Last updated: 23 October 2026 · replaces the version dated 29 September 2026
Crisper AI is operated by Ashton Ryan and Zavier Darcy ("we", "us", or "our"). You can reach us at crisperaiapp@gmail.com.
This policy explains what we collect, where it goes, and what you can do about it. We have tried to describe what the App actually does rather than what a privacy policy usually says — including the things we don't collect, and the one limitation we have chosen to live with.
| Category | Examples |
|---|---|
| Account | Your name as you enter it, your email address, and your password. The password is stored only as a salted hash by our authentication provider — we never see it |
| Health and body information | Age, sex, height, weight, activity level, dietary preferences, and your goal (lose fat, maintain, gain) |
| Food and nutrition logs | Meals you log, favourites, custom meals, shopping lists |
| Progress logs | Weight entries, water intake, activity minutes |
| Referral information | A referral code you enter, and which plan you chose |
| Category | Detail |
|---|---|
| Scan history | The date of each scan, how many items and meals it found, the pantry score where one was produced, and the names of detected ingredients. No images are kept |
| Subscription status | Whether you hold an active subscription, and which tier |
| How you found the App | Whether you installed from an Apple Ads ad on the App Store and, if so, which campaign. Apple supplies this; it contains no advertising identifier and needs no tracking permission |
| Server logs | Our API records the time, endpoint, response status, duration, your IP address and a truncated account identifier. Logs never contain prompts, photos or sign-in tokens |
Your sign-in tokens are held in the iOS Keychain, marked so they are not included in device backups and do not sync to your other devices. Your app state and display preferences are stored locally. None of this is readable by us.
We are stating these explicitly because our previous policy claimed some of them:
This is the part people most want to understand, so here it is in full. When you scan your fridge or a meal:
Some clarifications, because the previous policy was imprecise:
Barcodes are decoded on your device. Once decoded, the barcode number is sent to Open Food Facts, an independent open database, to look up product nutrition information.
Food search works the same way. When you search for a food, the App first looks only on your device — at the meals you have already logged, the meals you created, our recipe library, and a built-in table of common foods. None of that leaves your phone.
If your search is at least three characters long, the App also sends the words you typed to Open Food Facts to look for matching packaged products. Only the search text is sent. No account information, no photograph, and nothing that identifies you or links the search to you.
In both cases Open Food Facts receives only the barcode number or the search text — never your profile, your food diary, or your identity.
We do not use your information to show or target ads at you, to profile you for third parties, or for any automated decision-making with a legal effect on you.
We use the following service providers. Each receives only what it needs, and none of them are permitted to use your data for their own purposes.
| Provider | What it handles | Where |
|---|---|---|
| Supabase | Authentication and the database holding your account and logs | United States |
| Railway | Hosts our API proxy; your photos and prompts pass through it in transit | United States |
| Anthropic | AI analysis of scanned photos and text prompts | United States |
| RevenueCat | Subscription and entitlement management, and matching an Apple Ads install to a subscription | United States |
| Apple | Processes all payments through the App Store. We never see your payment details. Also tells us whether you installed from an Apple Ads ad | Per Apple's terms |
| Open Food Facts | Barcode product lookups (barcode number only) and food search (search text only) | France / community-hosted |
We may also disclose information where we are legally required to, or to protect someone's safety or our legal rights. We do not sell your personal information, and we never have.
Because the providers above are mostly based in the United States, your information is disclosed overseas. Under Australian Privacy Principle 8 we take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles, primarily through our contractual terms with each provider. By using Crisper AI you consent to this overseas disclosure.
Your weight, body measurements, dietary preferences and fitness goals are health information, which is "sensitive information" under the Australian Privacy Act and a "special category" under the GDPR. Both give it a higher level of protection.
We collect it only with your consent, which you give by entering it during onboarding, and only to calculate your nutrition targets and personalise suggestions. You can withdraw that consent at any time by deleting your account. We never disclose health information to anyone other than the providers in section 6 who are necessary to run the App.
One limitation we want to be straight about. Sign-in tokens are valid for up to one hour and are verified by signature rather than checked against a list on every request. If you sign out or delete your account you cannot obtain a new token — but a token already issued keeps working until it expires, at most one hour later. We accepted this because the window is short, cannot be extended, and is tightly rate-limited. No security design is perfect and we would rather tell you than imply otherwise.
We keep your information while your account exists.
Deleting your account deletes your data immediately. Go to Profile → Delete Account in the App, or email us at crisperaiapp@gmail.com and we will do it for you. This removes your account and all associated records — profile, meals, favourites, scan history, custom meals, weight, water and activity logs — in a single operation, not on a 30-day timer as our previous policy stated.
Two things survive briefly and for narrow reasons:
Because we never store your photos, there are no photos to delete.
Most of your information is directly visible and editable inside the App — your profile, your logs and your history. You can correct it there at any time.
If you want a copy of everything we hold, or want something corrected that the App will not let you change, email crisperaiapp@gmail.com. We will respond within 30 days. There is no charge. If we refuse a request we will tell you why in writing.
Crisper AI is not for children under 13. We do not knowingly collect information from anyone under 13, and if we discover we have, we will delete it.
If you are 13 to 17, please use Crisper AI with a parent or guardian's knowledge and involvement, and talk to them before making changes to how you eat. In some countries, including much of the EU and UK, a parent or guardian must consent on your behalf — by using the App you confirm that consent has been given where it is required.
One deliberate design choice you should know about: the App will not put anyone under 18 into a calorie deficit. If you are under 18 and select a fat-loss goal, your target is raised to your estimated maintenance level instead. Goals that involve eating more are unaffected. Growing bodies should not be calorie-restricted by an app, and an earlier version of Crisper AI got this wrong.
If you are a parent or guardian and want your child's account and data removed, email us and we will do it.
If a breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme, and any other regulator we are obliged to inform. We will tell you what happened, what was affected, and what to do about it.
We process your information on these legal bases under the GDPR and UK GDPR:
| Purpose | Legal basis |
|---|---|
| Running your account and providing the App | Performance of a contract |
| Health information used for nutrition targets | Explicit consent (Article 9) |
| Security, abuse prevention, cost control | Legitimate interests |
| Measuring whether our App Store ads lead to subscriptions | Legitimate interests |
| Legal and regulatory obligations | Legal obligation |
You have the right to access, correct, delete or export your data, to restrict or object to processing, to withdraw consent at any time, and to lodge a complaint with your local data protection authority. We do not use your data for automated decision-making that produces legal effects.
For these purposes the data controller is Ashton Ryan and Zavier Darcy, at crisperaiapp@gmail.com.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. You have the right to know what we collect, to request deletion, to request a copy, and not to be discriminated against for exercising those rights. Email us to make a request. The categories we collect are listed in section 1; the parties we disclose to are in section 6.
Subscriptions are billed by Apple through the App Store. We never receive or store your card details. Manage or cancel a subscription in your Apple account settings — cancelling stops future charges; it does not delete your Crisper AI data. To delete your data, delete your account as described in section 10.
If we change this policy we will update the date at the top and, for anything that materially affects you, tell you in the App. Continuing to use Crisper AI after a change means you accept the updated policy.
If you think we have mishandled your information, email crisperaiapp@gmail.com and we will investigate and respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to your local data protection authority if you are outside Australia.
Email: crisperaiapp@gmail.com
Developers: Ashton Ryan & Zavier Darcy