EatSee Privacy Policy

Last updated: 9 November 2026

1. Data controller

The controller of your personal data is ASTROWARE Arkadiusz Woźniak, Rudka Kozłowiecka 102, 21-025 Niemce, Poland. For anything to do with your personal data, write to kontakt@eatsee.pl.

2. Data we process

Account data: e-mail address, name, account identifier, sign-in method (e-mail and password, Google or Apple), and whether your e-mail address is confirmed.
Profile data (health-related data): sex, date of birth, height, weight and weight history, activity level, weight goal and target weight, and the daily targets calculated from them (calories, macronutrients, water, steps). We also use your date of birth to check the age thresholds of the account and of some features (section 12).
Diary (health-related data): the meals you log (dish name, estimated nutritional values and ingredients, the dish rating, date, time and portion), photos of meals and nutrition labels, meal illustrations generated by AI (an illustration is not a photo of your meal), favourite meals, water intake, and your streak, badges and achievements.
Descriptions and voice recordings: text you type when adding or correcting a meal or products, the voice recording when you add them by voice, and the text recognised from it. We do not store recordings on our servers - we process them only while producing the result. We do not keep descriptions or recognised text in your diary (section 4).
Meal planner (health-related data): your food preferences - diet type, allergies, excluded foods, your cooking conditions and meal times - as well as saved plans with recipes and your shopping list, the recipe ratings derived from your choices in the planner and the recipes you have asked not to receive. Information about allergies and diet can reveal information about your health, so we treat it as health-related data.
"What I have at home": a list of the products you have at home (from the app's catalogue or typed in by you), with the storage place and the date and way each was added, and your latest meal ideas made from those products. Photos of your fridge, freezer, cupboards and other places where you keep food (1 to 5 per scan) are used only to recognise the products - we do not store them, neither on your phone nor on our servers (section 4). Show only food in these photos - no people, documents or medicines.
AI Assistant (health-related data, aged 16 and over, with separate consent): your questions, the assistant's answers, your ratings and reports of answers, and the app data the assistant answers from (section 4). If a question suggests a possible risk to health, we store for 7 days only the fact that such a signal occurred, without the content of the question.
Shared recipe database: when you log a meal from your plan to your diary, its recipe (name, ingredients, preparation steps) may be added to EatSee's shared recipe database and suggested to other users. They cannot see who the recipe came from.
Automatic planning (Premium, off by default): the settings of this feature (mode and time), the date you last opened the planner, device time zone and language, and a push notification token needed to tell you that your plan is ready. We store the token only after you turn the feature on, and remove it when you sign out or delete your account.
Apple Health and Health Connect (optional): the data described in section 5.
Barcodes and the product database: the scanned barcode number and the name of a product you search for. If you photograph the label of a product that is not in the database yet, its name and the nutritional values read from it go to EatSee's shared product database, which other users of the app use - without any information about who added the entry. We keep the information about the author of an entry and your confirmations of product data privately, in a register other users cannot access, and the result of reading a label for 24 hours, so that the product can be added to the database.
Subscription, purchases, codes and referrals: plan status (free or Premium), the source of the entitlement (purchase, free trial, promo code or referral) and its end date, transaction identifiers provided by the app store, purchases of the 7-day plan (transaction identifier, date, status and whether the plan has been built), subscription events (for example the start of a free trial, a renewal, a cancellation, a payment problem or a refund), the information needed to match offers to you (for example whether the account has ever paid and when we showed an offer), your referral code, who referred whom, and redeemed codes. To prevent abuse we also store a hash of your e-mail address with them. We do not process payment card data.
Consents to AI features: whether and when you gave or withdrew consent to AI features and consent to the AI Assistant, the version of the consent text, the language, the platform and the app version. If you consent to AI analysis during a trial scan before creating an account, and you create an account on the same phone within 24 hours, we carry that consent over to the account.
Technical data and usage statistics: counters for features that have usage limits, in-app events linked to your account identifier (for example saving a meal, starting a free trial or a purchase), app identifiers on the device, device, system and app version information, crash and performance reports, server logs, and your device's IP address together with the approximate location (country, region) derived from it. We do not send to usage statistics the nutritional values of meals, weight, diet, allergies, barcode numbers, the content of assistant chats or data from Apple Health and Health Connect. Older versions of the app (up to 1.3.5) also send to usage statistics the diet type, the number of selected allergies, the choice of gluten-free and lactose-free eating, barcode numbers, and information about badges and achievements, including step badges - once you update the app, this data is no longer sent. If you try a photo analysis before creating an account, we create a temporary, anonymous account and store its identifier, your consent to AI analysis and the fact that the trial was used.
Support: the content of your message and the e-mail address you write from, and when you write from the app also a file attached automatically with the app and system version and the app's latest error messages.
Marketing consent and newsletter: whether you consented to receiving marketing messages, when you gave that consent and which version of the clause you accepted, and when we send a message, the e-mail address it was sent to, the date and the delivery status.
Data on your device: the app keeps its settings (including reminders and appearance), language, the name used in reminders and temporary files (for example a voice recording or a PDF report) in your phone's storage.

