Privacy Policy
Last updated: 10 October 2026
The short version
- Intake AI has no accounts. We don't ask for your name, email address or phone number to use the App.
- Your body details (sex, height, birth year, weight and goal), meals and photos are stored on your device, not on our servers.
- Photos and descriptions you submit are sent to our backend and AI providers to analyse your food. Our backend processes images in memory and does not save them.
- We use RevenueCat for subscriptions, Mixpanel for app analytics and, on iPhone only, AppsFlyer to measure our ads. We don't show the App Tracking Transparency prompt and we don't track you across other companies' apps or websites.
- We never send your food photos, meal descriptions or nutrition data to advertising platforms, and we don't sell your personal information.
Who is responsible for your information?
VICTOR SUPPLEMENTS LTD is the controller of personal information processed through Intake AI (the "App") and this website. We are a company registered in England and Wales under company number 14369021. Our registered office is Suite A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, Suffolk, England, IP28 7DE. For privacy questions or requests, email [email protected].
Information stored on your device
The answers you give during onboarding (sex, height, birth year, body weight and goal), your calorie and nutrient targets, logged meals, meal photos and analysis results are stored in the App's storage on your device. We use them on your device to calculate your targets and show your progress. They are not sent to our backend, analytics or advertising partners. They stay on your device until you delete them, clear the App's data or uninstall the App. Your device's own backups (iCloud or Google) may include this data under your backup settings. If you use the App's export feature, the backup file (which can include meal photos) goes wherever you choose to save or share it.
Meal reminders are scheduled locally on your device. We don't use push notification services.
Information we process
Food analysis. When you take or choose a food photo, scan a nutrition label, type a meal description, scan a barcode or search for a food, the App sends that content to our backend, which runs on Google Cloud in Belgium (europe-west1). The App does not send your body details or any device identifier with these requests. Our backend sends the content needed for analysis to AI providers (see who receives information) and looks up food names and barcodes in food databases. Our backend handles images in memory while answering the request and does not write them to storage. Please don't include information about your health or other sensitive details in photos or descriptions.
App access. To use our backend, the App first requests a short-lived access token. This request contains no account or device identifier.
Subscriptions. Subscriptions are purchased through Apple's App Store or Google Play, which process your payment. RevenueCat manages and verifies subscriptions using a random, anonymous RevenueCat customer ID. Subscription information can include the product, purchase date, trial status, price, currency, renewals, cancellations, billing issues, refunds and expiry. On iPhone, RevenueCat also receives device identifiers available to apps without tracking permission, such as the Identifier for Vendors (IDFV) and IP address, and the AppsFlyer ID described below, so subscription events can be matched to ad measurement.
Advertising measurement (iPhone only). We advertise the App on TikTok and may advertise on Meta's platforms (Facebook and Instagram). To understand which ads lead to installs and subscriptions, the iPhone version of the App uses AppsFlyer. The Android version does not use AppsFlyer. AppsFlyer can process an AppsFlyer installation ID, IDFV, IP address and IP-derived approximate location, device model, operating system, App version, language, network information, event times and campaign information. The App sends AppsFlyer install and session information and a "trial started" event (the subscription product, currency and trial length). Subscription events may also be shared with AppsFlyer through RevenueCat. The App does not show Apple's App Tracking Transparency prompt and turns off collection of the Identifier for Advertisers (IDFA). Ad measurement on iPhone uses Apple's privacy-preserving SKAdNetwork and AdAttributionKit. We do not use this information to track you across other companies' apps or websites. AppsFlyer may give TikTok and Meta limited or aggregated install and conversion information so we can measure and improve our campaigns.
Ads you see on other platforms. If you see or tap an Intake AI ad on TikTok, Facebook or Instagram, that platform processes information about you under its own privacy policy.
App analytics. On iPhone and Android, Mixpanel receives App usage events with a random identifier created by the Mixpanel SDK. These events include onboarding screens viewed, paywall purchase-button taps, when a meal is logged (and whether it was a repeat), and limited onboarding diagnostics: App version and build, device model, operating-system version, platform, screen size, text-size and accessibility settings, timings, tap counts and the type and source of errors. Mixpanel may use the IP address to estimate approximate location. We do not send your onboarding answers, meal photos, meal descriptions or nutrition results to Mixpanel.
Feedback. If you send feedback in the App, we receive your message and where in the App it was sent from. Cancellation feedback also includes the reason and details you choose to give, your RevenueCat customer ID, subscription product IDs, platform and App version. Feedback is recorded in our Google Cloud logs.
Email support. If you email us, we process your email address, your message and anything you include, using our email provider.
