Privacy Policy

This policy covers the website at deepeats.app (the "site") and the DeepEats iPhone app (the "app"), which is currently in beta. "DeepEats", "we" and "us" mean the team behind DeepEats.

1. The website

Waitlist

If you join the waitlist, we collect your email address, which form you used, the page you were on, the referring site and any campaign tags in the link. It's stored in our own database, hosted by Cloudflare. We use it to invite you to the beta and send occasional updates about DeepEats, including a welcome email when you sign up. You can ask us to remove it at any time.

Usage events

When you visit, the site records simple events such as page views and button clicks, along with the page, the referring site, any campaign tags in the link (like utm_source), and a random session ID. The session ID and a short event log are kept in your browser's local storage and aren't sent to us. We don't use advertising cookies or cross-site tracking.

The question box

If you type a question into the FAQ question box, the text is sent to our server and to an AI provider (Anthropic) to generate an answer, and isn't stored with anything that identifies you. Please don't include personal or health details in your question. Your IP address is used briefly to limit how many questions can be sent, and isn't stored with the question.

Fonts and hosting

The site loads fonts from Google Fonts, so Google receives your IP address and browser details when the page loads. Our hosting provider keeps standard server logs, such as IP address and request time, for security and reliability.

2. The app

What stays on your iPhone

Your meals, the sleep data the app reads from Oura, and the nightly analysis are stored on your iPhone. The app keeps up to 120 nights. There's no DeepEats cloud account, and we don't keep a copy of this data on our servers.

Oura

When you connect Oura, you sign in through Oura's official sign-in and approve access. The app then reads your sleep data, including total sleep, sleep stages, efficiency, time to fall asleep, HRV, heart rate and bedtimes, directly from Oura to your phone. Our server helps complete the sign-in with Oura but doesn't store your tokens; they're kept in the iPhone's secure storage. You can disconnect Oura at any time in Profile. Oura's handling of your data is covered by Oura's own privacy policy.

Meal recognition

When you log a meal with a photo or by typing its name, the photo (resized) or text is sent through our server to OpenAI to identify the food and estimate nutrients such as calories, protein, carbs, fat, fiber and sugar. Our server passes it along and returns the estimate to you; it doesn't store your photos or meals. If you search for a food, your search terms go through our server to the USDA FoodData Central database.

Reminders

If you turn on the daily reminder, it's scheduled on your phone. We don't send push notifications from a server.

Export and deletion

You can export your meals, sleep data and nightly analysis as a file from Profile. You can delete individual meals, disconnect Oura, and remove all app data by deleting the app. A one-tap "delete all my data" option is being finished during the beta.

3. Who we share data with

We never sell your data or share it for advertising. We only use service providers that help us run DeepEats:

• Cloudflare to host the site and store waitlist emails.
• Resend to send waitlist emails.
• Google Fonts to serve fonts.
• Anthropic to answer questions typed into the site's question box.
• OpenAI to identify meals from photos and text in the app.
• USDA FoodData Central for food search in the app.
• Our hosting provider to run the app's server.

We may also disclose information if required by law or to protect the safety of our users.

4. Health information

Meals and sleep data can be sensitive. DeepEats uses them only to show you your own patterns. DeepEats is not a medical service and doesn't diagnose or treat any condition.

5. Your choices and rights

You can ask us to access, correct or delete the waitlist email and site data we hold about you by emailing privacy@deepeats.app. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, and you can contact us to use them. App data lives on your phone, so you control it directly there.

6. Retention

We keep waitlist emails until the beta invitations and launch updates are done, or until you ask us to remove them. Usage events are kept for up to 24 months.

7. Children

DeepEats isn't intended for anyone under 18, and we don't knowingly collect information from children.

8. Security

We use reasonable measures to protect data, including secure storage for Oura access tokens and encrypted connections. No system is perfectly secure.

9. Changes

If we change this policy, we'll update the date above, and for significant changes we'll let waitlist members and app users know.

10. Contact

Questions about privacy? Email privacy@deepeats.app.

Oura is a trademark of Oura Health Oy. DeepEats is not affiliated with Oura.