Dishsum is a calorie and nutrition tracker built to keep your diary on your own device. There is no account to create, no advertising in the App, and we do not sell your personal data. This page says exactly what leaves your phone, when, and where it goes.
| Data | Where it goes | Why |
|---|---|---|
| Your diary and profile, including readings you type into Your numbers such as blood pressure, glucose, cholesterol and body measurements (food entries, calories, macros, weight, water, targets, age, sex, height, activity level, goal) | Stays in the App’s database on your device. Never included in analytics or crash reports. | To run the App. Calorie and weight information can be sensitive; that is why it is kept on the device. |
| AI estimate requests — the meal description or photo you submit, an optional hint, your language, and (when you refine an estimate) the items and answers you edit | Our gateway server, then an AI provider (OpenAI or Anthropic, depending on how we configure the service) to generate the estimate. Photos are reduced in size first. | To produce the estimate you asked for. We do not keep the text or photo after the request; the AI provider processes it under its own API terms and may retain it for a limited period for safety and abuse monitoring. |
| Service counters — a random device identifier made by the App, request counts, an estimate of the cost of each request, and your IP address as seen by our network provider | Our gateway server (the IP address is used only to apply rate limits and is not stored with your requests). | To enforce fair-use limits and spending caps so the service stays sustainable, and to prevent abuse. |
| Barcode lookups — the barcode number you scan | Open Food Facts (open database). They can see the barcode and your IP address. | To find the product’s nutrition information. |
| Free trial record — when your trial started | On your device (secure storage) and, as a one-way hash of your device identifier plus a timestamp, on our server. | To give one free trial per device and stop it being restarted. It records that a trial was used, not what you logged, so it is kept when you delete your data. |
| Subscription status — an anonymous app user ID and the purchase receipt | Apple or Google (they take payment) and RevenueCat, which tells the App whether Pro is active. | To unlock Pro and restore purchases. We never see your payment card. |
| Device and app integrity checks (when switched on) | Google Play Integrity (Android) or Apple App Attest / DeviceCheck (iPhone), verified by our server. | To make sure requests come from the genuine App on a genuine device, protecting the AI service from automated abuse. |
| Crash reports — on by default; turn off in Me → Privacy | Our own self-hosted error-tracking server. Reports contain the error type, a cleaned message, the app’s code location, the app version, platform and OS version. They contain no account, device ID, diary entry, weight or photo, and anything that looks like an e-mail, number or token is removed before sending. As with any internet request, the receiving server technically sees the connection’s IP address. | To find and fix bugs. |
| Usage analytics — off until you opt in (first-run prompt or Me → Privacy) | Google Analytics for Firebase. Only a fixed list of feature events (for example “meal added by quick add”, “AI estimate saved or discarded”, “paywall viewed”) with simple categories — never food names, weights, notes or photos. | To see which features are used so we can improve them. |
| Ad measurement and install attribution (how people find Dishsum) — off until you opt in (Me → Privacy → Ad measurement) | Tenjin, our attribution provider. Until you turn Ad measurement on, the App sends nothing to Tenjin — not even that it was installed. If you turn it on, the App starts Tenjin, which receives a session signal: app version, device model and OS, language, approximate region from the IP address, the install source or campaign, and a few milestones (for example “onboarding finished”, “trial started”). On iPhone it uses Apple’s privacy-preserving campaign reports (SKAdNetwork) and the App does not use the advertising identifier or show a tracking prompt. On Android it may use the Google advertising ID according to your device’s own ad settings. Turning the switch off again stops sending and opts the device out. Subscription events are linked to Tenjin only through the Tenjin installation id, which exists only after you turn Ad measurement on. | We advertise Dishsum on ad networks (for example AppLovin). If you agree, attribution tells us which campaign led to an install so we do not waste money — the App itself shows no ads. |
| Health and fitness data you allow — from Apple Health or Health Connect: steps, active energy, weight, workouts, blood pressure, blood glucose, body fat, resting heart rate and, on iPhone, waist circumference (read-only; you choose each type in the system permission screen) | Read on your device and kept in the App’s database on your device. Not sent to our servers, not included in analytics, crash reports or ad measurement, and not shared with anyone. | To show your activity, weight and measurements, and to estimate your daily energy needs on your device. Blood pressure, glucose, body fat, waist and heart rate are only displayed to you; they are never used in calorie calculations, never interpreted, and Dishsum does not diagnose or give medical advice. You can revoke access at any time in the Apple Health or Health Connect settings. |
| Fitness services you connect directly (for example Withings; others are added only after the service approves Dishsum) — a sign-in token and the data you ask the App to fetch (weight, body measurements, activity energy, workouts) | You sign in on the service’s own page. Our gateway server keeps only the encrypted sign-in token (and a hash of your device identifier) so the App can fetch your data; the data itself is relayed through our gateway to your phone in the same request: the gateway code does not write it to disk, to logs, or to analytics or advertising (it passes through Cloudflare, our network provider, in transit like all traffic to our servers). Disconnect in the App deletes the token at once, “Delete everything” in the App deletes it too, and a token nobody has used for 90 days is deleted automatically. After disconnecting, also remove Dishsum in the service’s own account settings to revoke access there. | To bring your own measurements into the App. Data from a service is used only to show you your own numbers and to estimate your own energy needs on your device. It is not sold, not used for advertising or profiling, not combined with other people’s data, and not used to train AI models. |
| Reports you send to support — your message, an optional reply e-mail, the category, app and OS version, platform, and a pseudonymous reference | Our help desk (Chatwoot). Nothing from your diary is attached. Like every request to our server, the report carries the App’s random device identifier; the server uses it only for rate limits and to compute the pseudonymous reference, and does not pass it to the help desk. | To answer you. You can ask us to delete a conversation. |
Apple and Google (app stores, payments and, where enabled, device integrity), RevenueCat (subscription status), OpenAI and/or Anthropic (AI estimates), Open Food Facts (barcode data), the fitness services you choose to connect (they hold your account and show you their own consent screen), Tenjin and the ad networks we advertise on (attribution), Google Analytics for Firebase (only if you opt in), Cloudflare (our network and hosting provider, which sees traffic to our servers) and our own help-desk and error-tracking servers. Each acts under its own terms and privacy policy.
Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA or Canadian law) you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, and to withdraw consent. Most of your data is on your device, where you already hold these controls. For anything we hold, contact support@smartharmonyai.com; we reply within 30 days. Where the GDPR applies, our legal bases are performance of the service you asked for (AI estimates, subscriptions), our legitimate interests (security, fair-use limits, bug fixing, measuring our own advertising) and your consent (usage analytics, ad measurement). You may complain to your local data-protection authority.
Dishsum is not directed to children under 13 (or the higher minimum age in your country), and we do not knowingly collect their data. Calorie tracking is not suitable for children or for anyone with, or at risk of, an eating disorder — please talk to a health professional first.
Requests to our servers use HTTPS. The diary is stored on your device and is protected by your device’s own security. Our providers may process data in the United States and other countries; where required we rely on appropriate safeguards.
If our practices change we will update this page and its effective date, and tell you in the App for material changes.
SmartHarmony AI LLC — privacy questions and requests: support@smartharmonyai.com.