Privacy Policy

1. Who we are

SpoonCheck (“SpoonCheck”, “we”, “us”) is an independent developer operating the SpoonCheck iOS application and the website spooncheck.com. SpoonCheck is a wellness tool that estimates the calories and macronutrients (protein, fat, carbohydrates) of meals from a photo, with an AI nutrition assistant and a food diary. SpoonCheck is not a medical device or a medical service and does not provide medical advice.

For any privacy question or request, contact us at support@spooncheck.com. We are the data controller for the personal data described here.

2. Summary

• You can use SpoonCheck anonymously — by default your account is a randomly generated identifier, not your name or email.
• We do not show ads, we do not use advertising identifiers (no IDFA), and we do not track you across other apps or websites.
• We use no third-party analytics or crash-tracking SDKs.
• Meal photos are sent to our servers and our AI provider only to produce your nutrition estimate; we do not keep meal photo files on our servers after the estimate is generated.
• Some information you provide is health-related (for example body metrics and optional context such as pregnancy or a medical condition). We treat it as sensitive and process it only to operate the app.
• You can delete your account and data at any time from inside the app.

3. Information we collect

3.1 Information you provide

• Profile and goals: an optional display name, plus gender, age, height, current and goal weight, activity level and dietary preferences you enter during onboarding.
• Health-related context (optional): information you choose to share such as pregnancy, breastfeeding, or a condition like diabetes or hypertension, used to tailor calorie targets and assistant guidance.
• Your food diary: meals and dishes you log, weight entries and body measurements you add.
• Meal photos: photos you capture with the camera or pick from your photo library to be analyzed.
• Assistant chat: the messages (text, and optionally photos or transcribed voice input) you send to the in-app AI assistant “Nutri”.

3.2 Information collected automatically

• Anonymous device identifier: a random identifier we generate on first launch and store in the iOS Keychain. It may sync via your iCloud Keychain and can persist across reinstalls. It is used as your account ID and to associate your subscription. It is not your name, email, advertising ID, or device serial number.
• Basic technical data needed to operate the service, such as app language/locale, time zone, and standard request information sent to our servers over HTTPS.

3.3 Apple Health (HealthKit)

If you connect Apple Health, with your permission SpoonCheck reads your step count and active energy to provide context, and writes the calories and macronutrients of meals you log into Apple Health. Your step count may be sent to our backend as context for the AI assistant; other HealthKit data stays on your device. We never use HealthKit data for advertising or marketing, and we do not sell it or share it with third parties for their own purposes. You can revoke access at any time in the iOS Settings → Health, or Settings → Privacy & Security → Health.

3.4 Camera, photos, microphone and speech

The camera and photo library are used only to capture or select meal photos for analysis. The microphone and speech recognition are used only when you choose voice input in the assistant; the audio is transcribed using Apple’s speech recognition (which may be processed by Apple). We do not access these features in the background.

4. How we use information

• To recognize food in your photos and estimate calories and macronutrients.
• To maintain your food diary, weight and progress, and to personalize your daily targets.
• To power the AI assistant so it can answer your questions and suggest what to eat within your goals.
• To provide, maintain, secure and improve the app and website.
• To manage your subscription and provide customer support.

Where the law requires a legal basis (for example under the GDPR), we rely on: performance of our agreement with you (to provide the app); your consent (for AI processing of your photos/messages, for HealthKit access, and for any health-related context you choose to share); and our legitimate interests in keeping the service working and secure. You may withdraw consent at any time, including by disconnecting Health, stopping AI features, or deleting your account.

5. AI processing of photos and messages

Food recognition and the assistant rely on AI. After you grant consent, your meal photos, chat messages and related context are sent over an encrypted connection to our backend at api.spooncheck.com, which uses third-party AI providers to generate results: Google (Gemini) and OpenAI for image and food recognition, and DeepSeek for text and chat. We send these providers only the content needed to deliver the feature.

Meal photos are processed to produce your estimate and are not retained as files on our servers after processing; however, the AI providers that perform recognition may retain the image briefly under their own policies (for example for abuse monitoring). A chat photo you attach may be cached locally on your device so the conversation displays correctly. Your AI provider keys and processing happen server-side; the app does not contain AI provider credentials.

6. Who we share data with

We do not sell your personal data and we do not share it with advertising networks. We use a small set of service providers (“sub-processors”) that process data on our behalf to make features work:

• Apple — Sign in with Apple, HealthKit, in-app purchases (StoreKit) and on-device/Apple speech recognition.
• Google (Gemini) — image and food recognition from meal photos.
• OpenAI — image and food recognition from meal photos.
• DeepSeek — text and chat assistant responses.
• RevenueCat — subscription management, associated with your anonymous identifier.
• Our hosting/backend infrastructure that runs api.spooncheck.com.

We may also disclose information if required by law, to protect our rights or users’ safety, or as part of a business transfer, in which case we will notify users where required.

7. Accounts and Sign in with Apple

By default your account is anonymous (the random identifier described above). You may optionally use Sign in with Apple to secure or recover your account across devices. We request name and email scopes from Apple to support this, but the app does not store your email address; we identify your account using the identifier Apple provides. You may choose to hide your email via Apple’s private relay.

8. Data retention

We keep your profile, diary, progress and assistant history for as long as your account exists, so the app can show your history and progress. Meal photo files are not retained on our servers after processing. When you delete your account, we delete the associated data as described below. We may retain limited records where required for legal, security or accounting reasons (for example subscription records held by Apple).

9. Your choices and how to delete your data

You can delete your account and the associated data directly in the app: open the Profile tab, choose “Delete account”, and confirm. This removes your data from our servers and clears your stored credentials on the device. Deletion is permanent and cannot be undone.

Depending on where you live, you may also have the right to access, correct, export, restrict or object to processing of your personal data, and to withdraw consent. To exercise these rights, contact support@spooncheck.com. You can also disconnect Apple Health, turn off AI features, or revoke camera/photo/microphone permissions in iOS Settings at any time.

10. Security

Data in transit is protected with HTTPS/TLS. Sensitive credentials on the device are stored in the iOS Keychain. No method of transmission or storage is completely secure, but we work to protect your information using reasonable technical and organizational measures.

11. Children

SpoonCheck is not directed to children under 13, and we do not knowingly collect personal data from them. If you are under the age of majority in your country, use SpoonCheck only with the involvement of a parent or guardian. If you believe a child has provided us data, contact us and we will delete it.

12. International transfers

We and our providers may process data in countries other than yours. Where required, we use appropriate safeguards for such transfers. By using SpoonCheck you understand your data may be processed in these locations.

13. Notifications

SpoonCheck schedules reminders as local notifications on your device. We do not use remote push notifications and do not collect a push notification device token.

14. Changes to this policy

We may update this policy as the app evolves. We will change the “last updated” date above and, for material changes, provide notice in the app or on this page. Continued use after an update means you accept the revised policy.

15. Contact

Questions or requests about privacy: support@spooncheck.com. This is a wellness product and provides estimates for general self-tracking, not medical records or clinical advice.