Privacy policy

Version of 15 October 2026 · a translation of the Russian version, which prevails if they differ

Smart Food («Умная еда») is a food diary app: you take a photo of your food, describe it in words or scan a barcode, and the app estimates calories, protein, fat, carbs and a health score of the dish. It is a tool for your convenience, not a medical app: it does not diagnose and gives no medical advice (see the terms of use). This document explains what data we collect, why, whom we share it with, how long we keep it and how to delete it.

In short. We collect only what the app needs to work. Data are stored on servers in the European Union. Food photos are sent for recognition to Claude (Anthropic), which is not trained on them. Friends never see your weight, food or photos. In weekly leagues the members of your group see only your name, profile photo and XP of the week. We do not sell data, show no ads and do not use the advertising ID. You can delete your account and all data in the app settings.

1. Who processes the data

The data controller is the individual entrepreneur Evgeny Sergeevich Godovich (INN 583411599750, OGRNIP 325580000036051), the owner of the Smart Food service.

For any question about your data, write to support@smart-food.store.

2. What data we collect

Data	What exactly
Account	How you sign in: email address, phone number or Google account (identifier and email). The list of devices you are signed in on.
Questionnaire and goal	Sex, date of birth, height, weight, activity level, goal, target weight, the calorie and nutrient goal calculated or set by you, weight records. Allergies and foods you do not eat — if you set them.
Diary	Meals: foods, grams, calories, protein, fat, carbs, health score, time and day of the meal. Water you drank.
Photos of food and menus	Pictures you send for recognition and reduced copies of food photos in the diary. See section 5.
Descriptions in words	The text you described your food with, such as “2 eggs and toast”. It is used only for recognition and is not stored. If you dictate, the phone's system turns speech into text; the app receives only the text.
Recognition results	The model's answer for each scan. With your consent — your corrections of the results.
Profile name and photo	Only if you add them yourself. Metadata is removed from the profile photo both on the device and on the server.
Friends	Only if you turn friends on: your invite code, friends list, shared streaks, challenges, reactions, comments and private messages to friends.
XP, quests and leagues	XP for meals and daily quests, your level, league, places and medals of past weeks. In a league the group of the week — up to 20 people, strangers included — sees your name, profile photo, XP of this week and place; nothing about food, weight or goals. Members of the group can send each other emoji reactions (👏 🔥 💪 🥑, no text) and see how many came in a week; reactions are erased when the week ends. Without a name you are shown as “Avocadik” and four digits that change every week. Leagues can be turned off in the settings (“Take part in leagues”): you leave the group at once.
Online status	Whether the app is open now and when you last left it. Only mutual friends see it, and only if both of you have “Show when I am online” on; otherwise friends see “last seen recently”. While a chat is open, the friend also sees “typing…”.
Notifications	The push notification token of your device and your notification settings.
Support requests	Your message in “Write to us”, up to three screenshots you attach, phone model, Android and app version, and a phone number for the reply — if you give it.
Scans and purchases	Your scan balance, the history of scans added and spent, promo codes you applied. For purchases — the product, the Google Play order number, the subscription status and term. We never receive your card details: Google Play takes the payment.
Streak and achievements	Days in a row with entries, freezes, achievements earned.
Activity from Health Connect	Only if you connect Health Connect in the settings: steps and active calories for each day. The app reads no other Health Connect data (see section 4).
Device check	The Google Play Integrity verdict and an anonymized device hash — so that welcome scans are given once per device and to prevent abuse.
Technical data	IP address, device model, Android and app version, language, request times, crash reports. Technical logs contain no email, phone number, photos, messages or nutrition data.
Analytics	Only with your consent: which screens open and which buttons are tapped. No name, email or food data.

We do not collect location, contacts, SMS, the list of apps or files on your device other than the photos you choose, and we do not use the advertising ID.

