Privacy Policy

1. Who we are

Stedyfit provides tools for logging meals, analysing nutrition information, and tracking nutrition goals. Stedyfit is the controller of the personal information described in this policy.

Questions or requests about privacy can be sent to hello@stedyfit.com.

2. Information we collect

• Account information: your name, email address, verification status, and account settings. If you sign in with Google, we receive your name, your email address, and Google's identifier for your account; we do not receive your password or any access to your Google data.
• Nutrition and wellbeing information: meals, ingredients, serving sizes, calories, macronutrients, meal notes, nutrition targets, weight, height, birth year, and body measurements you choose to provide.
• Images and other content: meal or nutrition-label photographs, recipe links, saved meals, and other information you submit for analysis.
• Technical information: IP address, browser and device information, timestamps, security logs, service events, and diagnostic information.
• Communications: messages and requests you send to us, including account-support and privacy requests.

Providing optional wellbeing information is your choice, although some features may not work without the information needed to calculate or display them.

3. How and why we use information

• create and secure your account, sign you in with an emailed code or with Google, as you choose;
• store your food diary, saved meals, preferences, and nutrition goals;
• analyse labels, meal descriptions, product information, and recipes to estimate nutrition;
• operate, troubleshoot, secure, and improve Stedyfit;
• send service messages and respond to support or rights requests;
• measure product performance where analytics is enabled; and
• comply with law and protect our users, service, and legal rights.

We rely on performance of our contract to provide the service, our legitimate interests in operating and securing Stedyfit, consent where the law requires it, and compliance with legal obligations. Where information you provide constitutes health data, we rely on your explicit consent. You may withdraw that consent, but doing so may require us to stop processing that information or close affected features.

Stedyfit does not sell your personal information.

4. Automated analysis

Stedyfit uses automated tools, including artificial intelligence, to extract and estimate nutrition information. These tools can make mistakes. Their output is informational and is not used to make legal or similarly significant decisions about you. You should review results before relying on them.

5. Who receives information

We share information only as needed to operate Stedyfit, including with providers that support:

• hosting, databases, and private image storage;
• nutrition and image analysis, including Google Gemini;
• background processing through Inngest;
• transactional email through Resend;
• sign-in through Google, if you choose to use it;
• product analytics through PostHog, where enabled;
• error monitoring through Sentry, where enabled; and
• recipe-page retrieval from the website you link to.

If you ask us to analyse a recipe URL, information needed to retrieve that page is sent to the relevant website. We may also disclose information when required by law, to protect rights and safety, or as part of a business reorganisation. Our providers may process information outside the United Kingdom. Where required, we use recognised safeguards for international transfers.

6. Cookies and similar technologies

Stedyfit may use the following browser storage:

• Essential authentication: cookies that keep you signed in and protect access to your account.
• Preferences: a cookie that remembers whether your sidebar is expanded.
• Analytics: if enabled, PostHog may use cookies or local storage to recognise a browser and understand use of the service.

Essential technologies are required to provide features you request. We will request consent before using non-essential analytics technologies where required by law. You can also control browser storage through your browser settings, although blocking essential cookies may prevent Stedyfit from working.

7. How long we keep information

We retain account information and user content while your account is active and for only as long afterwards as reasonably needed to provide the service, resolve disputes, maintain security, and meet legal obligations. Retention periods vary by record type. When information is no longer needed, we delete or anonymise it, subject to limited backup and legal-retention requirements.

8. Security

We use reasonable technical and organisational measures designed to protect personal information. No online service is completely secure, so we cannot guarantee absolute security. Keep access to your email account secure and contact us if you believe your account has been compromised.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain processing or withdraw consent. To exercise a right, email hello@stedyfit.com. We may need to verify your identity before completing a request.

If you are in the UK, you may complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

10. Children

Stedyfit is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information to us, please contact us.

11. Changes to this policy

We may update this policy as Stedyfit changes. We will post the revised version here, update its effective date, and provide additional notice where a change materially affects your rights or how we use information.