Biteva

AI-powered calorie tracking from photos. Privacy Policy and Terms of Service.

View the Project on GitHub Wowjet/calorie-ai-legal

Privacy Policy

Effective date: June 21, 2026
Last updated: June 21, 2026

This Privacy Policy describes how Biteva (“we”, “our”, “us”) collects, uses, and shares information about you when you use the Biteva mobile application (the “Service”).

By using Biteva, you agree to the collection and use of information in accordance with this policy.


1. Information we collect

Account information

When you create an account, we collect:

Profile information

To personalize your calorie targets and recommendations, we ask you to provide:

Meal data

When you log meals, we collect:

AI coach conversations

Biteva includes an optional in-app AI coach you can chat with. When you use it:

See “How we share your information” below for the third parties involved in generating coach replies.

Device and usage data

To improve the Service and diagnose issues, we collect:

We do NOT collect


2. How we use your information

We use your information to:

Service improvement

We may use anonymized, aggregated meal data (with no personal identifiers) to improve the accuracy of our AI analysis. Individual photos are not used as training data for any third party AI model, and you can request that your data be excluded from this use by contacting us.


3. How we share your information

We share your information with the following third parties strictly as necessary to operate the Service:

Service Purpose Data shared
Supabase (supabase.com) Hosting, database, authentication, file storage Account, profile, meal data, photos
OpenAI (openai.com) AI analysis of meals (photo recognition and text nutrition lookup) Meal photos and meal-related text (a food name, or a caption you add to a photo); no profile or account info attached
OpenRouter (openrouter.ai) AI coach (chat) — routing your request to a language-model inference provider Coach message text and a numeric context summary (calories, meal names, recent weight, targets); no account info attached
DeepInfra, Fireworks AI, Together AI (via OpenRouter) Running the AI coach language model (inference) on US-based infrastructure Same coach request data as the OpenRouter row above
Sentry (sentry.io) Crash and error reporting Crash logs, device type, app version; no meal or profile content and no direct personal data such as your email or name; a hashed identifier is attached for debugging
Apple (apple.com) Sign in with Apple authentication (optional) Apple account identifier only

How the AI coach uses these providers

When you send a message to the AI coach, your request is routed through OpenRouter to one of a fixed allowlist of US-based inference providers — DeepInfra, Fireworks AI, or Together AI — which run the open-weights DeepSeek V4 language model. The request is not sent to DeepSeek’s own servers.

We do NOT sell your personal information. We do NOT share your information with advertisers. We do NOT use your meal photos or coach messages to train any third party AI model.

We may disclose your information if required by law, court order, or to protect the rights, safety, or property of Biteva, our users, or others.


4. Where your data is stored

Your data is stored on servers operated by Supabase (which uses Amazon Web Services infrastructure). Data is primarily stored in the United States.

The third parties that perform AI processing for us are also located in the United States: OpenAI (meal photo and text analysis) and OpenRouter together with its allowlisted inference providers DeepInfra, Fireworks AI, and Together AI (AI coach). When you use these features, the relevant data described above is transferred to and processed in the United States.

If you are located outside the United States, your data will be transferred to and processed in the United States, where data protection laws may differ from those in your country.


5. How we protect your information

We use industry-standard security measures to protect your information:

No system is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security.


6. Your rights and choices

Account deletion

You can delete your account at any time from within the app:
Settings → Account → Delete Account

When you delete your account, we delete all your personal information (account, profile, meals, photos) within 30 days. Anonymized aggregated data may be retained for service improvement.

Access and correction

You can view and edit your profile information at any time in the app under Settings → Profile. To request a copy of all data we hold about you, contact us at the email below.

Opt out of analytics

We do not collect usage analytics, so there is nothing to opt out of.

California (CCPA) and other US state privacy rights

If you are a California resident (or resident of a state with similar privacy laws), you have the right to:

To exercise these rights, contact us at the email below.

Apple-specific rights

If you signed in with Apple, you can revoke Apple Sign-In access at any time via your Apple ID settings on iOS. This will also trigger deletion of your account on our side via Apple’s required server-to-server notification.


7. Data retention


8. Children

Biteva is not intended for use by children under 13 years of age (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.


9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will:

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.


10. Contact

If you have questions about this Privacy Policy or your data, contact us at:

Email: supai_cal@outlook.com

For privacy-specific inquiries, you can also use the same address with the subject line “Privacy Request”.


This policy is provided in English and applies globally to all users of Biteva.