Legal
Privacy Policy
Last updated: August 2026
1. About this policy
EatyWise (“we”, “our”, “us”) is an AI-powered nutrition builder. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have.
By using EatyWise you agree to the practices described in this policy. If you do not agree, please do not use the application.
2. Data we collect
a) Data you provide directly
- Nutrition goals, dietary preferences, and activity level (from onboarding)
- Body metrics (height, weight, date of birth) and other profile information you choose to provide
- Meal ingredients you enter into the builder
b) Data collected automatically
- Standard server logs (IP address, browser type, referring URL, page visited, timestamp)
- Meal generation requests sent to our AI provider (anonymised where possible)
- Analytics data — only if you accept analytics cookies (see Section 4)
Certain profile information may be securely associated with your EatyWise account to provide personalization and support future synchronization across devices.
3. How we use your data
- To generate personalized meal and nutrition recommendations
- To remember your preferences between visits
- To improve our AI-powered features and overall application quality
- To measure and improve application performance (analytics, with consent)
- To comply with legal obligations
4. Cookies and local storage
Essential cookies (always active)
These cookies are strictly necessary for the application to work. They cannot be disabled.
| Cookie / key | Purpose | Duration |
|---|---|---|
| ew_consent | Stores your cookie consent choice | 1 year |
| ew_onboarding_completed | Records that you have completed personalization onboarding | 1 year |
| ew_onboarding_dismissed | Records that you dismissed the onboarding invitation | Persistent |
| ew_generations_count | Tracks how many meals you have generated | Persistent |
| ew_user_* | Stores your personalized nutrition profile and targets locally and/or securely associates them with your account when applicable | 1 year |
| eatywise-plan | Stores your 3-day meal plan locally and/or securely associates it with your account when applicable | 1 year |
| eatywise-builder | Preserves in-progress builder state locally | Session |
| eatywise-recipes | Caches generated recipe data for quick access | 1 hour (TTL) |
| eatywise-last-added | Stores the most recently added plan item for the post-add highlight animation | Session |
| eatywise-last-added-temp | Temporary flag used to coordinate the post-add scroll animation | Session |
| ew-recent-ingredients | Remembers ingredients you recently added to the builder | Persistent |
Analytics cookies (optional — requires consent)
These cookies are only set if you click “Accept” on the cookie banner. If you click “Decline”, none of the following scripts or cookies are initialized.
| Service | Provider | Purpose | Duration |
|---|---|---|---|
| Google Analytics 4 | Google LLC | Usage measurement | Up to 2 years |
| Vercel Analytics | Vercel Inc. | Page-level analytics | 1 year |
| Vercel Speed Insights | Vercel Inc. | Performance measurement | 1 year |
5. Third-party services
EatyWise uses the following third-party services to deliver its functionality:
- Google Gemini AI — generates personalized meals, recipes, and nutritional analysis. Meal generation requests may include ingredients and user preferences but do not include personally identifiable information.
- Supabase — secure authentication and account management.
- Vercel — application hosting and infrastructure.
- USDA FoodData Central — nutrition data lookup (no personal data sent).
- Image providers (Pexels, Pixabay, Unsplash) — food photography for generated meals. Search queries are sent but do not include personal data.
6. Authentication
Google Sign-In provides basic account information required for authentication. EatyWise never receives your Google password.
7. Data retention
Some account-related information may be securely associated with your EatyWise account. Browser storage is also used for caching and supporting an offline experience, and some profile, preference, and meal plan data may be stored locally and/or securely associated with your account when applicable.
Server logs are retained for up to 30 days for security, debugging, and fraud prevention purposes, after which they are automatically deleted.
8. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent at any time (without affecting prior processing)
- Lodge a complaint with your local supervisory authority
You can manage locally stored information by clearing your browser's site data for eatywise.com. You may also contact us regarding account-associated information.
9. Children
EatyWise is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the Last Updated date at the top of this page. Continued use of EatyWise after changes are posted constitutes acceptance of the updated policy.
11. AI limitations
AI-generated recommendations may contain inaccuracies and should not replace professional medical or nutritional advice.
12. Contact
If you have questions about this Privacy Policy or how we handle your data, please visit our Contact page or email us directly at eatywise@gmail.com.