Privacy Policy

Last updated: 29 September 2026

1. Who operates the service

Meyuman is operated by Mikhael Rakhman, an independent developer based in Israel.

For any privacy question or request: support@meyuman.com.

2. What this policy covers

This policy covers the Meyuman iOS app and the meyuman.com website. The website is a plain information site: it uses no cookies, no scripts, no analytics and no third-party resources.

3. No accounts

You do not register. We do not ask for your name, email address or phone number, and there is no login, password or personal profile on our servers. We do not receive your Apple Account name or email address.

The app does use technical identifiers that contain no personal details: random identifiers created on your device (see section 9) and random identifiers for each request. If you subscribe, the app also sends a transaction record signed by Apple so that our server can check the subscription (see section 10).

4. What stays on your device

Everything you record in Meyuman is stored in the app's local storage on your device:

• your profile — age, sex, height, weight and activity level — and your nutrition goals;
• meal entries with calories and macronutrients, and saved recipes;
• weight entries and daily scores;
• your chat history with the assistant;
• preview thumbnails of your 25 most recent photo messages;
• app settings and interface language;
• the random identifiers described in section 9.

Your diary is not synchronised or backed up to our servers, and we have no copy of it. Your age, sex, height and activity level are used only on the device, to calculate your targets, and are not sent to us or to the AI provider. When you use the assistant or create a PDF report, only the parts described in sections 5 and 8 are sent for processing, and our server does not keep them (except as described in section 9).

On iOS, the app's local storage is included in the device's normal iCloud or computer backup, like other app data. That backup is managed by Apple under Apple's terms, not by us.

5. What is sent when you use the assistant

When you send a message to the assistant, the app sends the following to our API at api.meyuman.com, which forwards it to Google Gemini to produce the answer:

• the text of your message;
• recent chat history — at most the last 30 messages and 12,000 characters. Images in that history are removed and replaced by the marker [image];
• diary context — your meal entries for today and recent days, recent weight entries and trend, your calorie and macronutrient goals, your stated goal and target weight, and a matching saved recipe if there is one — at most 40,000 characters;
• up to three meal photos, compressed on your device (see section 6);
• your interface language, time zone and local date and time;
• technical headers: the random installation identifier, a random request identifier, how the message was entered (keyboard, voice, quick reply or photo) and, if you subscribe, the signed subscription transaction.

From time to time the app may also request a short personal tip about your recent eating. That request contains similar diary context (recent meals and weights, goals, and the tips shown to you recently) and is processed the same way.

Only the content — message, history, diary context and photos — is sent to Google. The identifiers, the subscription transaction and the input method stay on our server and are not passed to Google.

Your consent comes first. Before the first request to the assistant, the app shows what is sent, to whom and why, and asks for your permission. Until you tap Allow and send (or Allow), nothing is sent to our API for the assistant or to Google — neither your messages and photos nor the personal tips. You can use the rest of the app without agreeing, and withdraw your consent at any time in Settings → Sharing data with Google Gemini; after that nothing more is sent until you agree again.

6. Photos

Photos are compressed on your device before they are sent — resized to at most 768 pixels on the longest side and re-encoded as JPEG, normally under 450 KB and never more than about 650 KB. The original, full-resolution photo does not leave your device.

Our server re-encodes the compressed copy and removes all embedded metadata, including location (GPS) and camera data, before sending it to Google. It does not save the photo. On your device, preview thumbnails are kept only for the 25 most recent photo messages; older ones are removed automatically.

7. Voice input

Meyuman does not record, save or send audio to us. Speech is converted to text by Apple's speech recognition built into iOS. The app does not require on-device recognition, so depending on your device, language and settings, Apple may process the audio on its own servers under Apple's privacy policy. The app receives only the resulting text, which is then treated exactly like text you typed.

8. PDF reports

When you create a PDF report, the app sends our server the report data for the selected period: dates, meal names, amounts, calories and macronutrients, daily totals, goals, weight entries, target weight and your stated goal. The server turns it into a PDF file on our own server and returns it to you. This data is not sent to Google or to any AI, and the file is not stored. Our technical log records only the report's language, date range, number of days and meals, how long it took and the file size — not the contents of your meals.

9. What our server keeps, and for how long

We do not keep your diary, messages, photos or AI answers as a record. Our server keeps only the following:

• Answer ratings. If you rate an answer with 👍 or 👎, we store a row with a random rating identifier created on your device (ct_client_id), the message and conversation identifiers, the rating, the interface language, the AI provider and model, the time of the rated message and timestamps. The text of the message and of the answer is not stored. Kept in a PostgreSQL database until you delete the rating (tap it again) or ask us to.
• Usage limits and the demo. To apply rate limits, daily and monthly usage limits and the free demo, we keep counters keyed by a one-way hash (HMAC) of the random installation identifier (ct_installation_id) — never the identifier itself. Rate-limit counters expire within minutes, daily counters within 2 days and monthly counters within 32 days. The demo record (the hashed identifier and the random identifiers of up to 5 demo requests) is kept for up to 400 days so the demo is not repeated. These records contain no diary or message content.
• Protection against duplicate requests. If the connection drops and the app retries, the server must return the same answer instead of asking the AI again. For this, the server keeps the finished answer to each request — the answer text and the entries it proposed — for up to 15 minutes, keyed by the hashed installation identifier and the request identifier, after which it is deleted automatically. Your message, diary context and photos are not included.
• Refunds and revocations. If Apple notifies us that a subscription was refunded or revoked, we store the subscription's App Store transaction number (originalTransactionId) and the time of the event for up to 400 days, so that the refunded subscription is not treated as active.
• IP addresses. Your IP address is used to limit requests per minute. It is held in server memory for up to 15 minutes, and as a one-way hash in the limit store for about 90 seconds. It is not written to our application log.