3. Why, and on what legal basis

Running the app — sign-in, diary, goal calculation, recognition of photos, descriptions, menus and barcodes, statistics, streak, sync between devices. Basis — performance of the terms of use.
Health data — weight, height, age, food, activity from Health Connect, and allergies and food restrictions if you set them. Basis — your explicit consent, given before the questionnaire (see section 4).
Friends and messages — showing your streak, achievements and the Pro mark (if you have a subscription or a trial) to friends, delivering messages and comments, handling reports. Basis — performance of the terms: you turn friends on yourself.
Quests and leagues — awarding XP, forming the groups of the week and showing their table to the members of the group. Basis — performance of the terms; taking part in leagues can be turned off in the settings.
Notifications — reminders, the weekly recap and league results, messages from friends. Each kind can be turned off in the notification settings.
Support — answering your request and fixing the bug you reported. Basis — performance of the terms.
Improving recognition — your corrections of scan results. Basis — a separate consent you can turn off in the settings.
Usage analytics — to find screens that are hard to use. Basis — a separate consent you can turn off in the settings.
Purchases and scans — checking Google Play purchases, adding and spending scans, refunds. Basis — performance of the terms; keeping purchase records — accounting rules.
Security — protection against break-ins, farming of free scans and SMS sent to other people's numbers, investigating failures. Basis — our legitimate interest in a working and secure service.
Emails and SMS — sign-in codes only. No marketing messages.

We do not use your data for advertising, do not sell it and make no decisions based on it that have legal effects on you.

4. Health data

Weight, food, activity, allergies and food restrictions are health data, a special category of personal data. We process them only with your explicit consent, which the app asks for before the questionnaire. Without it the app does not save your profile and cannot work.

Your list of allergies is stored on our server in the EU and is not sent to Anthropic: the app itself compares it with the ingredients of dishes. Friends do not see your weight, goal, food or allergies.

You can withdraw consent in the settings: “Profile” → “All settings” → “Privacy” → “Withdraw consent”. This deletes the account and all data (section 10).

Health Connect data

If you turn on “Health Connect” in the app settings, the app, with your permission, reads only two things from Health Connect: steps and active calories for each day. It reads them only while it is open, for the last 7 days.

Why: the active calories of the day are added to your calorie goal for that day; steps are shown next to it. These data are used for nothing else.
Where they are kept: the daily totals (steps and active calories) are stored on our server in the EU with your diary, so the goal with activity is the same on all your devices and in the statistics. They are deleted with the account and included in the “Download my data” archive.
Who receives them: no one. We do not share Health Connect data with third parties, including Anthropic, do not use it for advertising or analytics and do not sell it.
How to turn it off: the “Health Connect” switch in the app settings or the app's permissions in Health Connect itself. After that the app reads nothing; the days already saved stay in the diary until you delete the account.

The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

5. Food photos

Which photos. Only those you take in the app or pick from your gallery for recognition: food and cafe menus. The gallery opens through the system photo picker — the app gets no access to the other pictures on your phone.
Before sending, the app reduces the picture and removes its metadata (EXIF), including location.
Where it goes. The photo goes to our server in the EU and from there to Anthropic's Claude model for recognition (section 6). Under the terms of Anthropic's commercial API, Anthropic does not train its models on these data.
How long it is kept. The original — 30 days, so that a recognition error can be looked into. The reduced copy of a food photo — as long as the meal is in your diary: delete the meal and the copy is deleted too. Menu photos do not go to the diary.
Who sees them. You, on your devices. Friends never see your food photos. We do not look at your photos unless you ask us to look into a particular scan or send a screenshot to support.
What we never do. We do not use photos for advertising, do not sell them and do not share them with anyone except for recognition.
How to delete. Delete the meal in the diary or the whole account. All photos are included in the “Download my data” archive.

6. How recognition works

Food photo. Our server sends the picture to Anthropic's Claude model with a short context: the app language, the meal type and local time, your comment to the photo if you wrote one, and the names of dishes you often eat.

A description in words goes to the model the same way, with the language and the meal time; neither the text nor the model's answer is stored.

A menu photo goes to the model with what is left of your goal for today — to show which dishes fit it.

The week review (Pro) — once a week the model gets the summary of your past week: goal, daily target, average calories and macros, how many days were logged and on target, the share of calories by meal, the number of late meals, the average health score, the change of weight over the week and the names of up to 10 dishes you ate most often. The model's answer — a headline and three tips — is stored on our server for 35 days.

A barcode is looked up in our database and in the open Open Food Facts database — only the barcode number goes there, nothing about you.

Your name, email, phone number, weight and allergies are not sent to the model. If the main channel is unavailable, the request is handled by the same Claude model in Amazon Bedrock in the EU. Calories and daily totals are calculated by our server from the model's answer. The result is an estimate: it may differ from the real values, and you can always correct it.

