Privacy Policy

Last updated: October 22, 2026

Replete ("Replete", "we", "us") is a food tracker with a short course on what to eat. We built Replete to be privacy-first: you don't need an account to use it, and your meals, body measurements and weight log stay on your device. This policy explains what little information leaves your phone, where it goes and why.

Information stored on your device

The following stays on your phone and is never uploaded to us:

• Your profile: your name if you give one, your goals, and your body measurements (height, weight, age, sex, activity level), used to size your targets.
• Your meals: the photos you take, the foods found in them, their amounts and the estimated nutrients.
• Your weight log: the weights you record and any goal weight you set.
• Your plan and habits: your calorie target if you set one, your habit plan, the habits you try and your reminders.
• Your progress and settings: lesson progress, quiz and game history, and app settings.

Deleting the app deletes all of this. We have no copy, so we can't restore it for you either.

Information that leaves your device

Meal photos

Replete uses your camera so you can scan your plate or a barcode. When you scan a plate, the photo is sent to our server (a Cloudflare Worker) only so it can be read. Our server passes it to Google (the Gemini API) and, if that fails, to Anthropic (the Claude API), which identify the foods and estimate their nutrients. Location information is removed from the photo before it leaves your phone, and no name, email or account is attached. We don't keep the photo once the answer comes back, and we never use your photos for advertising or to build a profile of you. The copy in your meal history stays on your device.

Meals you type or say

When you type or say a meal, or add or rename a food, that text is sent the same way, through our server to Google or Anthropic, to work out the foods and their amounts. The foods on a plate are also sent this way so the AI can write the plate's one-line summary.

Microphone and voice entry

If you say a meal instead of typing it, the app asks for microphone and speech recognition permission. Your phone's own speech recognition (Apple's or Google's) turns what you say into text, under their policies. Replete receives only the text, never a recording. Voice entry is optional, and typing does the same job.

Barcodes

When you scan a barcode, the code is sent to our server, which looks it up in the public Open Food Facts database. The product's details are saved on our server so the next lookup is quicker. That saved product information isn't linked to you.

An anonymous ID

Requests to our server carry an anonymous ID: the customer ID that RevenueCat (our subscription service, below) creates for your copy of the app. It is random and isn't linked to your name or email. We use it to apply fair-use limits, and the usage counts behind those limits are kept for up to 8 days after your last request.

Lessons

When you start or pass a lesson, the lesson's ID is sent to our server with your anonymous ID, so the app can show how many people took that lesson. We keep the count for each lesson, and a note that your anonymous ID was already counted for it, so nobody is counted twice. That note is deleted after 400 days.

Subscriptions and purchases

Replete is free to use for tracking: 10 photo scans a week, unlimited barcode scans and typed or spoken meals, and the first 5 lessons. An optional subscription unlocks the full course, the habit plan with reminders, and unlimited photo scans. Payments are handled by the Apple App Store or Google Play, and we never see or store your payment card details. RevenueCat processes your subscription status using the anonymous ID described above.

Usage analytics

We use two analytics services to understand how the app is used and where it can be better:

• PostHog receives anonymous product analytics, such as which screens and steps were seen and how the subscription screen was used. It never receives your name, body measurements or food.
• Google Firebase Analytics receives app usage events and an app instance ID. We use it to measure which ads lead to installs and subscriptions, including Google Ads conversion measurement.

Ad measurement

Where it is included in the app, the TikTok Business SDK helps us measure which TikTok ads lead to installs and subscriptions. It may collect device identifiers, such as your phone's advertising ID, and app events: installing the app, finishing setup and subscribing (with the plan and its price). On iPhone, tracking across other companies' apps and websites only happens if you allow it when Apple asks. On Android, you can reset or delete your advertising ID in your device settings.

Crash reports

If the app crashes or hits an error, Google Firebase Crashlytics receives a report: the error, where in the code it happened, your device model, its system version and the app version. We use these only to fix problems.

Feedback you send us

If you choose to send feedback from within the app, we store your message and a little context to help us understand and reply to it. This is stored in Google Firebase (Cloud Firestore) and may include:

• your message, your rating, and your answers to the short feedback prompts;
• basic technical context: app version, platform, system version, screen size, days since install, and whether you have an active subscription;
• the anonymous ID described above, which lets us send a private reply back to your device.

Sending feedback is entirely optional.

Notifications

With your permission, Replete can remind you of things you asked for: the time you picked for your daily lesson, the meals and lessons in your habit plan, a weigh-in, a daily recap, and a Sunday reminder for your weekly recap. These are scheduled on your device, not sent from a server. You can turn them off at any time in the app or in your device settings.

What we don't do

• We don't require an account, name or email to use the app.
• We don't sell or rent your personal data to anyone.
• We don't share your health data with advertisers. Your body measurements, weight and meal history stay on your phone. The only food data that leaves it is a photo or description you send to be read, as described above.
• We don't use your meal photos or nutrition data for advertising.

Third-party services

The services above work under their own privacy policies:

• Apple (App Store, on-device speech recognition)
• Google (Google Play, speech recognition on Android, Firebase Analytics, Crashlytics, Cloud Firestore, and the Gemini API used to read meals)
• Anthropic (the Claude API, used to read meals when Gemini can't)
• RevenueCat (subscription status)
• PostHog (anonymous product analytics)
• TikTok (ad measurement)
• Open Food Facts (barcode lookups)
• Cloudflare (hosts our server)

Children

Replete is not directed at children under 13 (or the minimum age required in your country) and we do not knowingly collect data from them.

Your choices

Because most of your data lives on your device, you control it directly. You can:

• delete everything the app holds by deleting the app;
• get a new anonymous ID by deleting and reinstalling the app;
• turn off notifications, microphone or camera access in your device settings;
• on iPhone, say no to tracking when Apple asks, or change it later in Settings; on Android, reset or delete your advertising ID in your device settings;
• manage or cancel your subscription in your App Store or Google Play account;
• ask us to delete feedback you've sent by emailing the address below.

If you live in the EU, the UK or California

You can ask us what information the services above hold about you, ask for a copy, and ask us to correct or delete it. Most of your data never reaches us, and what does is tied to an anonymous ID rather than your name, so tell us what you're looking for and we'll do our best to find it. Reinstalling the app gives you a new anonymous ID, which breaks the link to anything held under the old one.

In the EU or the UK, you also have the right to complain to a data protection authority: in the EU, the one in your country; in the UK, the Information Commissioner's Office (ICO).

In California, you have the right to know what personal information we collect and to ask us to delete it, and we won't treat you differently for asking. We don't sell your personal information.

To make any of these requests, email support@replete-app.com.

Changes to this policy

We may update this policy as the app evolves. When we do, we'll revise the "Last updated" date above. Material changes will be reflected in the app or on this page.

Contact

Questions about your privacy? Email support@replete-app.com.