Counters, the demo record, cached answers and refund records are kept in a Redis store run for us by Upstash on Amazon Web Services in Frankfurt, Germany; ratings are kept in PostgreSQL run for us by Render in Frankfurt, Germany.

10. Subscriptions and payments

Payment is handled entirely by Apple through the App Store. We never receive or store card details or your Apple Account details.

With each AI request the app sends the transaction record Apple signed on your device. Our server checks the signature, the product, the expiry date and the environment (App Store or test), and does not save the record. The record contains transaction and product identifiers and dates — not your name or email address.

Apple sends our server notifications about refunds and revocations. We act only on notifications signed by Apple, and store only what is described in section 9. Our log contains only a one-way hash of the transaction number.

11. Server logs

Our application log records, for each request, a request identifier, the HTTP method, the path without its query string, and the response status. Authorization and cookie headers are removed before anything is written. For AI requests we also record technical cost figures: the model, the number of tokens, the number of photos, how the message was entered, the response time and error codes. The log never contains the text of a message or of an AI answer, photos or diary data — only categories, counts and lengths.

Render, our hosting provider, may process IP addresses and technical logs to operate the service, for security and to prevent abuse. Retention of these platform-level logs is governed by Render's own policies. Traffic to meyuman.com and api.meyuman.com passes through Cloudflare's network as part of Render's platform (we have no account of our own with Cloudflare); it may also process IP addresses for the same purposes.

12. Summary: what is kept, and where

13. Third parties

• Google — the assistant runs on the Google Gemini API. The content described in section 5 is sent to Google for processing. See section 14.
• Render, Inc. — hosts our API and our PostgreSQL database in the Frankfurt region. Its platform includes Cloudflare's network in front of our domains.
• Upstash, Inc. — runs our Redis store (counters, the demo record, cached answers, refund records) on Amazon Web Services in Frankfurt, Germany.
• Apple — distributes the app, handles payments and subscriptions, and provides speech recognition. Apple's privacy policy applies to those services. If you allow iOS to share analytics with app developers, Apple may give us aggregated usage and crash statistics; we do not receive your identity through it.
• data.gov.il — our server downloads a public Israeli food composition dataset in full to improve estimates. No user data is sent there.

No advertising, no third-party analytics, no tracking, and we do not sell or share your data. The app contains no analytics, advertising or tracking SDK, and we do not combine your data with data from other companies.

14. Processing by Google Gemini

Meyuman uses the Gemini API through a Google Cloud project with active billing, so under Google's terms it is a Paid Service. Under the Gemini API Additional Terms of Service, for Paid Services Google does not use your prompts (including photos) or its responses to improve its products.

That does not mean Google stores nothing. Under Google's abuse monitoring policy, Google retains prompts, contextual information and outputs for 55 days, solely to detect and prevent violations of its policies and for required legal disclosures. Content flagged by its automated systems may be reviewed by authorised Google employees. Google states that this data is not used to train AI models other than those used for policy enforcement.

Google may process requests in countries where it or its providers maintain facilities. Google's current terms govern this processing.

15. Transfers outside Israel

Our API and databases run in the European Union (Frankfurt, Germany). Google, Apple and Cloudflare (as part of Render's platform) process data in locations they determine. Using the app involves this processing.

16. Your rights and how to delete your data

Almost all of your data is on your device, so you can exercise most rights yourself, immediately:

• See or copy — everything is in the app, and Settings → Export data (JSON) saves a complete copy. Export PDF Report creates a report;
• Correct — edit or delete any entry in the app;
• Delete everything on the device — Settings → Reset all data removes your diary, chat, settings, the random identifiers and your consent to share data with Google. So that the free demo is not repeated, the app keeps only a note that the demo was used and the last subscription status it received from Apple. Deleting the app removes everything. Keep an export first if you may need the data again;
• Withdraw consent — Settings → Sharing data with Google Gemini stops anything further being sent to Google;
• Delete a rating — tap it again.

There is almost nothing to delete on our server: it holds no diary, messages or photos. The only records are those in section 9 — ratings (until deleted), counters and the demo record (which expire by themselves) and refund records. After you reset the data or delete the app, the new identifiers are not linked to the old ones, and we cannot link the old records to you.

For any other request, including deletion of your ratings, write to support@meyuman.com. Because we cannot identify you, include the ct_client_id value from your exported JSON file — without it we cannot tell which rows are yours. We will reply within 30 days.

Under Israeli law, and depending on where you live, you may have rights of access, correction and deletion regarding information about you. You may also complain to the Israeli Privacy Protection Authority or to the supervisory authority where you live.

You can cancel a subscription in your Apple Account settings; see the Terms of Use.

17. Not a medical service

Calorie and macronutrient figures are approximate AI estimates, and Meyuman does not provide medical advice. Meyuman is not a medical service and does not process your data for medical purposes. See the Terms of Use.

18. Security

All communication with our server is encrypted (HTTPS). Identifiers are stored on the server only as hashes, requests are rate-limited, and the ratings database accepts no connections from the internet — only from our own service. Because the diary is on your device, protecting it depends on your device's lock screen.

19. Age

Meyuman is intended for adults. By using the app you confirm that you are at least 18 years old. The app does not verify age by technical means. We do not knowingly collect information from anyone under 18.

20. Changes to this policy

If this policy changes, we will update the date at the top of this page. For a material change we will also give notice in the app or on the website.

21. Contact

support@meyuman.com