7. Whom we share data with

We do not sell data and do not share it with advertisers. Data are received only by companies that help us run the service on our behalf, and only as much as they need:

Company	Why	Where
Anthropic	Recognizing food in photos, descriptions and menus, tips of the week review (the Claude model)	USA and other countries
Amazon Web Services	The backup recognition channel (Amazon Bedrock)	EU
HOSTKEY	Servers, databases, photo storage and backups	EU (Finland)
Cloudflare	Protecting servers from attacks and delivering data	the network node nearest to you
Google	Sign-in with Google, payments and subscriptions in Google Play, device check (Play Integrity), delivery of push notifications (Firebase Cloud Messaging)	USA and other countries
Twilio	Sending SMS with a sign-in code (phone number only)	USA and other countries
Resend	Sending emails with a sign-in code (email address only)	EU (sending), USA (sending logs)
PostHog	Usage analytics — only with your consent	EU
Sentry	Crash reports of the app and the server without personal data	USA and other countries

The text of a friend's message goes into a push notification through Google only if you turned on “Show the text of messages”; otherwise the notification comes without the text. We may also disclose data if the law or a court decision requires it.

8. Where data are kept and transfers abroad

All user data are stored on servers in the European Union. Part of the processing — recognition at Anthropic, sign-in with Google, push notifications, SMS and emails with sign-in codes — may take place in the USA and other countries. Such transfers are protected by data processing agreements with these companies, including the EU Standard Contractual Clauses.

This website runs on a separate server and serves only static pages. It sets no cookies, uses no visitor counters and collects no data about visitors.

9. How long we keep data

Data	Term
Account, questionnaire, diary	While you use the app. After the account is deleted — erased within 30 days.
Original photos of food and menus	30 days.
Reduced copies of food photos	As long as the meal exists. Copies of photos you did not save to the diary — 30 days.
Descriptions in words	Not stored.
Model answers for scans	90 days.
Week review	35 days.
Deleted meals	A deletion mark — 90 days, so that the deletion reaches all your devices.
Corrections of results	12 months or until you withdraw the consent to improve recognition.
Messages to friends	12 months. After unfriending — 30 days; after blocking — deleted at once.
Online status and the time you left	While the account exists; only the latest value is kept.
Support requests	Screenshots — 180 days, the text — while the account exists.
“Download my data” archive	7 days.
Profile photo	Until you replace or remove it.
XP, level and league results	While the account exists.
League reactions	Until the end of the league week.
Technical logs	30 days.
Database backups	14 days.
Purchase records	After the account is deleted they are anonymized and kept as long as accounting rules require.

10. Deleting your account

You can delete your account in the app: “Profile” → “All settings” → “Delete account and data”, or by email to support — see the “Delete account” page. Sign-in stops working at once; the data are erased in all our services within 30 days. Only anonymized purchase records and the device hash remain — they cannot identify you.

11. Your rights

Get a copy of your data — in the app: “Profile” → “All settings” → “My data” → “Download my data”. An archive with your diary, photos, messages and settings is ready in a few minutes. Or write to us.
Correct your data — in the app or by email.
Delete your data — by deleting the account.
Withdraw consent to analytics and to improving recognition — in the settings, at any time. Withdrawing the consent to health data deletes the account.
Object to processing and restrict it.
Complain to the data protection authority of your country.

Send requests to support@smart-food.store from the email or number linked to your account. We answer within 30 days.

12. Age

The app is for people aged 16 and over. We do not knowingly collect data of children under 16. If you learn that a child has signed up, write to us and we will delete the account.

13. How we protect data

The app exchanges data with the server only over an encrypted connection (HTTPS).
Databases and photo storage are not open to the internet. Each service of the app has access only to its own data. Servers are reached only with a key.
Backups are encrypted and kept on a separate server in the EU.
Sign-in keys are kept on the phone in the protected Android storage.
Purchases are verified only on the server through Google Play.
Email, phone number, photos, messages and nutrition data do not get into logs and crash reports.

14. Google Play policies

The app is distributed through Google Play and follows its User Data policy:

we collect data only for the features of the app described in this policy, do not sell them and do not use them for advertising;
the app asks for consent to health data before collecting them, and for the camera, notifications and Health Connect when you turn the feature on;
the “Data safety” section of the app's page in Google Play describes the same as this policy;
data are transmitted only over an encrypted connection;
you can delete your account and data in the app and without it — on the “Delete account” page;
Health Connect data are used under the Limited Use requirements (section 4);
purchases and subscriptions — only through Google Play.

15. Changes to this policy

We update this policy when the app or the law changes. The version date is at the top of the page. We will tell you about significant changes in the app.