Technical and security logs. Google Cloud automatically records each request to our backend, including the IP address it came from, the time, route, response status and user agent. Our own backend logs add request sizes, errors, food search terms and the names of foods identified in an analysis, plus feedback as described above. We use these logs to run, secure and troubleshoot the service. We don't log the photos you submit or the text of typed meal descriptions.
This website. intakeai.app does not use cookies, analytics or advertising pixels. It is hosted by Cloudflare, which processes your IP address and request details to deliver and protect the site.
Why we use information and our lawful bases
- Food analysis, barcode lookup, subscriptions and feedback about your subscription: to provide the App and the purchases you request. Lawful basis: performance of a contract.
- Customer support: to answer your requests. Lawful basis: performance of a contract, or our legitimate interest in helping people who contact us.
- Security, fraud and abuse prevention: to protect the App, its users and our systems. Lawful basis: our legitimate interests in running a secure, reliable service.
- App analytics: to understand how the App is used and improve it. Lawful basis: our legitimate interests in improving the App, using limited, pseudonymous data.
- Advertising measurement: to measure which of our ads lead to installs, trials and subscriptions, without cross-app tracking. Lawful basis: our legitimate interests in measuring and improving our own advertising.
- Legal and accounting records: to meet tax, accounting and other legal duties. Lawful basis: legal obligation.
Where we rely on legitimate interests, you can object at any time by emailing us.
Who receives information?
| Provider | What it does |
|---|---|
| Google Cloud | Hosts our backend and logs (Belgium). |
| Google (Gemini API) | AI analysis of food photos, labels and descriptions. |
| OpenRouter | Routes some AI requests to Google's Vertex AI. |
| OpenAI | Backup AI analysis if our main provider is unavailable. |
| Cerebras | AI processing of text only (food names and descriptions). |
| USDA FoodData Central and Open Food Facts | Food, nutrient and barcode lookups (food names and barcode numbers only). |
| RevenueCat | Subscription management and validation. |
| Apple and Google | App stores and payment processing. |
| AppsFlyer | Ad measurement on iPhone only. |
| TikTok and Meta | Receive limited or aggregated campaign results through AppsFlyer and Apple's ad attribution. |
| Mixpanel | App analytics. |
| Our email provider | Support emails. |
| Cloudflare | Hosts this website. |
These providers act on our behalf or provide services we use, under their terms. We don't sell your personal information, and we never send your food photos, meal descriptions or nutrition data to advertising platforms.
How long information is kept
- Food photos and label images: our backend holds them in memory only while answering the request. AI providers may keep requests for a limited time under their terms: Google keeps paid Gemini API prompts and responses for up to 55 days for abuse monitoring, and OpenAI keeps API data for up to 30 days for abuse monitoring. Under their API terms, this data is not used to train their models.
- Food lookups: our backend caches food and nutrient lookups for between 2 hours and 7 days, and repeats of the same analysis request for 10 minutes. These caches are not linked to you.
- Backend logs, including feedback: 30 days.
- Support emails: up to 2 years after your conversation with us ends.
- Subscription records: while you have a subscription and afterwards for as long as needed for refunds, disputes and accounting, generally up to 6 years for tax and accounting purposes.
- Ad measurement: AppsFlyer keeps end-user data for no more than 24 months unless instructed otherwise or required by law. TikTok and Meta apply their own retention to campaign data.
- App analytics: Mixpanel keeps analytics data while we use the service, unless we delete it earlier; data is deleted after our use of the service ends under Mixpanel's terms.
- On your device: until you delete it, clear the App's data or uninstall the App.
International transfers
Our backend runs in Belgium. Some providers, including OpenAI, OpenRouter, Cerebras, RevenueCat, AppsFlyer, Mixpanel, Meta and TikTok, may process information in the United States or other countries. Where UK law requires it, transfers rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified providers) or on contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses included in providers' data processing terms. Contact us for more information.
Your choices and rights
Under UK data protection law, you can ask to access, correct or delete your personal information, restrict or object to its use, and receive a portable copy. These rights depend on the circumstances and the lawful basis. Email [email protected] to make a request. Because the App has no accounts, we may need details such as your purchase receipt or the date you subscribed to find records about you.
- You can delete your meals and photos in the App, or delete everything by uninstalling it.
- You can manage camera, photo and notification permissions in your device settings.
- You can object to analytics and ad measurement by emailing us. On iPhone, the App never accesses your advertising identifier.
- Deleting the App does not delete subscription, ad measurement, analytics or support records held by our providers. Contact us about those.
You can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
Children
Intake AI is for people aged 13 or over. Children under 13 must not use the App. Users aged 13 to 17 should review this policy with a parent or guardian. If you believe a child under 13 has used the App, contact us so we can delete any information we hold.
Changes to this policy
We may update this policy when our practices or legal duties change. We will post the new version here with a new "last updated" date and give additional notice where required.