S3raty — Privacy Policy

Last updated: October 29, 2026 · Contact: support@s3raty.com

What S3raty does

S3raty is an AI-powered nutrition and fitness app. You photograph meals, scan barcodes or nutrition labels, receive a personalized nutrition plan, and track calories, weight, water, and streaks. On iPhone, you can also connect Apple Health, and on Android Health Connect, to see your steps and activity.

Information we collect

Account data: username, email address, and password (stored securely and hashed by our authentication provider), or your Apple / Google sign-in identity if you choose social login.

Health & fitness inputs you provide: gender, age, height, weight, activity level, goals, and the meals and water you log.

Photos: meal photos, nutrition-label photos, and barcode photos, taken with your camera or chosen from your photo library. Photos are sent to our server solely to analyze the food, label, or barcode and return nutrition information. Photos are processed for the analysis and are not used to train AI models. Photos you choose to post to the Feed, or set as your Feed profile photo, are stored (see The Feed below).

Purchase data: your subscription status (trial, active, expired) and product identifier, managed by our subscription provider. We never see or store your card details — billing is handled entirely by Apple or Google.

Feed: if you use the Feed, your posts, profile photo and Feed activity, and your country (worked out from your phone’s time zone). See “The Feed” below.

Apple Health and your iPhone

Apple Health (iPhone): if you choose to connect Apple Health, S3raty reads your steps, walking and running distance, and active calories burned to show them in the Activity tab, and saves the water you log in S3raty to Apple Health. This information is read and processed only on your iPhone. It is never uploaded to our servers, never shared with third parties, never used for advertising, and never used by our AI features. You can turn this access off at any time in the Health app (your profile picture → Apps → S3raty).

Live Activities and Control Center: if you allow Live Activities, today’s calories and macros appear on your Lock Screen and in the Dynamic Island. They are drawn on your iPhone from data already in the app; nothing extra is collected.

Health Connect and your Android phone

Health Connect (Android): if you choose to connect Health Connect, S3raty reads your steps, distance and active calories burned, including from apps that share with Health Connect such as Fitbit, Samsung Health or Google Fit, to show them in the Activity tab, and saves the water you log in S3raty to Health Connect. This information is read and processed only on your phone: it is never uploaded to our servers, never included in your cloud backup, never sent to our AI provider, and never used for advertising. You can turn it off at any time in Health Connect (App permissions → S3raty).

S3raty’s use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.

How AI processing works

When you scan a meal or label photo, describe a meal, or request a plan, your input is sent through our own server to OpenAI’s API for analysis. The result (calories, macros, score, or plan) is returned to your app and saved to your account so you can see your history. Our API keys and processing run on our server — never inside the app itself.

Third-party services we use

OpenAI — AI analysis of your photos, meal descriptions, and plan inputs.

Supabase — authentication and database hosting for your account and logged data, and storage of Feed photos.

RevenueCat — subscription status management and purchase attribution.

Apple App Store / Google Play — sign-in (if you choose it) and all subscription billing.

Deno Deploy — hosting for our AI proxy server.

ntfy — alerts about Feed reports to our phone. It receives only a short reference number and the report category.

Open Food Facts — public database used to look up scanned barcodes. Only the barcode number is sent.

What we don’t do

We don’t sell your data. We don’t show ads. We don’t use your photos or health data to train AI models. We don’t collect your precise location. We don’t use Apple Health or Health Connect data for advertising, and we never upload it.

Your choices, editing, and deletion

You can edit your profile and plan anytime, sign out, or permanently delete your account and all associated data from within the app (Profile → Delete account). You can delete any Feed post at any time. You can also email support@s3raty.com and we will delete it within 30 days. Subscriptions are billed by Apple or Google and must be cancelled separately in your subscription settings.

Security & retention

Data is transmitted over HTTPS and stored with our providers under industry-standard protections. We keep your data while your account exists; when you delete your account, your data is removed as described above.

The Feed

This section explains what happens to your data when you use the Feed, the part of S3raty where people share their meals, drinks and everyday moments. Everything else in this Privacy Policy still applies.

Meal photos you scan are still used only for the analysis. A photo is stored only when you choose to post it to the Feed or set it as your profile photo.

What the Feed stores

When you use the Feed, we store:

• Your posts: the photo, your caption (up to 200 characters), and for a scanned meal the meal details from the AI result (meal name, items, portions, calories, protein, carbs, fat and S3ra Score) and whether you chose to hide the numbers; for a photo-only post, its title. Also when you posted, and the country it was posted from (see “Your country” below).

• Your public handle, which you choose before your first post, and your profile photo if you add one.

• Your featuring choice for each post, meaning whether S3raty may feature it on our social media.

• Your activity: the posts you like, save and add to your log, the accounts you follow and block, and which posts you have viewed (once per post, to count views).

• Notifications: a list of who liked your posts, added them to their log or followed you, and messages from S3raty about your posts.

• Reports: reports you make (the reason and any note you add), and reports other people make about your posts or your account.

• Agreement and moderation records: when you agreed to the Community rules, the result of the automatic check on each post, and any action we take, such as hiding or removing a post or banning an account.

