This Privacy Policy explains how Demetr (“we,” “the App”) handles information when you use the App.
Demetr keeps your meal history, photos, goals, and insights on your device. Sign in with Apple creates an account identity used for quotas, subscriptions, and abuse prevention. We do not sell your personal information, show ads, or track you across other companies’ apps and websites.
Depending on how you use the App, we may process:
We use this information to:
To analyze meals and generate insights, the App sends the following through our backend to OpenAI: photos you choose to analyze (with on-device image labels and a portion-size hint), meal descriptions you type, and, for Daily Insights, that day’s meals (names, times, amounts, and nutrition), daily calorie totals for up to the previous 14 days, and summaries of the Health data you authorized (for example, workouts, energy burned, weight trend, steps, and sleep). Raw Health samples are not sent. Your Apple identifier, nickname, goal answers, and onboarding analytics are not sent to OpenAI. Do not include sensitive personal information in meal descriptions. OpenAI processes this data under its own terms and policies. Our backend runs on Cloudflare, which processes requests and stores account data on our behalf.
Health access is requested through Apple’s permission flows, and you can use the App without it. Health data is used only to provide the App’s features; it is not used for advertising and is not sold. Demetr does not receive your Apple ID password.
Meals, photos, insights, goals, and preferences are stored on your device. Account data on our servers (hashed identifier, usage counts, plan, session state, and the Apple token) is deleted automatically after 400 days without activity. Anonymous analytics totals are kept for up to 120 days, and AI usage records (token counts linked to a shortened one-way hash of your account) expire after 45 days. Sign out ends the session on this device and on our servers. You can delete your account and data together from Settings, which revokes the App’s Sign in with Apple authorization, removes the plan, session, Apple token, and analytics records for that account from our servers, and clears meals, insights, goals, and your nickname on this device. To prevent abuse of the Free allowance, a pseudonymous record (a one-way hash of the Apple identifier plus the number of Free analyses and insights already used) is kept for up to 400 days after last use. Nutrition already written to Apple Health remains in Health until you delete it there.
We do not sell personal information. We share limited data only with service providers needed to operate features you use (OpenAI for AI generation, Cloudflare for our backend), with Apple for Sign in with Apple and App Store purchases, or when required by law.
The App is not directed to children under 13 (or the minimum age required in your region), and we do not knowingly collect personal information from children.
You can revoke camera, photo, and Health access in iOS Settings or the Health app, delete your account and data in the App, manage subscriptions in Apple ID settings, and stop using the App at any time.
Our backend (Cloudflare) and AI provider (OpenAI) may process request data in countries other than yours, including the United States, subject to applicable safeguards and those providers’ policies.
We may update this Policy. Continued use after an update means you acknowledge the revised Policy.
For privacy questions, email admin@archq.net.