Privacy Policy

Last updated: 18.08.2026

Terms & Conditions Privacy Policy Refund Policy

1. General

This policy explains what information Vitrack collects, how it is stored and used, with whom it may be shared, and what rights you have regarding it. "Personal information" is any information relating to an identified or identifiable person.

The data controller is currently Shilo, an independent private developer, with no registered business entity, who can be contacted at: shilohdhd1@gmail.com.

2. What information is collected

  • Personal/health profile from the questionnaire: age, biological sex, weight, height, activity level, and diet type — stored by default only in local storage (localStorage) on your browser/device, and used to calculate estimated daily vitamin and mineral targets.
  • Meal photos and analysis results: when you photograph a meal, the photo is sent for automatic analysis (see section 3), and the analysis result (list of identified foods, estimated quantities, nutrient estimates, and confidence level) is stored together with the photo: locally on the device (IndexedDB) if you are not signed in, or in a cloud database if you signed in with a Google account.
  • Account details: if you sign in with Google, we receive from it (via our authentication provider) your name, email address, and profile picture as provided by Google.
  • Subscription and billing status: the plan type selected (monthly/yearly) and active/inactive status, recorded by the App once a purchase is completed through Paddle. We do not collect or store your payment method details (such as card numbers) — these are entered directly into Paddle's checkout and handled solely by Paddle, as described in section 5 below.
  • Basic technical information: like any online service, the hosting, authentication, and AI infrastructure we use may naturally process basic connection data (such as IP address, browser type, timestamps) necessary to operate and secure the Service.

3. AI-based image analysis

Food recognition from a photo happens in two stages: (a) live, on-device recognition only (using a machine-learning model that runs in the browser) that helps frame the shot in real time — this stage does not send any data to a server; (b) final analysis of the photo you captured, performed by sending the photo to the App's server, which forwards it for processing by OpenAI (ChatGPT / GPT models) for food recognition and nutrient estimation.

This means the meal photo you choose to analyze is transferred to OpenAI as an external third party, even if you are not signed in and even if the analysis result is ultimately stored only locally on your device. This processing is also subject to OpenAI's own privacy policy and terms of use (openai.com). If we change or add AI providers in the future, we will update this section accordingly.

Do not upload especially sensitive photos (such as ones that clearly show a third party's face, personal documents, or information unrelated to a meal) for analysis.

4. How we use information

  • Providing the core functionality: calculating personal nutritional targets, recognizing food in photos, and tracking daily/weekly vitamin and mineral intake.
  • Managing accounts, sign-in, and syncing across devices for those who choose to sign in.
  • Managing subscriptions and payments, processed through Paddle.
  • Responding to support requests sent to our email address.
  • Maintaining the security of the Service and preventing misuse.
  • Complying with legal requirements where applicable.

We do not sell personal information to third parties, and we do not use your data for targeted advertising.

5. Who information is shared with

  • Supabase — the database, authentication, and cloud storage infrastructure provider we use for signed-in users.
  • Vercel — the hosting provider used to serve the App.
  • Google — for the sign-in process (Google Sign-In).
  • OpenAI (ChatGPT / GPT models) — the AI-based image analysis provider, used for food recognition and nutrient estimation in the photos you take, as described in section 3 above.
  • Paddle.com Market Ltd and its group companies ("Paddle") — our payment processor and Merchant of Record for paid subscriptions. When you subscribe, Paddle collects and processes your payment details, billing address, and email directly, subject to Paddle's own privacy policy (paddle.com/legal). The Operator receives only your subscription plan and active/inactive status — never your full payment details.
  • Law enforcement authorities or competent bodies — only to the extent required by law, court order, or to protect rights, property, or safety.
  • In the event of a sale, merger, acquisition, or transfer of business assets — information may be transferred to the acquiring/merging party, with reasonable notice given where possible.

6. Storage, data security, and international transfer

We take reasonable, standard measures to protect information, but no method of storage or transmission over the internet is guaranteed to be 100% secure, and we cannot promise absolute security of information.

The infrastructure providers we use (Supabase, Vercel, Google, Paddle, and OpenAI) may store or process information on servers located outside Israel, including in the US and Europe. By using the App, you consent to such transfer of information.

7. Data retention and deletion

Information stored only locally (without an account) stays on your device only and can be deleted immediately and irreversibly via "Clear all data" in Settings, and is also deleted if you clear your browser storage or remove the App.

Account information (for signed-in users) is retained as long as the account is active. Deleting an account via "Delete account" in Settings deletes the information associated with it from the services under our control; copies may be retained briefly in technical backups before final deletion, and third-party providers (such as the image-analysis provider) may retain their own independent retention policies.

You can also request deletion, review, or correction of information manually by contacting shilohdhd1@gmail.com.

8. Your rights

Subject to applicable law, you may have the right to: review the information stored about you; correct inaccurate information; request its deletion; object to certain processing; and receive a copy of your information in an accessible format (data portability). Some of these rights can be exercised directly through the Settings screen (deleting data/account), and others by contacting shilohdhd1@gmail.com. We will endeavor to respond to requests within a reasonable time.

Residents of the European Union may enjoy additional rights under the GDPR; residents of Israel may enjoy rights under the Israeli Privacy Protection Law, 1981, and its regulations.

9. Children's privacy

The Service is intended for those aged 18 and over only, and we do not knowingly collect information from minors. See the "Minimum age" section in our Terms & Conditions.

10. Cookies and local storage

The App does not currently use advertising cookies or third-party ad tracking. We do use browser storage technologies essential to operating the App:

  • Local Storage — to save the state of your personal questionnaire, your calculated nutritional targets, and your subscription status on your device.
  • IndexedDB — to save your meal log on your device when you are not signed in.
  • Sign-in related storage — if you sign in with Google, our authentication provider (Supabase, via Google) may store session tokens in local storage or cookies, to keep you signed in between visits.

These technologies are essential to the basic functioning of the App and are not used by us for cross-site advertising tracking. You can delete all local data at any time via "Clear all data" and/or "Delete account" in the Settings screen, or by clearing site/browser data in your browser settings. If we add usage-analytics or advertising tools in the future, we will update this policy accordingly and request your consent where required by law.

11. Changes to this Privacy Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of the document, and where necessary, a notice will be shown within the App.

12. Contact

For any question, request, or complaint regarding this Privacy Policy or your personal information, contact us at: shilohdhd1@gmail.com