Providing your data is voluntary, but some of it is necessary to use the service: without an e-mail address you cannot create an account, without a date of birth you cannot finish creating it (we check the minimum age), without profile data we cannot calculate your daily targets, without food preferences the planner cannot build a plan, and without consent to AI features the AI-based features (section 4) will not work - barcodes, manual entries and favourites work without it. If you do not provide the data, the corresponding features will not work.

3. Purposes and legal bases

providing the service - running your account, the meal diary, the meal planner with its shopping list, the "What I have at home" list, reminders, sync with health apps, the referral programme, in-app purchases, the e-mails needed to run your account and handling your enquiries - Art. 6(1)(b) GDPR (performance of a contract);
processing health-related data - your profile, your meal diary (including meal photos, nutritional values and your weight), and the diet, allergies and exclusions in the planner - in order to calculate your daily targets, keep your diary and build meal plans - Art. 9(2)(a) GDPR (explicit consent). You give that consent by knowingly entering this data in the app, and you can withdraw it at any time: by deleting the data in the app (for example in your planner preferences), by writing to kontakt@eatsee.pl, or by deleting your account;
AI features - analysis of photos, descriptions and recordings, meal illustrations, meal plans and meal ideas, and product recognition in "What I have at home" - Art. 6(1)(b) GDPR and, for health-related data, Art. 9(2)(a) GDPR (explicit consent, which you give on the AI features consent screen). You can withdraw it at any time in the app (Profile → Privacy & AI) - the AI features then stop working, and your saved meals stay;
the AI Assistant - Art. 9(2)(a) GDPR (separate explicit consent) and Art. 6(1)(b) GDPR. You can withdraw consent in the assistant menu or in Profile → Privacy & AI - we then delete all your assistant chats and your reports of its answers;
reports of AI content (for example assistant answers, illustrations, recipes), to improve the safety and quality of AI features - Art. 6(1)(f) GDPR (legitimate interest) and, where a report contains health-related data, Art. 9(2)(a) GDPR (consent you give by sending the report);
checking your age (the age threshold of the account and of some features) - Art. 6(1)(c) GDPR in conjunction with Art. 8 GDPR, and Art. 6(1)(f) GDPR (protecting minors);
keeping a record of consents, so that we can show they were given - Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR;
usage statistics and crash and performance reports, to improve the app and fix failures - Art. 6(1)(f) GDPR (our legitimate interest in maintaining and improving the app);
measuring and personalising EatSee's ads - on iPhone Art. 6(1)(a) GDPR (consent), on Android and in older versions of the app Art. 6(1)(f) GDPR (our legitimate interest in promoting our own service) - see section 7;
running the shared product database (barcodes) and the shared recipe database, to make results and plans more accurate for all users - Art. 6(1)(f) GDPR (legitimate interest);
handling subscriptions and purchases, matching Premium offers to you and preventing abuse (limits, promo codes, referrals) - Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (legitimate interest in offering our own services and in protecting against abuse);
sending marketing messages to your e-mail address - Art. 6(1)(a) GDPR (consent, section 6);
measuring ad performance on the eatsee.pl website - Art. 6(1)(a) GDPR (consent, section 14);
tax and accounting obligations - Art. 6(1)(c) GDPR (legal obligation).

Withdrawing consent does not affect the lawfulness of processing carried out before it. After you withdraw consent, the features that rely on the data covered by it stop working.

