Privacy
Last updated 24 September 2026
Short version: your answers are yours, nothing is sold, there is no advertising pixel anywhere in this product, and you can take everything out or erase it at any time.
Awaiting legal review. This document accurately describes how the product works today, and it was written by the people who built it rather than by a lawyer. It has not yet been reviewed by counsel and must be before Food Feel launches commercially. Consumer health privacy law reaches well beyond HIPAA, and several U.S. states regulate this category specifically.
What we hold
- Your Food Feel answers. The items you rated, how difficult each felt, the experience statements you selected, where and when you felt things, and anything you typed in your own words. Without an account these never leave your browser. With an account they are stored against your account and nobody else's.
- Your meal logs. The same, for meals you log.
- Your meal photos, if you add any. Up to 3 per meal. They are shrunk on your phone before upload, and the hidden details a camera adds (like location) are removed. They are stored privately, never public, and never used for analytics or ads.
- Your email address. Only if you create an account, ask for a guide, ask for your results by email, or join the Plus list. It is how you sign in and how we send what you asked for. If you sign in with Google or Apple, we also hold your name if you chose to share it.
- De-identified product analytics. Which public pages and screens got used, how far people get, which lessons get opened, and your Yes or No if you answer “Was this helpful?”. Counts and enumerated values only. No free text ever enters this, so nothing you type can appear in it.
Signing in with Google or Apple
You sign in with Google or Apple. The account is the same either way. If you cannot use either, contact us and we will help you sign in.
- What we receive from them: your email address, and your name if you choose to share it. Nothing else. We do not get your contacts, your calendar or anything else in that account.
- What we send them: nothing about your health. Google or Apple will know you signed in to Food Feel, because they handled the sign-in. They never see your answers, your profile or your meal logs.
- Apple lets you hide your email. If you do, Apple gives us a private address that forwards to you, and that is the only address we ever see.
Using Food Feel without an account
The Food Feel Profile works with no account and no email address. Your answers are kept in your own browser’s storage while you work, and your finished result is rendered from that storage. We never receive it. Clearing your browser data removes it, and so does using a private window and closing it.
An anonymous result only reaches our servers if you choose to create an account and save it, and that happens after you have already seen the whole thing.
What we never do
- We do not sell your data, and we do not share it with data brokers.
- There is no Meta pixel, no Google Ads tag, no TikTok pixel and no third-party analytics script anywhere in this product, not on the marketing pages and not on the signed-in pages.
- We never put a symptom, an answer or a result into a URL, a page title or an email subject line.
- We never read, interpret or summarise the words you type. They are shown back to you exactly as written.
- We never send your profile to a clinician, a clinic or anybody else. Exporting and sharing is something you do.
Optional email reminders and newsletter
You can choose reminders and the monthly newsletter separately. Reminder timing uses the dates you start or finish a profile and save a meal entry. We record those dates only after you opt in. We do not use your answers, ratings or written notes to write emails.
Resend delivers these messages using your email address and the email content. Messages contain links back to Food Feel, not your profile answers or meal details. You can turn off either type of email in settings or through the unsubscribe link in that email. We retain a minimal suppression record if an address bounces or reports spam so we do not send to it again.
The analytics identifier
To answer questions like “did people come back a week later?” without requiring accounts, your browser stores one random identifier. It is generated locally, is not derived from anything about you, is never shared, and is only ever sent to this app’s own servers.
Clearing your browser data removes it, and deleting your account resets it.
Cookies
The only cookies Food Feel sets are the ones that keep you signed in, and one that remembers whose record is open on this device (it holds a random id, never a name). There are no advertising cookies and no third-party cookies, which is also why there is no cookie consent banner sitting between you and the product.
Account notices are sent because you have an account. They are how it works. Education email is sent only if you ticked a box asking for it; creating an account never subscribes you. Every marketing email has a one-tap unsubscribe that does not require signing in, and unsubscribing has no effect on your account.
If you ask for your results by email, we store your address, the version of the sentence you agreed to, the food group that took the most effort (for example, pills) and two counts: how many foods and how many groups you rated. Nothing else from your profile. That email names that one food group; it never lists your answers or how foods felt. The six short tips start only if you tap “Yes, send me tips” in it, and each has an unsubscribe link. This is not an account. We delete the record if you unsubscribe and ask us to, or when you delete your data.
Apart from that one results email, no Food Feel email contains your answers, your profile, or anything about your health, and no email subject line ever does.
Getting your data, and getting rid of it
In your settings you can download everything we hold about you as a JSON file. You can delete your account in the Food Feel app’s settings, or ask us to at food-feel.com/delete-account. Deletion erases your profiles, your meal logs, your meal photos and your reading history, closes your account, and ends any newsletter subscription for your address. There is no grace period and it cannot be undone.
Where it is kept
Your data is stored in a managed Postgres database (Supabase) used only by Food Feel. Separate from any clinical or practice system. Every table holding your data has row-level security, so a query can only ever return your own rows. Meal photos are kept in private storage in a folder only your account can open. They are shown through links that stop working after a few minutes. Traffic is encrypted in transit, and storage and backups are encrypted at rest by the platform.
Logging for someone else
You can keep a record for someone you care for, like a parent or partner. We ask only for a nickname and, if you like, an age range. Never their full name or birthday. Their record is kept apart from yours. Only you can see it. This is their health information, so please ask them first if you can.
You can remove a person at any time. That deletes everything logged for them, including meal photos. Deleting your account deletes every record you keep.
Children
Food Feel is for adults. It is not directed at children, and we do not knowingly collect information from anyone under 13.
A parent or carer may keep a record about their child. The adult fills it in about what they see at meals. The child never has an account, never signs in and never uses Food Feel. We hold a nickname and an age range for the child, never a name, birthday or school. Meal photos are for the food: please keep faces out of them. Nothing about a child is used for advertising.
Changes, and getting in touch
If this policy changes in a way that affects what we collect or what we do with it, we will say so here and date it. Questions go to the address on the contact page.
There is a companion document covering health-specific rights and obligations: the Consumer Health Data Policy.