Privacy

What stays on your device

Your questionnaire answers are held in the current page session to build your plan. The calorie calculator keeps your meal entries in the current page session. This phase does not create accounts or save answers, photos, or meals to a database, account, or browser local storage.

Optional photo

A photo is optional. Before an AI request, the browser resizes the chosen image to a maximum dimension of 900 pixels and re-encodes it as JPEG, which removes embedded EXIF metadata. The browser does not detect faces. You must review the preview and confirm no face is visible before consenting.

When you request an AI plan

If a server-side Cloudflare Worker is connected, your questionnaire answers and optional resized photo are sent to that Worker and then to the configured AI provider to generate a plan. The Worker should accept requests only from the production website origin, enforce request and photo size limits, validate input and output, and apply rate limiting before public launch. Never put an AI provider API key in browser code.

The provider may process the request under its own terms and retention practices. Those details must be reviewed and disclosed before the AI connection is enabled for public use. A local preview plan uses your selected equipment and answers in the browser and does not use the photo.

Coach chat and food searches

When chat is not connected, messages stay in the current page session and are not sent to a service. After a server-side AI connection is enabled, chat messages are sent through the Cloudflare Worker to the configured AI provider; they are not saved to an account or database by this application. The calorie search sends the food query to Open Food Facts from your browser. If USDA search is enabled through the Worker, the query is sent to USDA FoodData Central. Meal entries remain in the current page session. Food search queries do not include your questionnaire answers or photo.

Storage and logs

Phase one is designed not to store photos or sensitive questionnaire answers in application logs, local storage, or a database. Operational hosting logs may be controlled by the website and AI providers; the final implementation must be reviewed to verify what request metadata is retained and to disable payload logging.

Your choices

You can skip the photo, stop before sending an AI request, remove the selected preview, or restart the questionnaire. Once information has been sent to an AI provider, deletion and retention depend on the provider and the final service configuration.

Contact and updates

Before launch, replace this draft with reviewed details for the operating entity, contact method, applicable jurisdiction, provider configuration, and any applicable privacy rights and retention terms.