Last updated: 9 September 2026
Foodza is a nutrition app. It reads food labels, scores products against your own goals and allergies, and keeps a diary of what you eat.
This policy describes exactly what Foodza collects, where it goes, and what it never does. It is written from what the app’s code actually does. If you find something here that does not match how the app behaves, that is a bug and we want to hear about it.
Foodza is operated by Karan Chaudhary, based in Auckland, New Zealand.
Contact: codebluepulse@gmail.com
Whether or not you have an account, the following is written to your device and protected by iOS file encryption:
| What | Why |
|---|---|
| Your profile — name, age, height, weight, activity level, biological sex, country | To work out an energy range and weigh products against you |
| Your health goals, dietary preferences and allergies | To score products for you and warn you about allergens |
| Which conditions you asked Foodza to watch | To decide which published guidance to lead with |
| Your food diary | To total your day and read a pattern over four weeks |
| Exercise you typed in | To show beside what you ate |
| Products you scanned, saved or built from a label | Your history and favourites |
| Appearance choice, and how much of a monthly allowance you have used | To render the app and enforce plan limits honestly |
Biological sex is asked for one reason only: the published resting-energy equations differ by sex. “Prefer not to say” is a real answer — choosing it means Foodza reports no energy target rather than picking an equation on your behalf.
You can erase all of this with Profile → Clear Data on This Device.
Only three things leave your device:
Your profile, diary and history stay on the phone.
A note on the anonymous identity. So that a signed-out phone can read and add to that shared food database, Foodza asks our server for a random identifier when you first open it. It is created by us, not collected from you: no email, no name, no device ID, nothing that identifies you or your phone, and it is not shared with anyone.
It is removed from your phone when you delete the app, and from our servers within 90 days of your last use — unless you have added a product to the shared food database, in which case it is kept so the record of where that product came from survives. That record is not linked to anything about you.
It unlocks the food database and nothing else. Your profile, health conditions, diary and exercise are not uploaded, because that requires an account you have chosen to create. If you never sign in, nothing about you reaches our servers — that promise is unchanged.
Signing in is optional and exists so your data survives a lost or replaced phone. When you are signed in, these are copied to our database:
Where it is stored. Our database is hosted by Supabase in their
ap-northeast-2 region, which is in Seoul, South Korea. If you are outside
that country — and most of our users are — your information is transferred there
and stored there.
Who can read it. Only you. Every table carries row-level security that scopes each row to the account that owns it, so one user’s data is not readable by another even in principle.
Foodza can read a nutrition label, recognise a meal, or check a product photo you take.
Photos of products you contribute are checked automatically before anything is kept, so that images which are not product photographs are rejected.
If you connect Apple Health, Foodza reads four things and nothing else:
Not weight, not heart rate, not sleep, not anything else.
You can withdraw access at any time in the Health app, under Sharing → Apps.
Some features send information to Anthropic (the makers of Claude) through our own server, never directly from your phone:
| Feature | What is sent |
|---|---|
| Reading a label | The photograph |
| Photographing a meal | The photograph |
| Checking a product photo | The photograph |
| The coach | Today’s logged foods and nutrient totals, your goals, dietary preferences and allergies, your recent scans, and findings from your four-week pattern |
Your name and email are never sent. The coach receives what you ate and what you have told Foodza about your diet — not who you are.
Anthropic processes this to produce a reply and does not use it to train their models. Foodza stores the conversation only on your device.
If you turn on insight alerts, Foodza may send you at most one notification a week, scheduled on your own phone. No data is sent anywhere to produce them — the finding is computed on the device. You can turn them off in the app or in iOS Settings.
Purchases are handled by Apple. We never see your payment details.
When you subscribe, Apple gives the app a signed receipt. Our server verifies that signature with Apple’s own certificates and records only:
You can sign in with an email and password, with Google, or with Apple.
Foodza has no advertising business. Its only revenue is the subscription.
Deleting your account removes your profile, goals, preferences, allergies, diary, exercise, scans and favourites. The deletion cascades in the database, so nothing is left orphaned.
Anonymous product records you contributed to the shared food database remain, because they are facts about a packet of food rather than about you, and other people now depend on them. They carry no link back to your account after deletion.
| You want to | Do this |
|---|---|
| Use Foodza without giving us anything | Skip sign-in. Everything about you stays on your phone |
| See what Foodza holds about you | Profile → Your Details, Health Goals, Dietary Preferences, Allergies |
| Correct anything | Edit it in the app; diary entries are editable and removable |
| Erase everything on this device | Profile → Clear Data on This Device |
| Delete your account and server data | Profile → Delete Account |
| Stop Apple Health access | Health app → Sharing → Apps → Foodza |
| Stop notifications | In the app, or iOS Settings → Notifications |
If you are in New Zealand, the Privacy Act 2020 gives you the right to ask for a copy of the information we hold about you and to have it corrected. If you are in the UK or the EU, the UK GDPR and GDPR give you rights of access, rectification, erasure, restriction, objection and portability. Write to the address above and we will respond.
Foodza is not directed at children and we do not knowingly collect information from anyone under 13.
The risk-check questionnaires Foodza links to were validated in adults, so they are not offered to anyone who has told us they are under 18.
Foodza reports published nutrition guidance and what your own diary says beside it. It does not diagnose, treat or predict disease.
Where it links to a validated risk questionnaire, that questionnaire belongs to the body that published it, and any result you get is a reason to talk to a doctor — not a diagnosis. Foodza never sees your answers or your result.
Nothing in the app is a substitute for advice from a doctor, dietitian or allergist. If you have a severe allergy, always check the packaging.
| Who | What for | Where |
|---|---|---|
| Supabase | Database, authentication and server functions | Seoul, South Korea |
| Anthropic | Reading labels and meals, and the coach | United States |
| Apple | Sign-in, purchases and receipt verification | Apple’s infrastructure |
| Google sign-in, if you use it | Google’s infrastructure | |
| Open Food Facts | Product lookup by barcode | France (non-profit, open database) |
| USDA FoodData Central | Generic food lookup | United States (public database) |
Open Food Facts and USDA receive a barcode or a search term. They receive nothing about you.
If we change what Foodza collects, this page changes with it and the date at the top moves. Material changes will be announced in the app before they take effect.
If you think we have mishandled your information, please write to us first — most things are a misunderstanding or a bug, and we would rather fix it.
If you are not satisfied, you can complain to the Office of the Privacy Commissioner in New Zealand (privacy.org.nz), or to your local data protection authority if you are in the UK or the EU.