideas after a workout, a short night or a rest day
• Send occasional marketing emails (such as getting-started tips or Frittu Pro feature updates) which you can opt out of at any time via the unsubscribe link in any such email
• Improve the app through product analytics linked to a pseudonymous user identifier (your allergen and health data is never used for analytics profiling)
• Measure the effectiveness of our own advertising campaigns (see "Advertising and Your Privacy Choices" below)
• Respond to support requests

When you choose to share a recipe using Frittu's share feature, the recipe name, ingredient list, cooking steps, and nutritional information are published to a publicly accessible URL at frittu.app. This content is derived from your scan session but is not linked to your account or personal identity on the public page. You control sharing: nothing is published without you tapping Share.

Shared recipe content is treated as a separate data category in our App Privacy disclosure: Shared recipe content: not linked to user identity.

Streak cards. If you share a streak card, it is made on your phone and goes only where you send it. A card showing a recipe you made more than once can include a link to that recipe's page at frittu.app, which anyone with the link can open. The link is added only for a recipe Frittu made for you, never for one you imported or copied, and the page shows the recipe, not your name.

We treat your allergy and dietary restriction data as sensitive health information.

• Your allergen list is transmitted to our AI systems solely to check what Frittu makes or reads for you against it: recipe suggestions, and the ingredient labels you scan
• It is not used for advertising, analytics profiling, or shared with third parties
• You can update or delete your allergy data at any time from your profile settings

Frittu uses AI services to analyse food photos and generate recipes. When you submit a photo or request recipes:

• Your photo (compressed and processed locally on your device) is sent to our secure servers
• Your profile data, including allergens and dietary preferences, is included in the request
• AI processing is performed by our sub-processors under data processing agreements
• We do not permit our AI sub-processors to train on your personal data
• Our AI providers do not use your requests to train their models, and keep request data only for a limited time (up to 30 days) for abuse and safety monitoring before deleting it

What happens to the photo afterwards depends on what you scanned. Photos of ingredients (your fridge, pantry, or groceries) are processed and then discarded immediately. We never store them; only the detected ingredient list (text) is saved to your scan history. We do keep a one-way cryptographic fingerprint (a hash) of scan photos with your scan history, used only to recognise when the same photo is scanned twice: the photo cannot be reconstructed from it.

Photos of a cooked dish, submitted for a calorie and macro estimate, are stored against your account so the meal appears in your history with its picture and so you can share it. These images are held on our infrastructure (Supabase Storage), served from an unlisted address that is not published, indexed, or browsable: though anyone you deliberately share that address or image with can view it. They are kept until you delete your account, at which point they are permanently deleted along with the rest of your data (see "Your Rights" below). There is currently no way to delete an individual dish photo without deleting your account. Dish photos are never used for advertising, profiling, or AI training, and are never sold or shared with third parties.

• Your data is stored in Supabase (PostgreSQL), hosted on AWS in South Korea (Seoul region)
• All data is encrypted in transit (TLS) and at rest
• Access to your data is restricted by row-level security: only you can read or modify your own data
• We use industry-standard security practices including authentication tokens and rate limiting

We do not sell your personal information. We share data only with:

• Supabase: database and authentication infrastructure
• AI services: Anthropic (recipes, meal plans and dish estimates) and OpenAI (reading your photos and ingredient labels, and turning a recipe's name and ingredients into its picture) process your requests. A recipe's picture is made from the recipe alone and never carries anything about you. fal.ai makes the picture instead when OpenAI can't
• Resend: delivers Frittu's emails: account emails, reminders before a free trial or free week ends and, if you get it, the weekly email, which can include your Fuel figures
• Open Food Facts: when you scan a barcode or search for a packaged food, the barcode or the words you type are sent to Open Food Facts to look the product up. Nothing about you is sent
• RevenueCat: subscription and payment management (no payment card data is stored by us)
• PostHog: product analytics linked to a pseudonymous user identifier
• Sentry: crash reporting. Reports carry your account id and whether you have Frittu Pro, so we can find and fix what went wrong. They are not meant to contain your recipes, meals or health data
• Apple App Store: app distribution and payment processing (iOS)
• Google Play: app distribution and payment processing (Android)
• Cloudflare Turnstile: bot/abuse protection during sign-up, sign-in, and password reset
• Meta (Facebook/Instagram): advertising attribution only: app install, registration, and subscription purchase events, plus the device advertising identifier where you have allowed tracking (via Apple's App Tracking Transparency prompt on iOS). Purchase events are forwarded through RevenueCat's server-side integration with Meta. No recipe, allergen, health, or profile data is ever shared with Meta

