Privacy Policy

Last updated: May 11, 2026

Zadi ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information when you use the Zadi mobile application ("App").

Summary — Third-Party AI Services

Zadi uses Anthropic, Inc. (Claude API) as a third-party AI service provider to power the following in-app features: food photo scanning, menu scanning, voice food logging, recipe generation, grocery list generation, the in-app guide ("Ask Zadi"), and the AI Nutrition Coach chat.

When you use one of these features, the relevant input you provide — the photo you scan, the text question you type, or the voice transcript — is transmitted over a secure (TLS) connection to Anthropic's Claude API to produce the AI response. We do not transmit your name, email, password, or account profile data to Anthropic. Anthropic's data policy states that API inputs are not used to train their models, and we do not retain the inputs on our servers after processing. The first time you use an AI feature, the App requires you to explicitly grant consent via an in-app disclosure screen before any data leaves your device.

You can review Anthropic's privacy practices at https://www.anthropic.com/legal/privacy. By granting AI consent in the App you confirm that you have read this summary and the third-party policy.

1. Data We Collect

Data you provide

Data Type	Purpose	Stored Where
Name, email, password	Account creation and authentication	Supabase (cloud) + device
Age, gender, weight, height, activity level, goal	Calorie and macro target calculation	Device + Supabase (if signed in)
Meal logs, water intake, fasting sessions	Nutrition tracking	Device + Supabase (if signed in)
Weight entries, body measurements	Progress tracking	Device + Supabase (if signed in)
Recipes, favorites	Saved food preferences	Device + Supabase (if signed in)
AI Coach conversations	Personalized nutrition coaching	Device only
Progress photos	Visual body transformation tracking	Device only — never uploaded
Food scanner corrections	Improving AI recognition for your foods	Device only
Mood after meals	Correlating food with energy levels	Device + Supabase (if signed in)

Data collected automatically

• HealthKit / Health Connect data (steps, active energy burned, heart rate) — only when you explicitly enable the HealthKit toggle. We read this data to display it in the App and never share it with third parties.
• Food photos — sent to our AI service (Claude by Anthropic) for food identification. Photos are processed in real-time and are not stored on our servers after analysis.

Data we do NOT collect

• We do not collect device identifiers, IP addresses, or location data.
• We do not use analytics SDKs, advertising trackers, or fingerprinting.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.

2. How We Use Your Data

• Nutrition tracking: calculating calorie targets, macro breakdowns, micronutrient reports, and adaptive target adjustments
• AI features: food photo analysis, AI coaching conversations, menu scanning, voice logging, grocery list generation, and sugar estimation
• Sync: keeping your data available across devices when you sign in (optional — guest mode works fully offline)
• Subscription management: verifying your PRO status via RevenueCat
• Notifications: meal reminders, streak protection, fasting alerts, trial reminders (all configurable in Settings)

3. Third-Party Services

Service	Purpose	Data Shared
Supabase	Authentication, cloud sync, account deletion	Email, profile, nutrition data (only if signed in)
Anthropic (Claude)	AI food recognition, coaching, sugar estimation	Food photos (transient, not stored), chat messages, food descriptions
RevenueCat	Subscription management	Anonymous user ID, purchase receipts
USDA FoodData Central	Nutrition database lookups	Food name search queries (no personal data)
Open Food Facts	Barcode product lookups	Barcode numbers (no personal data)

We do not share your personal data with any other third parties. None of the services above receive your name, email, or health data unless explicitly described in the table.

4. AI and Your Data

When you use AI-powered features (food scanning, AI Coach, menu scanner, voice logging, grocery list generation), your input (photos, text, voice transcripts) is sent to Anthropic's Claude API via our secure Supabase edge function. Anthropic's data retention policy states that API inputs are not used to train their models. We do not store your AI interactions on our servers — conversation history is kept locally on your device.

5. Data Storage and Security

• Local storage: All data is stored on-device using Hive (encrypted at rest by the OS). The App works fully offline.
• Cloud storage: If you sign in, data syncs to Supabase (hosted in Singapore, ap-southeast-1). All connections use TLS. Row-level security (RLS) ensures you can only access your own data.
• Passwords: Handled by Supabase GoTrue. We never see or store your plaintext password.
• API keys: The Anthropic API key is stored as a Supabase project secret and never ships in the app binary.

6. Your Rights

You have the right to:

• Access your data — all your data is visible in the App at all times
• Correct your data — edit your profile, meals, and weight entries directly
• Delete your data — use the "Delete Account" option in Profile to permanently erase all server-side data. The cascade deletes your profile, meals, weights, favorites, recipes, achievements, and settings in a single transaction.
• Export your data — the PDF Report feature generates a downloadable summary of your nutrition data
• Use the App without an account — guest mode provides full local functionality without any cloud data collection

7. Children's Privacy

Zadi is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at support@zadi.ink and we will delete it.

8. Data Retention

• Active accounts: Data is retained for as long as your account exists.
• Deleted accounts: All server-side data is permanently deleted immediately upon account deletion. There is no grace period or recovery window.
• Guest users: Data exists only on your device. Uninstalling the App removes all data.

9. Auto-Renewable Subscriptions

Zadi offers auto-renewable subscriptions managed through Apple App Store and Google Play Store. Payment is charged to your Apple ID or Google account. Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period. You can manage and cancel subscriptions in your device's Settings. See our Terms of Service for full subscription details.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, for significant changes, through an in-app notification. Your continued use of the App after changes constitutes acceptance.

11. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

support@zadi.ink