Privacy

Who is responsible

Corstride Labs is responsible for your personal information (in some laws, the “controller”). The person responsible for privacy at Corstride Labs can be reached at adam@corstride.com.

What we collect

• Your account: your email address and sign-in details. If you sign in with Google or Apple, they give us your email address.
• Your profile: age, sex, height, weight, activity level, goal, unit preference and daily targets, and your country of residence if you choose to add it.
• Your diary: each food you log (name, calories, protein, carbs, fat, amount, meal and date) and each weigh-in.
• How many AI photo scans you’ve used each day, to apply the daily limit.
• If you subscribe: your plan, its status and expiry date, and which store it came from. We never see your card or payment details.
• When you agreed to the terms and to this policy.

Before you create an account

The questions the app asks on first launch (goal, sex, age, height, weight and activity) are kept only on your phone. They’re saved to your account once you sign up and agree to this policy. If you never sign up, they never leave your phone; deleting the app removes them.

Kept on your phone

So the app opens quickly, it keeps a copy of your own recent data on your phone, one per account, and deletes it when you sign out. Your settings, such as appearance and reminders, are stored on your phone too. Reminders are scheduled by your phone; we don’t send them and aren’t told about them.

Food photos

When you scan a meal, the photo goes to our server and on to OpenAI, which returns a nutrition estimate. We don’t keep the photo: only the entry you confirm is saved to your diary. OpenAI states that it doesn’t use data sent through its API to train its models, and may keep it for a limited time to detect abuse.

Food search and barcodes

When you search for a food or scan a barcode, our server sends the search words or the barcode number to USDA FoodData Central (a United States government food database) and Open Food Facts (a public food database). They receive only those words or that number, never anything about you or your account.

Why we use it

• To provide the app: your account, your targets, diary, reports and streaks, and your data on each device you sign in on. This is necessary to provide the service you asked for.
• Your weight, height, age, sex and what you eat are health information. We use them only for the app’s features, and only because you gave your explicit consent on the “Before you start” screen.
• Usage analytics, only if you allow them (see below).
• Crash reports, security and preventing misuse, such as applying scan limits. These are in our legitimate interest in keeping the app working and safe.
• Subscriptions: to give you what you paid for.

We don’t use your information for advertising, and we don’t make automated decisions about you that have legal or similarly significant effects.

Withdrawing consent

You can withdraw your consent to us using your health information at any time by deleting your account (Profile → Delete account). The app can’t work without this information, so there’s no way to keep an account while withdrawing it. You can turn usage analytics off at any time in Profile → Privacy.

Usage analytics

If you allow it, we record which features get used, for example that a food was logged and whether by photo or by hand, or that a report was opened, along with app opens and basic device and app version details. These are tied to an account ID, not your email. They never include what you ate, any nutrition figures, or your weight.

Nothing is recorded until you’ve made your choice on the “Before you start” screen. The switch there starts off in the EU, the EEA, the UK and Switzerland, and on elsewhere; you can change it before you continue and at any time in Profile → Privacy. The choice applies to the device you make it on.

Crash reports

If the app or our server hits an error, a report with the error, device and app details is sent to Sentry so we can fix it. Reports don’t include your email, your photos, or what you ate.

Who else handles your data

These companies handle personal information on our behalf, to run the app:

• Clerk: accounts and sign-in (United States).
• Vercel: hosts our server (United States).
• Railway: hosts our database (United States).
• OpenAI: nutrition estimates from food photos (United States).
• RevenueCat, with the Apple App Store or Google Play: subscriptions (United States).
• PostHog: usage analytics, only if you allow them (United States).
• Sentry: crash reports (European Union).

We may also disclose information when the law requires it, or to protect people’s safety or our rights. If Corstride Labs or Cappetite is sold or merged, your information may pass to the new owner, who must keep honouring this policy.

Where your data goes

Your data is stored and handled mainly in the United States, with crash reports in the European Union, and the people who run Cappetite may access it from other countries. Privacy laws there may differ from those where you live. Where the law requires it, transfers rely on safeguards such as the standard contractual clauses these providers offer.

How long we keep it

For as long as you have an account. You can edit or delete any diary entry or weigh-in at any time. When you delete your account, your profile, diary, weigh-ins, scan counts and subscription records are deleted from our database straight away, and your sign-in account is removed. Copies in routine backups may remain for a short time until they’re overwritten.

Apple, Google and RevenueCat keep their own purchase records. Usage analytics and crash reports already collected stay with PostHog and Sentry under their own retention periods, linked to an account ID rather than your email. Email us if you want those removed too.

Keeping it safe

Everything between the app and our server is encrypted in transit (HTTPS). Your data can only be reached with your sign-in, and each account can reach only its own data. Access to the database is limited to the people who run Cappetite, and only to keep it running or to answer your requests. No system is perfectly secure; if a breach affects your information, we’ll tell you and the authorities as the law requires.

Your rights

You can ask for a copy of your data (including in a format you can move elsewhere), ask us to correct it, or delete your account yourself in Profile → Delete account. Depending on where you live, you may also be able to object to or restrict how we use it, and to complain to a data protection authority, such as the Office of the Privacy Commissioner of Canada or the authority where you live.

To make a request, email adam@corstride.com from the address on your account, so we know it’s you. We reply within 30 days. Using these rights never affects the service you get.

Consumer health data (United States)

This section is for people in US states with consumer health data laws, such as Washington and Nevada.

• What we collect: your age, sex, height, weight and weigh-ins, goal and targets, your food diary, and the food photos you scan (which we don’t keep).
• Where it comes from: you, through the app.
• Why: only to provide the app’s features, as described above.
• Who we share it with: only the service providers listed under “Who else handles your data”, to run the app. We don’t sell consumer health data or share it for anyone else’s purposes.
• Your rights: to confirm whether we collect it and see it, to have it deleted, to withdraw consent, and to get a list of everyone we’ve shared it with. Email adam@corstride.com. If we refuse a request, you can appeal by replying to our answer; if we refuse the appeal, you can contact your state attorney general.

Children

Cappetite isn’t intended for anyone under 16, and the app won’t accept a younger age. If you believe someone younger has given us information, email us and we’ll delete it.

Changes

If this policy changes in a way that matters, we’ll update the date above and tell you in the app, and ask for your consent again where the law requires it.