This is a translation for convenience. The binding version is the Hebrew version; if there is any difference between them, the Hebrew version prevails.

Privacy Policy

Food & Drink Diary · Last updated: 11 October 2026

This policy describes what information is collected in the "Food & Drink Diary" service (the app and the website, hereinafter: the "Service"), for what purposes, to whom it is transferred, how long it is kept and what rights you have. It constitutes a notice under section 11 of the Protection of Privacy Law, 5741-1981 (hereinafter: the "Protection of Privacy Law"), was written in accordance with the Law, its Amendment No. 13 and the regulations enacted under it, and forms an integral part of the Terms of Use. Anything stated in the masculine gender refers to all genders.

1. Who is responsible for the information

The controller of the Service's database is Noa Eliaz, [Business ID / Company No.], 2 Weizmann St., Tel Aviv, Israel (hereinafter: "we"). Privacy inquiries can be sent by email to noaeliaz5@gmail.com or by post to the address above.

2. Are you required to provide information

You are under no legal obligation to provide us with information, and providing it depends on your will and your consent. However:

• Without an email address and a password, it is not possible to open an account and use the Service.
• Without logging meals and drinks in the diary, it is not possible to calculate values, summaries and reports.
• The profile details (sex, age, height, weight, activity level and goal) are not mandatory. Without them, a general daily recommendation will be shown instead of a personalized recommendation, and the body mass index (BMI) will not be calculated.
• Turning on reminders, scanning barcodes and speaking aloud are your choice, and you can use the diary without them.

3. What information is collected

3.1 Information you provide

• Account details: Email address, name (optional) and password. The password is stored only as a one-way hash (PBKDF2), which does not allow it to be recovered, and we cannot see it.
• Diary content: Meals, foods and quantities, drinks, foods you have saved, the nutritional values calculated and corrections you made to them, and the diary settings (for example, a drinking goal and reminders).
• Profile: Sex, age, height, weight, activity level and goal, if you chose to fill them in.
• Contributions to the shared databases: Names of new foods you entered, value corrections you sent for review, and names you gave to products by barcode (see section 6).
• Guidance request to a nutritionist: If you sent a request to a nutritionist in "My nutritionist": first name, last name, email, mobile phone, age, sex, height and weight; and the questionnaire answers: the goal of the guidance, activity level, eating habits (meat, fish or vegetarian, allergies and foods you do not eat, number of meals a day, sweetened drinks and eating out), health (high cholesterol, fatty liver, high blood pressure, diabetes, kidney disease, regular medications, pregnancy or breastfeeding and other medical conditions), answers to the questions the nutritionist added, and the preferred way of contact, as you filled them in.
• Contact with a nutritionist: The daily and weekly menus, instructions and voice messages the nutritionist sent you, and the replies you wrote to them.
• Nutritionists: A nutritionist who registers for the nutritionists' panel provides a name, title, licence number, area of practice, mobile phone, email, description and password (stored only as a hash), and may upload a photo and a logo. The licence number is used to check the registration and is not shown to users. The details shown to users are set out in the Terms of Use for Nutritionists (in Hebrew).
• AI nutritionist: If you activated it: your questionnaire answers (whether you have high cholesterol, fatty liver, high blood pressure or diabetes, and allergies or foods you do not eat, if you stated them), the questions you asked and the answers you received, the menu built for you and the menus you saved.
• Inquiries: The content of your inquiries to us and the contact details you provided in them. In the "Send a message" form (in the app, under "About"): first and last name, country, mobile phone, email and the message, and, if you sent it while signed in, also the account it was sent from.
• Payment: When the paid subscription is activated, the transaction details will be kept (the plan, dates, amounts and a reference from the payment processing company). Credit card details are provided directly to the payment processing company, and do not reach us and are not stored by us.

