Privacy policy
Last updated: 2026-11-07
This policy explains how HumanAI (“we”) handles information in the Food Diary app (“App”) and this website. Short version: your meal photos are only for the friends you choose, we never sell data, and photos are never used to train AI.
1. Sign-in
You sign in with Sign in with Apple (iPhone) or Google (Android). We receive an anonymous account identifier and the name you agree to share — never a password. If you use Apple’s “Hide My Email”, we don’t learn your real email.
2. What we store
| Data | Purpose |
|---|---|
| Meal photos (and the original when you use Glow-up) | Shown in your diary and to the friends you pick (app, widget). |
| Dish names, meal type, caption, photo time | Diary, dish suggestions, monthly stats. |
| Display name, profile photo, invite code | So friends recognise you. |
| Friend list, emoji reactions, block list | Friends features, widget, safety. |
| Phone number (optional), stored only as a SHA-256 hash | Lets friends find you from their contacts. Contacts are sent only as hashes and not kept. |
| Push token | Tells you when friends share a meal; refreshes the widget. |
| Pro status | Unlocks paid features (payments handled by Apple / Google). |
3. Glow-up (AI photo edit)
A photo is sent to a third-party AI provider (an OpenAI-compatible image-edit service) only when you tap Glow-up, only to edit that photo. It is not used for training and not retained by the provider or by our server after the result is returned (unless you then post the meal, in which case it is stored as in section 2). If the service fails, the app uses an on-device filter.
4. Who sees your photos
Only people you are friends with, as chosen when sending (all friends, a few, or only you). There is no public feed. Reported photos are hidden at once and may be viewed by our moderators to handle the report.
5. “Kitchens nearby” sample homes
The sample homes are not real people. Their photos are AI-generated illustrations, labelled as such in the App.
6. Service providers
- Our own server (VPS) and Postgres database.
- Cloudflare R2 for photo storage.
- Firebase Cloud Messaging (Google) for push notifications.
- The AI image provider (section 3), only when you tap Glow-up.
- Apple App Store / Google Play process payments; we only learn whether you have Pro.
7. Deleting your data
In the App: Settings → Delete account. Your account, every photo, dish name, friendship, reaction and push token are permanently deleted from our server and photo storage. You can delete single meals any time, or email [email protected].
8. Children
Food Diary is not directed at children under 13.
9. Changes and contact
We update the date above when this policy changes. Contact: [email protected].