What we know about you, and what we don’t.

What we collect

Your account. An email address and a hashed password, or the name and email Apple or Google hands us when you sign in with them. If you use Apple’s Hide My Email, we never see a real address, and that is fine. We also store your timezone, so a day rolls over when yours does.

What you log. The meals, ingredients and portions you record, and the sentence you typed or spoke to record them. This is the app, so there is no version of it that does not store this.

Your body and goals. If you fill in the profile: your height, weight, age, sex, activity level, and the calorie or macro targets you set. The app uses them to work out a daily target and nothing else. They are optional. Supper works without them.

Voice notes, for as long as it takes to turn them into text. See below.

A push token, if you use the phone app and allow notifications when it asks. It is stored so one kind of message can reach you: an evening nudge on a day you have a streak going and have not logged anything. Nothing else is ever sent to it. You can turn that off under You → Coach hints, and the web app never asks for notifications at all.

Feedback you send us. Your message, which of the three kinds you picked, your platform, and the build you’re running. If you told us which screen it was about, we store that too, as one of fourteen fixed names you chose from, not a record of where you have actually been in the app. None of this is sent unless you choose to send it.

Your subscription status, whether you are on a trial, subscribed, or lapsed.

How the site and the apps get used: pages and screens visited, taps and clicks, and the moments that matter to us as a product, which are signing up, finishing setup, and starting a subscription. Once you are signed in this is tied to your account, along with your email and name, so we can tell one person using Supper on their phone and their laptop from two people. None of it is what you ate: your log, your photos and your voice notes never go to our analytics. If you installed the app after seeing one of our ads on the App Store, Apple tells us which campaign it was and whether the install came from an ad at all. That is not personally identifying data: it is a campaign number, nothing more, used only as a statistic for our own ad campaigns.

What we don’t collect

No advertising identifiers. No tracking of you across other companies’ websites or apps, and no ad networks anywhere in Supper. No location, no contacts, no reading from Apple Health or Google Fit.

We do not sell your data, and there is no arrangement under which anyone pays us for access to it.

Who else sees it

Running Supper means passing your data through other companies. Here is all of them, and why:

Neither Anthropic nor OpenAI trains their models on what Supper sends them. That is a condition of the API terms we use them under, not a favor we asked for.

Photos and voice notes

Photos are never stored. When you photograph a recipe, the image goes straight to Anthropic to be read and is never written to our storage. There is no copy on our servers to leak, subpoena, or forget about.

Voice notes are deleted the moment they become text. A recording is uploaded, transcribed, and deleted within the same few seconds, including when the transcription fails. What survives is the sentence, which you can see and edit on the meal itself.

Deleting everything

In the app: You → Delete account. It signs you out immediately and then erases your meals, foods, recipes, coach conversations, streaks, your profile and body details, your push token, and your sign-in records. There is no thirty-day grace period and no archived copy. It is gone, and we cannot get it back for you either.

One thing survives: a record of what you paid, which we keep for as long as tax and accounting law requires. It has your payment history in it and none of your meals.

Backups of the database are kept for a short period for disaster recovery and roll off on their own schedule. Nobody reads them.

Your rights

Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. If you are in the EU or UK, that is your GDPR right of access, rectification, erasure and portability. If you are in California, the CCPA gives you much the same, plus a right to opt out of sale, already satisfied because we do not sell anything.

Email hello@logsupper.com and you will get a person. Deleting your account does all of this instantly and without asking anyone.

Children

Supper is for people 13 and over. We do not knowingly collect anything from a child under 13; if you believe we have, write to the address above and it will be deleted.

Changes, and who we are

If this page changes in a way that matters, the date at the top changes and we will say so in the app before the change takes effect.

Supper is run by Matthew Nordberg, an individual, in Colorado, USA. Questions about any of this go to hello@logsupper.com.