Privacy policy

The short version

• We store what you and your AI agent put into the app, so the app can show it back to your household.
• We don’t sell your data, show ads or use tracking or analytics tools.
• The app itself sends nothing to an AI provider. Your own AI agent does the AI work, on your behalf.
• Your food log and nutrition are private to you. The cookbook, the family meal plan and the shopping list are shared with your household.
• To delete your account, email privacy@yourfoodagent.com and we delete your account and data within 30 days.

What we store

• Account: your email address and display name. You sign in with a one-time code sent to that address.
• Household: your household, its members and their roles, invitations (including the invited person’s email address) and sign-up links or permissions that let you join.
• Meals: the meal plan, your meal log and what you or your agent typed or linked to describe a meal.
• Photos: meal photos, photos sent in the chat and recipe photos. Location and other hidden photo data (EXIF) are removed before a photo is stored.
• Recipes: the household cookbook, including every saved version of a recipe.
• Nutrition: nutrition estimates for meals and recipes and the daily targets you choose (for example protein and fibre).
• Shopping: shopping lists and what was marked as bought.
• Chat: your messages with your agent in the app.
• Agent pairings: which agents you connected and what they may do. Agent keys and session cookies are stored only in scrambled (hashed) form.
• Activity history: a record of changes (and some reads): which person or agent did it, what and when. It keeps your household’s data traceable and secure.
• Abuse protection: when someone tries to sign in or pair an agent, we keep a scrambled (hashed) form of the email address and IP address of the attempt, and clear out records older than a day as new attempts come in. This is pseudonymised, not anonymous.
• Technical records: when each agent key was last used, and copies of recent answers to your agent so that a repeated request isn’t applied twice.
• Beta requests and the wait-list: if you use one of the forms on our home page, your email address, which form you used, the AI agent you named (beta form only), when you signed up and, later, when we sent you an invite. We don’t store your IP address.

The website sets one cookie, which keeps you signed in for up to 8 hours. Your browser may also keep unsent drafts on your device. There are no advertising or analytics cookies.

Your AI agent

You choose and run your own AI agent. During the beta we connect it with you through a one-time pairing code. It then reads and writes your data through the app’s API, with limited permissions, for example logging a meal or estimating its nutrition. Whatever your agent sends to its own AI provider is between you and that provider. To remove an agent’s access, email hello@yourfoodagent.com and we revoke it.

Who helps us run it

• Supabase: our database and sign-in. Hosted in the EU (Paris).
• Vercel: hosts the app. Like any web host, it sees your IP address when you connect.
• Loops: delivers our emails: sign-in codes, household invitations and wait-list/beta replies, and keeps the wait-list contacts.

They process data only to provide their service to us. An invitation email tells the invited person who invited them and to which household.

Why we use it

To provide the service you signed up for, to keep it secure, and, for beta requests and the wait-list, because you agreed to it: we use that address only to send your beta invite or to tell you when Your Food Agent works without an AI agent. We never use your food data for advertising.

How long we keep it

• Meal photos are deleted automatically 7 days after the meal’s date or the upload, whichever comes first (the daily clean-up can take up to a day more), and straight away if you delete the meal.
• Chat photos are hidden 7 days after your agent first replies to them and removed by the daily clean-up shortly after (up to a day more), and straight away if you delete the message.
• Recipe photos stay until you delete the photo, or until the household is deleted.
• Some things stay as a record after you remove them in the app: a deleted meal stays in your log marked as cancelled, a deleted chat message keeps its place without its text, and a deleted recipe is archived with its versions and photos. Expired invitations keep the invited email address.
• Everything else is kept until we delete your account or household at your request (see below).
• Beta requests and wait-list entries are kept until you ask us to remove them.
• Backup copies of the database can hold deleted data for a while after it was deleted.

Deleting your account

Email privacy@yourfoodagent.com from the address you sign in with, and we delete your account and data within 30 days.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it. Write to privacy@yourfoodagent.com. You may also complain to a data protection authority, in Estonia the Andmekaitse Inspektsioon, or the one where you live.

Changes

If we change this policy, we will update this page and the date above. See also the terms of use.