3.2 Information generated during use

• Account records: The date of registration, your unique code (by means of which a nutritionist you have chosen asks to connect with you), the version of the terms and of the privacy policy you accepted, the trial period and the subscription, and the date of last use. If you joined through a nutritionist's invitation link, which nutritionist invited you is also recorded. The interface language you chose is kept so that reminders and emails are sent in it.
• Usage records: The number of automatic food breakdowns each day, and for each breakdown: the time, the number of items and the cost. They are used to manage quotas and costs.
• Security records: Active sessions on the account (a session identifier stored only as a hash, and dates), a count of failed sign-in attempts per email address, and a count of registrations each day per network address (IP). They are used to prevent intrusion and abuse.
• Reminders: If you turned on drink reminders, the subscription address that the browser creates with the manufacturer's notification service, its encryption keys and the device's time zone are stored.
• Support notes: An internal note that we may record in the account for the purpose of handling your inquiry.
• Access log: Every viewing by the Service's administrator of the content of a guidance request (the details and the questionnaire answers) is recorded in a log, with the time of viewing, the request viewed and the network (IP) address of the viewer. The log does not include the content of the request.
• Technical information: With every request to the server, the infrastructure provider Cloudflare processes information such as the IP address, the browser type and the time of the request, for the purpose of routing traffic, security and protection against attacks. The server's system logs are kept for a short period, up to 7 days, for the purpose of troubleshooting.

3.3 What we do not collect

We do not collect location or contacts, we do not record you and we do not store images from the camera. We do not use third-party analytics tools or third-party advertising tracking tools.

4. Information of special sensitivity

Information about nutrition, drinking, weight, height and body mass index, the answers to the AI nutritionist questionnaire (medical conditions and allergies) and the questionnaire answers in a guidance request to a nutritionist (including health and medications) is information about a person's health, and therefore "information of special sensitivity" under the Protection of Privacy Law. With regard to this information:

• We process it only on the basis of your express consent, given by a separate checkbox at registration, and only for the purpose of operating the diary for you. The names of the foods alone, without any link to you, are also used for the shared databases (section 6).
• The answers to the AI nutritionist questionnaire are stored and sent to the AI service only on the basis of an additional express consent, given in the questionnaire itself.
• A guidance request, with the details and questionnaire answers in it, is passed on to the nutritionist you have chosen only on the basis of your express consent, given by a separate tick in the request form. The diary, the values and the profile are disclosed to the nutritionist only after they have approved your request using your unique code, or after you have approved their connection request in the app, and only for as long as the connection exists and is not paused.
• The Service's administrator does not routinely view the content of guidance requests and questionnaire answers. The management lists show only the technical details of a request (date, nutritionist, user and status), and the content is opened only when necessary, for support, oversight of nutritionists or handling a complaint. Every viewing is recorded in an access log (section 3.2).
• We do not draw medical conclusions from it, we do not use it for marketing or advertising, and we do not provide it to any third party, except for the infrastructure providers listed in section 7, who act on our behalf, and a nutritionist you have chosen, as set out in section 7.3.
• You may withdraw your consent at any time: disconnect the nutritionist ("My nutritionist" → Disconnect), delete the AI nutritionist data ("Delete conversation and data"), delete your profile details, delete entries from the diary or delete the entire account (section 10). Withdrawal of consent does not affect the lawfulness of processing carried out before it.

5. Purposes of use of the information

• Operating the diary: logging, calculating values, summaries, charts, comparison with the recommendation, and reports.
• Saving the diary in the account and syncing it between your devices.
• Automatic breakdown of foods and operating the shared databases.
• Sending the drink reminders you requested, and a notification when a message, a connection request or a new menu from the nutritionist is waiting for you, or when the nutritionist has approved your guidance request. The notification to your phone does not include the content of the message or the menu.
• Connecting with a nutritionist you have chosen: passing your guidance request on to them, and, once the connection is approved, granting access to your diary, your profile and your questionnaire answers, and transferring menus, instructions, voice messages and replies between you.
• Managing the nutritionists in the Service: checking the licence of nutritionists who registered and approving them, handling complaints, and pausing a nutritionist, a user or a connection between them, when necessary.
• AI nutritionist: general information about nutrition, answers to your questions and a daily menu with alternative options for each meal, based on your profile, your questionnaire answers (including a preference for meat, fish, vegetarian or vegan) and your diary.
• Estimating vitamins and minerals based on what you have eaten.
• Managing the account, the trial period and the subscription, including billing, receipts and cancellation.
• Providing support, responding to inquiries and sending service messages, such as a password reset, a change of terms or the end of a subscription period.
• Information security, prevention of fraud and abuse (for example, opening repeated accounts in order to obtain a free trial), and enforcement of the Terms of Use.
• Managing costs and improving the quality of the shared database, on the basis of non-identifying statistical data.
• Compliance with legal requirements, including keeping accounting records.

We do not sell personal information and we do not use it for personalized advertising. No advertising message will be sent to you without your express consent, as required by section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982. Drink reminders and service messages are not advertising messages. We do not make automated decisions about you that have a legal effect or a similarly significant effect.

