Privacy policy

Who is responsible

Wholeday is made by Orbylabs, operated by Maksym Bohochunas, sole proprietor, Ukraine. Contact for privacy questions: privacy@orbylabs.com.

What stays on your phone

The following never leaves your device unless you export it yourself:

• your food log, favourites, saved dishes and meal plans;
• your profile (age, sex, height, weight, goal) and your targets;
• body measurements and progress photos;
• data read from or written to Health Connect;
• week planning and suggested adjustments, which are calculated on the device.

What we receive when you search for food

When you log food by text, voice or photo, the app sends our server:

• the text you typed or dictated, or the photo you took;
• the language of the app, the country set in the app, and whether you cook with iodised salt, which change the answer;
• a random installation ID created by the app on first launch, and the app version.

The installation ID

The installation ID is a random number. It is not your name, email, phone number or advertising ID, and it is not linked to your Google account. It lets us apply the limits of the free and paid plans to one installation. Uninstalling the app deletes it, and a new installation gets a new ID.

Who processes your searches

To understand a search, our server sends its text or photo to OpenAI, which interprets the meal and estimates portions. OpenAI processes it as our service provider under its API terms. The matched values come from our own nutrition database.

When you scan a barcode, the app looks up the product directly in Open Food Facts, which receives the barcode and your IP address.

Voice input uses your phone's speech recognition service (for example Google), under that provider's privacy policy.

Nutrition labels are read on your phone.

What we keep and for how long

• Search records: the text of each search, the foods found and the installation ID, kept for 14 days to investigate wrong answers, then deleted automatically.
• Photos: not stored. A photo is used to answer your search and then discarded. The only exception is a hidden tester mode used by our team, which keeps photos for 14 days.
• Usage records: the installation ID, its plan, the number of requests per day and their processing cost, used to apply plan limits and protect the service from abuse.
• Food names we could not find: kept without any ID, so we know which foods to add to the database.

Error reports

If “Send error reports” is on in Settings (it is on by default), crash details, the app version, the device model and the installation ID are sent to Bugsnag (SmartBear) so we can fix bugs. Your food log and health data are never included. You can turn this off at any time.

Health Connect

If you connect Health Connect, Wholeday reads steps, workouts, active calories, weight, body fat and the other types you allow, and can write your meals as nutrition data. This happens on your phone; Health Connect data is not sent to us. Wholeday's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

Exports

An export file is saved where you choose, on the phone or in your Google Drive. We do not receive it.

Why we may use your data

We process search data to provide the service you ask for, and usage and error data for our legitimate interest in keeping the service working, fair and secure. We do not sell your data, show ads or build advertising profiles.

Transfers outside your country

OpenAI and Bugsnag may process data in the United States. Where the law requires it, these transfers rely on the providers' standard contractual safeguards.

Your rights

You can ask for access to, correction or deletion of your data, object to its use, and complain to your data protection authority. Write to privacy@orbylabs.com. See the data deletion page for how deletion works.

Children

Wholeday is not intended for children under 16.

Changes

If this policy changes, we will update this page and the date below.