• Posting attempts: the time and outcome of each attempt to post. We use these only to limit spam and delete them after 7 days.

The Feed uses your existing S3raty account. It does not ask for your name, your contacts or permission to use your location.

Your country

To show posts from people near you first, the app works out your country from your phone’s time zone (or, if that doesn’t name one, your phone’s region setting). It sends that country with each request for the “For You” list, and stores it with each post you make. It is never your exact location, it is never shown to anyone, and the app never asks for location permission.

What is public, and who sees what

Everyone who uses S3raty, including guests, can see:

• your posts: the photo, the caption or title, the meal name and, unless you hid them, the numbers;

• your handle, your profile photo, when you posted, how many people liked each post and how many added its meal to their log;

• how many posts, followers and followed accounts your profile has.

The person who posted sees, in their notifications, the handles of people who liked the post, added it to their log or followed them.

Only you can see: how many people viewed your own posts, the posts you saved, the accounts you blocked, the reports you made, the numbers you hid on your own posts, and your featuring choices.

Never shown to other users: your email address, your account username, your sign-in details and your country. Other users don’t see a list of who liked a post or who follows whom.

Blocking: people you block, and people who block you, cannot see your posts or your profile, and you cannot see theirs.

S3raty’s moderators can see posts (including hidden ones), the reports about them and our moderation records, so that they can review reports.

Outside the app: Feed photos are stored at long web links that cannot be guessed and are not listed publicly. Anyone who has the exact link to a photo can open it. Posts are not published on our website. We share a post on our social media only if you opted in for that post (see “Featuring on Instagram” below).

Your photos

Your post photos and your profile photo are made smaller on your phone, and their location (GPS) and other hidden photo details (EXIF data, such as the camera model and the time it was taken) are removed before they are stored. We store Feed photos with our database provider, Supabase.

Automatic AI check by OpenAI

Before your post appears, our server sends its photo and caption to OpenAI. OpenAI checks them for content that breaks our Community Guidelines, such as nudity, sexual content, violence, hate, self-harm or ads. People and faces are allowed. We use the result to publish or refuse the post. Profile photos are checked the same way.

When you scan a meal, the same OpenAI request that reads your plate also checks the photo for safety. The app keeps a signed note of that result with the meal on your phone. It holds a fingerprint of the photo (a code that cannot be turned back into the image), your account and the time, never the photo itself. If you later post that meal, the note is sent with it, so the photo does not need a second full check.

As with meal scans, OpenAI processes the photo and caption for this check, and they are not used to train AI models. OpenAI may keep them for a limited time to monitor for abuse, as its own policies describe. The app asks for your agreement before your first post, and you can always choose not to post.

How we handle reports

• When you report a post or an account, we store the reason, any note you add and who made the report. We never tell the reported person who reported them.

• When several people report the same post, it is hidden from everyone until we review it.

• We get an alert on our phone through a notification service, ntfy. The alert contains only a short reference number and the report category, never photos, captions, handles or email addresses.

• We review every report within 24 hours. If a post breaks our rules, we remove it and suspend or ban the account that posted it.

How long we keep Feed data, and how to delete it

• Your posts stay until you delete them, we remove them, or you delete your account.

• Deleting a post removes it from the Feed and deletes its photo from our storage, along with its likes, saves, views and the notifications about it. Meals other people already added to their own log stay in their log.

• Deleting your account (Profile → Delete account) deletes all your posts and their photos, your profile photo, your handle, your likes, saves, follows, blocks, views and notifications, and the reports you made, along with the rest of your account data.

• We keep a limited record of reports about you and of our moderation decisions, including posts we removed for breaking the rules, for 12 months, even if you delete your account. We use it to handle appeals, prevent repeat abuse and meet legal duties, and then we delete it.

• Posting attempts are deleted after 7 days.

• Deleted data may stay in our providers’ routine backups for a short time before it is overwritten.

• You can also ask us to delete your data by emailing support@s3raty.com. We do it within 30 days.

No ads, no sale of data

We don’t show ads, in the Feed or anywhere else in S3raty. We don’t sell your data, and we don’t share your Feed activity with advertisers.

Featuring on Instagram

We share a post on S3raty’s social media accounts, such as Instagram @s3raty.ai, only if you turned on the featuring option for that post. The option is off unless you turn it on, and it applies to one post at a time.

If you turn it on, we may share that post’s photo, caption and meal details on those accounts. We never share numbers you chose to hide. We will credit your S3raty handle, never your name or email. Once shared, the post is also covered by Instagram’s own privacy policy.

To withdraw, delete the post or email support@s3raty.com, and we will remove it from our social media accounts within 7 days. We cannot control copies that other people made before then.

Children

The Feed, like the rest of S3raty, is for people aged 13 and over. Photos of children are allowed only from their parent or guardian, fully dressed, and without their name, school or where they live. If we learn that a child under 13 is using the Feed, we delete their posts and their account.

Contact

Questions about the Feed and your privacy: support@s3raty.com

Children

S3raty is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Changes

If we change this policy, we will update this page and the date above. Significant changes will be highlighted in the app.

Contact

Questions or requests: support@s3raty.com

---