6. The shared databases

To make the breakdown fast and inexpensive, the Service maintains two databases shared by all users:

• Food database: When a food you entered is not recognized, its name is sent for automatic breakdown, and the result (the name of the food and its values) is stored in the database after automatic plausibility checks, and is also used by other users. Value corrections you sent enter the database only after we have reviewed them.
• Barcode database: A name you gave to a product that was not found in the open database Open Food Facts is stored together with the barcode number after automatic filtering, and is shown immediately to other users who scan the same product. We may correct or delete it.

In addition, the estimate of vitamins and minerals for a food that is not in the built-in database is stored by the name of the food only, and is used by all users. Other users see only the name of the food or product and its values, and not your identity or your diary. We keep an internal link between each contribution and the account that contributed it, for the purposes of monitoring and preventing abuse. The link is deleted when the account is deleted, and the contribution itself remains in the database without any link to you. Therefore, do not enter personal information in a food name or a product name, such as names or phone numbers.

7. To whom information is transferred

7.1 Providers acting on our behalf

The following providers process information on our behalf, in accordance with our instructions and only for the purpose of providing the Service:

• Cloudflare, Inc.Hosting of the server and the database, routing of traffic and security. Processes all the information in the Service. Data centers in the USA, in the European Union and in other countries.
• Anthropic, PBC (the Claude service)Automatic breakdown of a new food into nutritional values and estimation of vitamins and minerals: receives the name of the food only, without email, name, account identifier or any other identifying detail. AI nutritionist, only if you have activated it and consented: receives your profile (sex, age, height, weight, activity and goal), the daily goals calculated in the app, your questionnaire answers, a summary of your diary for the last seven days (values and food names), the question you asked and the last 12 messages in the conversation, without your name, your email address or your account identifier. USA.
• Resend (when the service is activated)Sending service emails, such as a password reset link. Receives the email address and the content of the message. USA.
• [Name of the payment processing company] (when the subscription is activated)Processing payments and issuing receipts. Receives the email address, the payment details and the transaction details. [Location].
• The notification service of the browser or device manufacturer (Apple, Google, Mozilla or Microsoft)Delivering drink reminders to the device. Receives the reminder subscription address. The content of the reminder is encrypted (in accordance with the RFC 8291 standard), and is not visible to the notification service.

7.2 Services your device contacts directly

When you choose to use the following features, your device contacts an external service directly, and the external service processes the information in accordance with its own privacy policy:

• Barcode scanning: The barcode number is sent from the device to the open database Open Food Facts (a non-profit organization in France), which also receives the device's IP address, as with any visit to a website. The image from the camera is processed on the device only, and is not stored or sent anywhere.
• Speaking aloud: Speech is converted into text by the speech recognition service of the browser or of the operating system (for example, Google or Apple), which may process the voice on its servers. Our Service receives the text only, and does not receive or store recordings.
• Sharing and reports: Reports are produced on the device itself. When you share a link to the Service or send a report by WhatsApp or by email, the sending is done from the app you chose and at your choice.
• WhatsApp message to the nutritionist: After sending a guidance request, you can open a ready-made WhatsApp message to the nutritionist containing your name and your unique code. The message is sent from your phone and your WhatsApp account, only if you choose to send it, and WhatsApp (of Meta) processes it in accordance with its privacy policy. Our Service does not send the message and does not receive its content.
• Advertisement: The advertisement image at the bottom of the screen may be loaded from the advertiser's server each time the Service is opened, and tapping it opens the advertiser's website in a window within the Service. The advertiser's website receives the technical information that every website receives (such as the IP address), and may place cookies in accordance with its own policy. We do not pass on to advertisers any information about you or about your diary.

7.3 A nutritionist you have chosen

The nutritionists who appear in "My nutritionist" are independent professionals who have registered, declared that they hold a valid licence and been approved by us. When you send a guidance request, the details and the questionnaire answers are passed on to the nutritionist you have chosen, and your unique code is shown to them only partially, until they approve the request by typing the full code that you send them. After approval, or after you have approved their connection request in the app, they can view your diary, your values, your profile and your questionnaire answers and send you menus, instructions and voice messages, until you disconnect. After disconnection, the nutritionist no longer sees your diary, your profile or your messages, but the request details you sent them remain with them. The nutritionist has undertaken in the Terms of Use for Nutritionists to keep the information confidential and to use it only for the guidance you requested, and is responsible for the use they make of the information they received, in accordance with the law and the rules of professional ethics that apply to them. The nutritionist cannot access the information of users who have not sent them a request and have not connected with them. The nutritionist can keep their own notes on your guidance. The notes are visible only to them and are deleted when your account is deleted. We may pause or end a connection; while it is paused, the nutritionist does not see your information.

