Diet Log

Privacy Policy

Last updated: 13 September 2026

Diet Log is built and operated by Codestudio Solutions SRL, a company registered in Romania ("we", "us"). This policy covers the Diet Log mobile app and this website. We are the data controller for the information described below.

The short version: we collect what the app needs to compute your plan and show your progress, we do not sell anything to anyone, and there is no advertising or advertising-related tracking in this app.

What we collect

  • Account. Your email address. Your password is handled by Google Firebase Authentication and stored as a hash — we never see it. If you sign in with Apple or Google, we receive the identifier and email that service gives us.
  • Your profile. The answers you give during onboarding: first name, sex, age, height, weight, your measured body fat percentage if you enter one, activity level, and your target body fat percentage.
  • Your answer to the eating-disorder question. During onboarding we ask whether you have a history of disordered eating. See Health-related information below.
  • Your daily logs. For each day you track, one number — how your day went against your maintenance calories — and the date. Diet Log does not ask what you ate.
  • Your plan. Values we calculate from your profile: maintenance calories, daily deficit target, protein target, estimated starting body fat, and how many weeks the plan runs.
  • Feed activity. Which posts you liked or saved.
  • Subscription status. Which plan you are on, whether it is trialing, active or expired, and when the current period ends. This comes from Apple or Google through RevenueCat.
  • Notification token. If you allow notifications, a device token so we can send them.
  • Technical data. Standard diagnostic and reliability data produced by Google Firebase, such as error reports and connection metadata.

What we do not collect

We do not collect your payment card details — Apple and Google process payments and never pass card data to us. We do not collect your location, your contacts, your photos, or health data from Apple Health or Google Fit. We do not use advertising identifiers, we do not run ads, and we do not sell or rent your data.

Health-related information

Your body measurements and your answer to the eating-disorder question are health-related. Under the GDPR, an answer about disordered eating is a special category of personal data, so we rely on your explicit consent, given when you answer that question during onboarding.

We use that answer for one purpose: to soften the tone of the companion messages, so the app does not push you harder when that would be inappropriate. It is not shared with anyone and it does not affect your price. You can change your answer at any time by recalculating your plan, and you can have it deleted along with your account.

Why we use it, and our legal basis

  • To provide the service — computing your plan, storing your logs, showing your progress and managing your subscription. Legal basis: performance of our contract with you.
  • To send companion notifications. Legal basis: your consent, given through the notification permission prompt. You can withdraw it in your device settings at any time.
  • To handle health-related answers. Legal basis: your explicit consent.
  • To keep the app working and secure — diagnosing errors and preventing abuse. Legal basis: our legitimate interest in a functioning, secure product.

Who we share it with

We share data only with the service providers that make the app work. They process it on our instructions and are not permitted to use it for their own purposes.

  • Google (Firebase) — authentication, database, notifications and server functions.
  • RevenueCat — subscription management.
  • Apple and Google — payment processing and subscription billing, as the app stores.
  • Vercel — hosting for this website.
  • Anthropic — only if you use the optional AI food assistant, and only for the text you send to it. This feature may not be available in your version of the app.

We may also disclose information where the law requires it, or to establish or defend legal claims.

Where your data is stored

Some of these providers are based in the United States, so your data may be transferred outside the European Economic Area and the United Kingdom. Those transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent approved safeguard.

How long we keep it

We keep your account data for as long as your account exists. If you delete your account, we delete your profile, plan, daily logs and feed activity. Some records may persist briefly in backups, and we keep the minimum transaction records that tax and accounting law require.

Your rights

If you are in the EU or the UK, you have the right to access your data, correct it, delete it, receive a portable copy, object to or restrict certain processing, and withdraw any consent you have given. Withdrawing consent does not affect processing that already took place.

To exercise any of these rights, including deleting your account and the data that goes with it, write to us at hello@codestudio.roand we will act on your request within 30 days. You also have the right to complain to a supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP); in the UK, the Information Commissioner's Office (ICO).

If you are in California, you have the right to know what personal information we collect and to request its deletion. We do not sell or share personal information as those terms are defined by California law.

Children

Diet Log is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top, and for significant changes we will tell you in the app before they take effect.

Contact

Codestudio Solutions SRL, Romania — hello@codestudio.ro