1. Information we collect
Account information. When you create an account we collect your email address and a securely hashed password, or — if you choose Sign in with Apple or Continue with Google — the name, email address, and (for Google) profile picture that the provider shares with us. Apple may give you the option to hide your real email behind a private relay address. Authentication is handled by our backend provider, Supabase.
Profile picture (optional). You can upload a profile picture in the app. It is stored with our backend provider (Supabase Storage) at a link that is technically reachable by anyone who has the exact URL; we only show it inside your app. You can replace it at any time, and it is permanently deleted when you delete your account.
Profile and health information you provide. To build your personalized plan, you may enter details such as age, sex, height, weight, activity level, and goal, along with the calorie and macro targets calculated from them.
Food and nutrition logs. We store the meals you log, including food names, calories, macronutrients, meal type, and the time of logging.
Meal reminders. If you turn on reminders, your reminder times are stored on your device and reminders are scheduled locally. Reminder settings never leave your phone.
Barcode scans and food searches. When you scan a product barcode or search the food database, the barcode number or search text is sent to Open Food Facts to retrieve nutrition information. We do not send your identity to Open Food Facts.
Meal photo scans. If you use photo scanning, the meal photo you choose or capture is sent through our Supabase Edge Function to OpenAI so the app can estimate calories and macronutrients. We use the photo only for that analysis request and do not store the photo in your Riette account or meal history. The saved meal contains only the nutrition estimate you review and choose to save.
Purchase information. When you subscribe, the purchase is processed by Apple and managed through RevenueCat. We receive subscription status and a purchase identifier. We never receive or store your full credit card or payment details.
Limited technical data. Our service providers may process basic technical information, such as app version, device type, and a randomly generated identifier, needed to deliver and secure the service.
We do not collect contacts, precise location, or microphone data, and the app does not include third-party advertising trackers.
2. How we use your information
- To create and secure your account.
- To calculate nutrition targets and show progress, history, and insights.
- To provide barcode and food database lookups.
- To estimate nutrition from meal photos when you choose to use photo scanning.
- To process and restore subscriptions and unlock premium features.
- To maintain, troubleshoot, and improve the app.
- To comply with legal obligations.
3. Service providers
We share data only with processors needed to run the app:
- Supabase — authentication, database, and profile picture storage.
- RevenueCat — subscription management.
- Apple — App Store distribution, payment processing, and Sign in with Apple.
- Google — optional Google sign-in.
- Open Food Facts — barcode and food nutrition lookups.
- OpenAI — meal photo nutrition estimates.
We do not sell personal information or share it for cross-context behavioral advertising.
4. Data retention and deletion
We keep your data while your account is active. You can delete your account at any time from Profile → Delete account. Deleting your account permanently removes your profile, food logs, and uploaded profile picture from our systems. Your subscription is managed by Apple; to stop billing, cancel it in Apple Settings → Subscriptions (deleting the app or account does not cancel an Apple subscription).
You may also email support@riette.xyz to request access to or deletion of your data.
5. Security
We use industry-standard measures, including encrypted connections and database access controls, to protect information. No method of transmission or storage is 100% secure, but we work to protect your data.
6. Children
Riette is not directed to children under 13, or the minimum age required in your country. We do not knowingly collect data from children.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete personal data, and to object to or restrict certain processing. Email support@riette.xyz to exercise those rights.
8. Changes
We may update this policy from time to time and will revise the last updated date above.
9. Contact
Email: support@riette.xyz