Joining through a nutritionist's invitation link: If you registered or joined through a nutritionist's personal link, it is recorded that they invited you. The nutritionist sees only the number of users who joined through their link, and not their identity. They can ask to connect with you only using your unique code, which you will give them, and the connection is created only after you approve it in the app, or after you send them a guidance request and they approve it. As long as the invitation is in effect, the app displays the nutritionist's logo and details. You can remove the invitation at any time ("My nutritionist" → Remove the invitation), and it is also removed when you decline their connection request or disconnect from them.

7.4 Disclosure in other circumstances

Beyond the above, we will disclose information only if this is required by law or by an order of a competent authority; to protect our rights or to prevent harm to a person's body or property; or in the context of a merger or transfer of the Service to another entity, provided that the receiving entity undertakes to handle the information in accordance with this policy, and that you are given notice of this in advance.

8. Transfer of information outside Israel

The providers listed in section 7 store or process information outside Israel, mainly in the USA and in the countries of the European Union. The transfer is carried out in accordance with the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001, including on the basis of your express consent, given at registration, to countries whose laws ensure the protection of information, and to providers that have undertaken in data processing agreements to take measures to protect it and to use it only for the purpose of providing the Service.

9. Cookies and storage on the device

• Session cookie: One essential cookie (sid) keeps you signed in to the account, for up to 180 days or until you sign out. It is not accessible to scripts on the page, and is used only to identify the session.
• Security cookies: The infrastructure provider Cloudflare may place essential cookies to identify malicious traffic.
• Storage on the device: A copy of the diary, the settings and the names of products you scanned is stored in the browser's local storage, so that the diary works even without a network connection. With a free account that does not include saving to the account, new entries are saved on the device only and are not transferred to the server, except when a nutritionist you have approved is connected: then the entire diary on the device, including days before the connection, is saved in the account, and remains there even after disconnection, until you delete the account. A diary saved in the account during the trial period or the subscription remains saved there, so that it comes back on all devices if you subscribe again, until you delete the account.

We do not place advertising, analytics or tracking cookies, and all our cookies are essential for operating the Service. An advertiser's website that you chose to open from an advertisement may place its own cookies, in accordance with its policy. You can block cookies in your browser settings, but then signing in to the account will not be possible.

10. Retention periods and deletion

• Account and diary: Kept for as long as the account exists, including a diary saved in the account during a trial period or a subscription that has ended (see section 9).
• Deleting the account: You can delete the account at any time from within the app (My account → Delete account), or by a request to us. Upon deletion, the following are immediately deleted from the database: the account, the diary, the profile, the sessions, the reminder subscriptions, the usage records, the requests to nutritionists, the connection with them and all the messages, menus and recordings in it, and the AI nutritionist data; and the link between the account and its contributions to the shared databases and to the breakdown cost records is removed. The copy on the device is deleted when the account is deleted from that device, on signing out or when the browser data is cleared.
• Backups: The database is backed up automatically by the infrastructure provider for the purpose of recovery in the event of a fault. Deleted information may remain in a backup for up to 30 days, and is then deleted.
• Security records: Failed sign-in attempts are deleted within 24 hours; the count of registrations per network address is deleted within 30 days; expired sessions and reset links are deleted automatically.
• Moving to a new address: When the app moves to a new web address, the settings saved on your device, and in an account without cloud save also the diary kept on the device, are stored in your account so that they reappear at the new address without signing in again. They are deleted automatically after 30 days, or earlier when the account is deleted.
• Nutritionist and AI nutritionist: Requests, menus, instructions, voice messages and replies are kept until the account is deleted, even after the nutritionist is disconnected (they will not be able to see them after disconnection), and are deleted earlier if the nutritionist is removed from the Service. AI nutritionist data is kept until you delete it ("Delete conversation and data") or the account; the last 200 messages of the conversation are kept. A menu you saved in "My menus" is kept for a week from the day you saved it and is then deleted automatically.
• Access log and nutritionists: The log of the Service administrator's access to the content of guidance requests is kept for two years and then deleted automatically, even if the account was deleted earlier. A nutritionist's registration details are kept as long as they are registered with the Service, and are deleted when they are removed.
• Messages sent with the "Send a message" form: Kept for two years and then deleted automatically, even if the account was deleted earlier; when the account is deleted, the link between the message and the account is removed.
• Usage records: The daily count of breakdowns is deleted after 13 months; the daily count of questions to the AI nutritionist is deleted after 30 days; in the cost records of each breakdown, the link to the account is deleted after 13 months.
• Information kept even after the account is deleted:
  • A one-way hash of the email address, to prevent a trial period from being obtained again. The address cannot be read from it, but it can be checked against it whether a particular address has already received a trial period. It is deleted after 3 years.
  • Records of transactions, receipts and invoices, for the period required under tax laws (usually 7 years).
  • Contributions to the shared databases and cost records, without any link to you.

