Last updated: April 2026
We wrote this in plain English on purpose. If something is unclear, email us.
WSIET is a meal tracking and AI suggestion app. You log what you eat, set your preferences, and we use AI to suggest meals suited to your habits and the time of day.
Account data
Your email address and a unique ID from Supabase (our authentication provider). We do not store passwords — Supabase handles that.
Meal logs
Every meal you log: name, description, meal type, cuisine, and the time you ate it. This is the core data the app runs on.
Preferences and dietary restrictions
The cuisines you prefer and any dietary restrictions you set (vegan, gluten-free, nut allergy, halal, kosher, etc.).
Important: Dietary restrictions — especially food allergies and medically-motivated restrictions — may qualify as health data under GDPR (Article 9) and as sensitive personal information under CCPA. We treat all dietary restriction data as sensitive regardless of where you live.
Device and usage data
Standard server logs: IP address, browser type, pages visited, timestamps. We use this for security and debugging. We do not use it for advertising.
Location data (optional)
If you enable "Find restaurants near me," we request your device's GPS coordinates at that moment. Coordinates are sent to our API to query nearby restaurants and are never stored in our database. They exist in memory for the duration of the request only.
Food photos (optional)
If you use photo logging, your photo is sent to our API, processed by AI to identify the dish, and stored on our servers associated with your meal log. Photos are retained for as long as your meal log entry exists and are deleted when you delete the meal or your account.
| Data | Why |
|---|---|
| Meal logs | Generate AI suggestions; build your eating history |
| Dietary restrictions | Filter suggestions; pass to AI as constraints |
| Cuisine preferences | Tailor suggestions to your taste |
| Location (on-demand) | Find nearby restaurants for your suggestion |
| Food photos (on-demand) | Identify the dish via AI; pre-fill your meal log |
| IP address / logs | Security, abuse prevention, debugging |
We do not use your data for advertising. We do not sell your data. Ever.
WSIET uses Anthropic's Claude to generate meal suggestions and Google Gemini to identify food in photos.
When you request a suggestion, we send Anthropic:
We do not send your name, email, or account ID to Anthropic or Google. Both act as data processors under Data Processing Agreements. Per their API terms, they do not use API inputs to train their models.
Current AI models in use: meal suggestions — claude-haiku-4-5-20251001 (Anthropic); food photo identification — gemini-2.5-flash (Google DeepMind)
When you tap "Find near me":
When you submit a photo:
We do not use food photos to train AI models.
| Data | Retention |
|---|---|
| Meal logs | Until you delete your account, then purged within 30 days |
| Dietary restrictions and preferences | Until you change or delete them, or delete your account |
| Account data (email, Supabase ID) | Until account deletion, then purged within 30 days |
| Location coordinates | Not retained — discarded after each request |
| Food photos | Retained with meal log until you delete the meal or your account, then purged within 30 days |
| Server logs (IP, access logs) | 90 days, then deleted |
These companies process data on our behalf under Data Processing Agreements:
| Processor | What they handle |
|---|---|
| Supabase | Authentication, session management, user identity, file storage |
| Anthropic | AI meal suggestions |
| Google DeepMind (Gemini API) | Food photo identification |
| Google (Places API) | Restaurant location queries (location data only) |
| Railway / cloud host | API server infrastructure |
| Vercel | Web frontend hosting |
We do not use advertising networks, tracking pixels, or analytics SDKs that share data with third parties.
You can:
For EU residents (GDPR): you have the right to lodge a complaint with your national supervisory authority.
For California residents (CCPA/CPRA): you have the right to limit the use of sensitive personal information (dietary restrictions) to what's necessary to provide the service. We already do this — we don't use it for anything else.
For Washington state residents (My Health My Data Act): dietary and location data qualify as consumer health data. You have the right to access, delete, and withdraw consent at any time.
WSIET suggests meals. It is not a medical device, a dietitian, or a healthcare provider. Nothing in the app constitutes medical or nutritional advice. If you have a medical condition that affects your diet, consult a qualified healthcare professional.
WSIET is not intended for users under 13. We do not knowingly collect data from children.
If we make material changes (new data types, new processors, new uses), we'll update the "Last updated" date at the top and notify you by email if the change affects how we use sensitive data.
Questions about your data: privacy@wsiet.app