Privacy Policy
Last updated: 1 November 2026
- Your profile, workouts, food log, weight and progress photos are stored only on your iPhone. We don’t have an account system and we can’t see this data.
- When you scan a meal, the photo is sent to Google’s Gemini service to estimate its nutrition. We don’t store the photo.
- When you scan a barcode, only the barcode number is sent to Open Food Facts.
- Subscriptions are handled by Apple and RevenueCat.
- We collect anonymous usage statistics, like which onboarding screens people see, to improve the app. They aren’t linked to you.
- There are no ads and no tracking across apps or websites.
1. Who we are
Vise is made by Axel Olofsson Turner, an individual developer based in the Netherlands (“we”, “us”). We are the controller of the personal data described here, as meant in the EU General Data Protection Regulation (GDPR).
Questions or requests about your data: support@getvise.app.
2. Data that stays on your device
Everything you enter in Vise is stored on your iPhone, in the app’s own storage:
- What you answer during onboarding, such as your name, date of birth, gender, height, weight, goals, experience and workout preferences.
- Your workout plan, workouts and logged sets.
- Your food log, water and nutrition goals.
- Your weight history and progress photos.
This data is not sent to us or anyone else. It is included in your iPhone’s own backups (for example iCloud Backup) if you have those turned on, under Apple’s privacy policy. Deleting the app deletes this data from your iPhone.
Some of this, like your weight, can say something about your health. Because it never leaves your device through Vise, we don’t process it.
3. Data that leaves your device
Meal photo scans
When you photograph a meal or a nutrition label to log it, the photo is sent over an encrypted connection to our server, which runs on Cloudflare. The server passes it to Google’s Gemini API, which estimates the foods and their nutrition, and returns the result to the app. The photo is not stored on our server.
Google processes the photo for us as a service provider. Under Google’s terms for the paid Gemini API, Google does not use it to improve its products, and may keep it for a limited time to detect abuse. Please don’t photograph people or anything else you wouldn’t want to share.
Preventing abuse of the scan service
Each scan comes with a random identifier created when the app is installed (it’s not linked to your name or Apple Account) and a one-time token from Apple’s DeviceCheck service that confirms the request comes from a genuine copy of the app on a real iPhone. Our server also sees your IP address.
To enforce a fair daily scan limit, our server counts scans per install identifier and per IP address. These counts are deleted automatically at the end of each day. Cloudflare, which hosts our server, may keep short-lived technical logs for security.
Barcode lookups
When you scan a barcode, the barcode number is sent to Open Food Facts, a free, open food database, to look up the product. No other information about you is sent. Results are cached on your device.
Subscriptions
Payments are handled entirely by Apple. We never see your payment details. To know whether your subscription is active, the app uses RevenueCat, a subscription service. RevenueCat receives a random app user identifier, your purchase and subscription history, and basic technical information such as your device type, iOS version, app version, country and IP address. We can see your purchase history in RevenueCat, but not your name or Apple Account.
Usage statistics
To understand how people use Vise, for example on which onboarding screen people stop or how many start a free trial, the app sends anonymous usage events to PostHog, an analytics service, on its servers in the European Union. An event says what happened, such as “onboarding screen viewed”, “paywall shown” or “trial started”, with the plan chosen where relevant. It also includes technical information such as the app version, device model, iOS version, language and a random identifier created by the app.
Events never include your name, your onboarding answers, your body measurements, your food, workouts or photos. We don’t create a profile of you, record your screen, or combine this data with other sources. PostHog receives your IP address as part of the connection; we’ve set it not to store it. Usage statistics are only sent by the version of the app in the App Store.
Notifications
Workout and trial reminders are scheduled on your iPhone. Nothing is sent to a server for this.
4. Why we use this data, and the legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Estimating a meal’s nutrition when you ask | Meal photo | Providing the service you requested (Art. 6(1)(b)) |
| Looking up a product by barcode | Barcode number | Providing the service you requested (Art. 6(1)(b)) |
| Providing and checking your subscription | App user identifier, purchase history, technical information | Performing our contract with you (Art. 6(1)(b)) |
| Understanding how the app is used, to improve it | Anonymous usage events, random identifier, technical information | Our legitimate interest in improving Vise (Art. 6(1)(f)) |
| Preventing abuse and keeping costs under control | Install identifier, DeviceCheck token, IP address | Our legitimate interest in keeping the service available and secure (Art. 6(1)(f)) |
We don’t sell your data, use it for advertising, or use it to track you across other apps and websites.
5. Service providers
- Cloudflare, Inc. hosts our scan server and this website.
- Google LLC (Gemini API) estimates nutrition from meal photos.
- RevenueCat, Inc. manages subscription status.
- PostHog, Inc. processes anonymous usage statistics, on servers in the European Union.
- Apple Inc. handles payments, DeviceCheck and app distribution.
- Open Food Facts provides product information for barcodes.
Some of these providers are based in the United States. Where data is transferred outside the European Economic Area, this happens under the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
6. How long data is kept
- Data on your device: until you delete it in the app or delete the app.
- Meal photos: not stored by us. Google may keep them for a limited time for abuse monitoring.
- Scan counts per install identifier and IP address: deleted at the end of each day.
- Usage statistics: at most two years.
- Subscription records at RevenueCat: for as long as needed to provide your subscription and meet legal obligations, such as tax and accounting rules.
7. Your rights
Under the GDPR you have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. This includes objecting to the usage statistics. Most of your data is only on your iPhone, so you can view, change or delete it there yourself. For anything else, such as your subscription records, email support@getvise.app. Because we don’t know who you are, we may ask for something that lets us find your records, such as the order ID from Apple’s purchase receipt email.
You also have the right to complain to a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.
8. Children
Vise is not meant for children under 16, and we don’t knowingly process data of children under 16.
9. Security
All data sent by the app travels over encrypted connections. Data on your device is protected by your iPhone’s security, such as its passcode and encryption.
10. Changes to this policy
If we change how we handle data, we’ll update this page and the date at the top.
11. Contact
Axel Olofsson Turner, the Netherlands
support@getvise.app