Frittu contains no third-party ads. We do, however, advertise Frittu itself on Meta platforms, and we measure those campaigns as described in Section 1.2 ("Advertising attribution").

Your choices:

• iOS: App Tracking Transparency: When you first launch the app, iOS asks whether Frittu may track you across apps and websites. If you decline, no advertising identifier is shared with Meta. You can change your choice at any time in Settings → Privacy & Security → Tracking → Frittu
• Android: Advertising ID: You can delete or reset your device advertising ID at any time in Settings → Google → Ads (wording varies by device)
• Marketing emails: Every marketing email includes an unsubscribe link. Opting out never affects transactional emails (e.g. account verification) or in-app functionality

Declining tracking or unsubscribing never limits any app feature.

• Analytics (PostHog): counts how the site is used, such as which pages are visited and which download buttons are clicked.
• Advertising measurement (Reddit Pixel): we advertise Frittu on Reddit. The Reddit Pixel records a visit to our site and a click on a download button, so we can measure those ads. Reddit handles this under its own privacy policy (reddit.com/policies/privacy-policy).
• Campaign links: described under "Campaign link analytics" above.

You can block or delete cookies in your browser settings; the site works without them. You can control how Reddit uses your activity for ads in your Reddit account settings.

Under Australian Privacy Act 1988 and, where applicable, GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data (available directly in the app via Profile → Delete Account)
• Request a portable copy of your data by emailing privacy@frittu.app: we will respond within 30 days
• Object to processing in certain circumstances

To exercise these rights, contact us at privacy@frittu.app or use the "Delete Account" option in the app.

US users: our Consumer Health Data Privacy Policy explains the health-related data Frittu collects, who it is shared with, and how to access, delete or withdraw consent.

If you are a California resident, you also have the right to know what personal information we collect, the right to opt out of the sale of personal information (we do not sell personal information), and the right to opt out of the "sharing" of personal information for cross-context behavioural advertising. The advertising attribution described in "Advertising attribution (Meta)" above may constitute "sharing" under the CPRA: you can opt out via Apple's App Tracking Transparency prompt (iOS) or by resetting your advertising ID (Android), as described in "Advertising and Your Privacy Choices" above. We do not discriminate against you for exercising your privacy rights.

Account deletion: Deleting your account permanently removes all your personal data (including your profile, saved recipes, scan history, meal plans, shopping lists, nutrition goals, and streak data) from our systems within 30 days of your deletion request. If you signed up with Apple Sign In, your Apple authorisation token is also revoked at Apple at the time of deletion.

Keeping your recipes (optional): When you delete your account you can choose to let us keep the recipes you generated. If you tick that box, those recipes stay on Frittu with the link to your account, your name, and your allergen and goal information permanently removed: nothing connects them to you any more, and recipe links you previously shared keep working. Your photos, profile, and everything else are still deleted. Because the connection to you is severed, this cannot be undone or reversed later: we are no longer able to identify those recipes as yours. The box is unticked by default, and if you leave it unticked your recipes are deleted along with the rest of your data.

Scan history retention: Scan history is retained for the duration of your account. All scan data is permanently deleted when you delete your account.

Frittu is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately at privacy@frittu.app.

This app is not intended for children under 13. If you are under 13, please do not use Frittu.

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy questions, data requests, or concerns:

Operator: StreetsideWeb, Melbourne, Australia Email: privacy@frittu.app Website: frittu.app Location: Australia