Last updated: September 2026
EU Data Residency
All server-side data processing stays within the European Union. Your data never leaves EU infrastructure:
- AI processing — EU-hosted infrastructure
- Authentication & usage tracking — EU-hosted
- Analytics — EU-hosted
- Fitness data — stored locally on your device. Pro users can turn on Cloud Sync to back it up to our EU-hosted servers (see Cloud Sync below)
What Data We Collect
FitterEater collects the minimum data needed to provide you with a personalized fitness experience:
- Profile information — age, sex, height, weight, and fitness goal. Used to calculate your nutritional targets.
- Fitness tracking data — meals, workouts, supplements, weight logs, body measurements, and your AI coaching history. Stored locally on your device, and — if you enable Cloud Sync (Pro) — also backed up to our EU-hosted servers so you can sync across devices.
- Body photos — progress photos you take. Stored locally on your device, never stored on our servers, and never included in Cloud Sync. If you use an AI progress-comparison feature (the Compare Photos tool, or a weekly/monthly report that compares two of your photos), the photos being compared are sent to our EU-hosted AI service to analyze the visual change, then discarded immediately after processing — never stored.
- Meal photos — photos you take for meal logging are sent to our EU-hosted AI service for food identification, then discarded server-side. They are also stored locally on your device and are not included in Cloud Sync.
- Authentication — email and name from your Google or Apple account. Used for sign-in only.
Where Data Is Stored
- On your device — All tracking data (meals, workouts, weight, photos, measurements) is stored locally in your browser using IndexedDB. It stays on your device unless you export it or turn on Cloud Sync.
- Supabase (EU) — Authentication credentials and API usage counters, hosted in the EU. If you are a Pro user and enable Cloud Sync, your fitness tracking data is also stored here — encrypted, private to your account, and never shared (see Cloud Sync below). Body and meal photos are never stored server-side.
- AI processing (EU) — When you use AI features (meal analysis, daily insights, weekly reports), your tracking data for that specific request is sent to EU-hosted AI infrastructure for processing. Data never leaves the EU. Data is not stored after processing.
Cloud Sync (Pro)
Cloud Sync is an optional Pro feature, turned off by default. You turn it on from Settings, and doing so is your explicit consent to store the data below on our servers.
- What syncs — your fitness tracking data: meals (excluding photos), workouts, supplements, weight and body measurements, daily/weekly/monthly analyses, planned workouts, your profile, and your AI coaching history.
- What does not sync — meal photos and body photos always stay on your device.
- Where — Supabase, hosted in the European Union. Data is encrypted in transit and at rest.
- Privacy — access is restricted to your own account by row-level security. No one else can read your data, and it is never sold, shared, or used to train AI models.
- Health data — some of this (nutrition, weight, body measurements) is health-related and treated as special-category data under GDPR. We process it only with your explicit consent — the Cloud Sync toggle — and only to provide the sync feature.
- Turning it off — you can disable Cloud Sync at any time; your device keeps its local copy either way.
If your Pro subscription ends, syncing stops and your synced data is retained for 60 days — so you can renew without losing it — then permanently deleted. Deleting your account removes all synced data immediately. The copy on your device is never touched by either event.
AI Processing
When you use AI-powered features, the relevant data is sent to EU-hosted AI infrastructure (AWS Bedrock) for processing:
- Meal photo analysis — When you take a photo to log a meal, the image is sent to our AI service for food identification and macro estimation. The photo is transmitted securely and is not stored on our servers after processing.
- Text/voice meal parsing — Text descriptions of meals are sent for nutritional analysis.
- Daily/weekly/monthly insights — Aggregated meal totals, workout summaries, and body metrics for the relevant period are sent for coaching analysis. Daily insights never include photos. Weekly and monthly reports include your progress photos only when there are two to compare — those are sent for the visual comparison and discarded immediately after, never stored.
- Photo progress comparison — The Compare Photos tool sends the two body photos you choose to our EU-hosted AI service to describe the visual change between them. The photos are transmitted securely and discarded immediately after the comparison — never stored on our servers.
All AI-processed data is:
- Processed exclusively within the EU — your data never leaves European infrastructure
- Processed in real-time and not stored after the response is generated
- Not used to train AI models
- Transmitted securely over HTTPS
Third-Party Services
- Authentication & cloud storage (Supabase) — EU-hosted. Handles sign-in and, for Pro users with Cloud Sync enabled, stores your synced fitness data.
- AI processing — EU-hosted. Processes meal and fitness data for analysis. No data stored after processing.
- Subscription management — Handles Pro subscription billing (for Pro users).
- Google / Apple — Authentication providers.
- Analytics — EU-hosted, privacy-friendly product analytics. Tracks feature usage to improve the app, keyed to a random account identifier — never your name, email, or health data. No cookies, no session recordings, and we honour Do Not Track.
Your Rights
- Export — You can export all your data at any time from Settings.
- Delete — You can delete your account and all server-side data from Settings. Local data is cleared simultaneously. If you can no longer open the app, see how to delete your account.
- Access — All your data is visible and accessible within the app.
- Portability — You can export all your data as a JSON backup file (delivered as a ZIP).
Data Retention
Local data persists until you delete it or clear your browser data. Server-side data — authentication, usage logs, and, for Pro users with Cloud Sync, your synced fitness data — is retained for the duration of your account. If your Pro subscription lapses, synced data is kept for 60 days and then deleted. When you delete your account, all server-side data, including any synced fitness data, is permanently removed.
One exception, kept to prevent abuse of the free trial: when you delete your account we retain a single anti-abuse marker — a pseudonymous identifier from your sign-in provider — so the same identity cannot repeatedly claim a new 7-day trial by deleting and recreating an account. This marker contains no email, name, or fitness data, and we rely on it only for fraud prevention (a legitimate interest under GDPR).
Children
FitterEater is not intended for children under 16. We do not knowingly collect personal information from children.