Privacy Policy

Last updated: July 3, 2026

Use It Up ("the app", "we") helps you track the food in your kitchen, reduce waste, and log what you eat. This policy explains what we collect and why. We do not sell your personal data.

What we collect

• Account info — if you create an account, your email address and (for Sign in with Apple/Google) your name. Authentication is handled by Supabase.
• Your kitchen & preferences — the food items you add, your survey answers, and meals you log. If you’re signed in, this is stored in our backend (Supabase) so it can sync across your devices. As a guest, it stays only on your device.
• Photos you scan — when you scan groceries, a fridge, or a receipt, the photo is sent to our AI provider (Anthropic) through our server to identify the food. Photos are used only to return that result and are not stored by us.
• Health data — if you enable it, the app writes the calories and macros of food you log to Apple Health. We do not read or upload your other Health data, and Health data is never used for advertising.
• WHOOP data (optional) — if you choose to connect a WHOOP account, we access your recovery, strain, and sleep scores and related fitness metrics (which may include resting heart rate, heart-rate variability, respiratory rate, blood oxygen, skin temperature, calories burned, and recent workouts) to personalize your nutrition. Connecting WHOOP is optional and off unless you turn it on.

How we use it

To provide the app’s features: identifying food from photos, syncing your kitchen, suggesting recipes, sending expiry reminders, and managing your subscription. Subscriptions are processed by Apple — we never see your payment details.

Who we share it with

Only the service providers needed to run the app: Supabase (accounts and data storage), Cloudflare (our server infrastructure), Anthropic (AI photo analysis), Pexels (food photo search — only the food's name is sent, never your personal data), and Apple (sign-in, Health, and payments). If you connect it, we also read fitness data from WHOOP (see below). They process data on our behalf and are bound by their own privacy terms. We do not sell data or share it with advertisers.

WHOOP integration

Connecting WHOOP is optional. When you connect, you sign in through WHOOP’s own secure authorization screen, and the resulting access is held only on our server (Cloudflare) — your WHOOP login and access tokens never touch your phone and are never shared with anyone else. The app itself only holds a random session identifier. We use the recovery, strain, sleep, and related metrics listed above solely to tailor recipes, refuel targets, and “body signal” insights inside the app. We do not sell this data, use it for advertising, or write it to Apple Health. You can disconnect WHOOP at any time from the app, which deletes the stored authorization; any stored tokens also expire automatically. Your data held by WHOOP is governed by WHOOP’s own privacy policy.

Deleting your data

You can delete your account and its associated data at any time from Profile → Delete account in the app. This removes your account and the data stored for it on our backend. You can also clear your on-device kitchen from Settings.

Data retention

We keep your account data until you delete your account. Scan photos are processed transiently and not retained by us.

Children

Use It Up is not directed to children under 13 and we do not knowingly collect their data.

Contact

Questions? Email michaeljoseph522@icloud.com.