11. Information security

We take reasonable and accepted measures to secure the information and act to comply with the Protection of Privacy Regulations (Data Security), 5777-2017. Among the measures:

• Encryption of all communication (HTTPS).
• Storing passwords and session identifiers as hashes only.
• Restricting access to each diary to its owner only, and restricting access to the admin panel with a strong password and lockout after failed attempts.
• Rate limiting of requests, to prevent password guessing and abuse.
• Nutritionist sign-in with an email and a password (stored only as a hash) or with a personal code created by us; approval of every nutritionist by us before they are shown to users; and access only to users who have requested guidance from them and whose connection has been approved.
• Viewing of sensitive content in guidance requests by the Service's administrator only when necessary, with every viewing recorded in an access log.
• Minimizing the information transferred to external providers, and end-to-end encryption of the content of reminders.

No system is completely immune. If a serious security incident occurs, we will report it to the Privacy Protection Authority as required by the regulations, and we will notify the affected users when the law or the Authority requires it, or when the notification may help them protect themselves. We recommend choosing a unique password and signing out of shared devices.

12. Your rights

• Access: You may inspect the information about you held in the database, under section 13 of the Protection of Privacy Law. Most of the information is visible to you in the app itself, and "Diary backup" gives you a full copy of the diary in a file that you can save and transfer.
• Correction and deletion: If the information is not correct, complete, clear or up to date, you may request that it be corrected or deleted, under section 14 of the Law. Most of the information can be corrected directly in the app.
• Deleting the account: At any time, from within the app or by a request to us.
• Withdrawal of consent: As detailed in section 4. Reminders and notifications can be stopped in the app or in the browser settings.
• Direct mailing: We do not use the information for direct mailing. If we do so in the future, you may request at any time to be removed from the mailing list, under section 17F of the Law.

Requests can be sent by email to noaeliaz5@gmail.com. We will allow access and respond to requests within 30 days of receiving them. If we refuse a request, we will notify you of this and of the reasons for the refusal (and, regarding a request for access, within 21 days), and you may apply to the court as prescribed by law. We may ask to verify your identity before providing or deleting information. In addition, you may file a complaint with the Privacy Protection Authority.

13. Minors

The Service is intended for persons aged 18 and over. We do not knowingly collect information about anyone under the age of 18. If we learn that such an account has been opened, we will delete it and the information in it. A parent or guardian may contact us on this matter.

14. Users from the European Union and the United Kingdom

The Service is intended for users in Israel, and is not directed at residents of the European Union or the United Kingdom. To the extent that the EU General Data Protection Regulation (GDPR) or its UK equivalent nevertheless applies to you, the controller is as set out in section 1, and the legal bases for processing are: performance of the contract with you (the account, the diary, saving to the account and the subscription); your explicit consent, for information concerning health, its transfer to a nutritionist you have chosen and its sending to the AI nutritionist; legitimate interest (security, prevention of fraud and abuse, cost management and improvement of the shared database); and compliance with a legal obligation (accounting records). You have the rights of access, rectification, erasure, restriction of processing, data portability and objection to processing, as well as the right to withdraw your consent at any time and to lodge a complaint with the supervisory authority in your country. The European Commission has recognized Israel as a country providing an adequate level of protection for personal data. Transfers of data to the USA are made to providers bound by the EU-US Data Privacy Framework or by standard contractual clauses.

15. Changes to the policy

We may update this policy. We will give notice of a material change in the app or by email at least 30 days before it takes effect. A change that requires your consent will not take effect with respect to you without your consent, and will be presented to you for approval the next time you sign in to the Service. The date of the last update appears at the top of the page, and previous versions will be provided on request.

16. Contact

Noa Eliaz · 2 Weizmann St., Tel Aviv, Israel
Email: noaeliaz5@gmail.com · Phone: [Phone number]