4. AI features

To recognise a meal or products and estimate nutritional values, to draw an illustration of a dish, to build a meal plan or meal ideas and to answer your questions in the AI Assistant, we send data to an artificial-intelligence provider based in the USA, which processes it outside the EEA (sections 8 and 9). We do this only after you consent to AI features, and for the AI Assistant only after a separate consent (section 3). We send only what is needed to produce the result:

the photo of a meal or a label (including a trial scan before you create an account), the description you type, and the voice recording together with the text recognised from it;
photos of your fridge, freezer, cupboards and other places where you keep food - only to recognise food products;
in the meal planner and for meal ideas - your food preferences (diet type, allergies, exclusions), your daily targets and how much of them you have left that day, the products you have at home, and the names of your favourite and frequently eaten dishes;
for a meal illustration - the name or description of the dish;
in the AI Assistant - your meals, weight and water from the last 30 days, your favourite dishes, your targets (including the safe calorie minimum), your questions and earlier answers in that chat, your age band (16-17 or 18+) and a pseudonymous account identifier that helps the provider detect abuse;
the app language.

We do not send your name or e-mail address and, outside the AI Assistant, not your account identifier either. The provider processes this data on our behalf, does not use it to train its models and may keep it for up to 30 days solely to detect abuse. We do not store photos of your fridge and cupboards or voice recordings. With automatic planning the data is sent at the time you set, without you opening the app.

The AI Assistant answers questions about your data stored in the app. The app calculates the numbers in its answers, and the AI describes them. The assistant does not give weight loss advice to people under 18. If a question suggests a possible risk to health (for example an eating disorder or self-harm), the assistant shows information on where to find help instead of numbers, and answers more cautiously for 7 days. For this we store only the fact that such a signal occurred and when it expires, without the content of the question. We may review the answers you report, together with the question, to improve the safety and quality of the assistant.

Content prepared by AI is labelled in the app, and meal illustrations also carry a technical marking of their origin. We do not take decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). Analysis results, illustrations, meal plans and assistant answers are estimates or indicative only, matched to the targets and preferences you provide, and you can always correct or reject them.

5. Apple Health and Health Connect

Sync with Apple Health (iPhone) and Health Connect (Android) is optional. It works only after you turn it on in the app and grant permission on your phone. You can revoke those permissions at any time in the Apple Health or Health Connect settings.

What we read: weight and step count.
What we write: the calories and macronutrients (protein, carbohydrates, fat) of the meals you log in EatSee and the weight entries you log in EatSee.
What we use the data for: we show your step count in the app (goal, chart, badges for your total steps). The step count itself stays on your phone - we do not send it to our servers, and your account stores only your step goal and the dates you unlocked badges. We may suggest updating your profile with the weight from these apps - we save it only after you confirm, and from then on we treat it like the rest of your profile data, including in AI features if you consent to them (section 4).
What we do not do: we do not use data from Apple Health and Health Connect for advertising, marketing or usage statistics, we do not sell it, we do not share it with anyone other than the providers that process data on our behalf (section 8), and we do not store it in iCloud. From version 1.4, the app no longer sends information about step badges to usage statistics either - older versions (up to 1.3.5) did.
Retention and deletion: your step goal, badge dates and confirmed weight stay in your account until you delete it (section 10). Data EatSee wrote to Apple Health or Health Connect stays in those apps under your control - delete it there. Section 13 describes how we protect data.

6. Marketing e-mails

If you give separate consent, we will send news, tips and recipes to your e-mail address, and sometimes Premium offers, including promo codes granting free Premium days. The legal basis is Art. 6(1)(a) GDPR (consent), and the sending itself follows electronic communications law. We send these messages through an external e-mail delivery provider (section 8).

Consent is entirely voluntary - withholding it does not limit your use of the app or your account in any way.
You can withdraw it at any time in the app (Profile → EatSee newsletter) or by writing to kontakt@eatsee.pl. If your e-mail app shows an unsubscribe button, using it sends us that request by e-mail. Withdrawal does not affect the lawfulness of messages sent beforehand.
Only people aged 16 and over can consent to marketing communication. If you are under 16, do not tick this consent.
We use your e-mail address for this purpose until you withdraw consent or delete your account. The record of messages sent (e-mail address, date and delivery status) is not removed together with your account - see section 10.

7. EatSee ads: measurement and personalisation

We advertise EatSee in Google's advertising services, among others. To see which ads bring new users, and to show EatSee ads to people who already know the app (remarketing), we link the app's usage statistics with Google's advertising platform. It may receive app identifiers on the device, selected in-app events (for example install, account creation, the start of a free trial, a purchase together with its value) and information about your plan (free or Premium). For this purpose we do not send health-related data, the content of your diary, assistant chats or data from Apple Health and Health Connect. There are no ads from other companies in the app, and we do not share this data for other companies' advertising. Google processes it as an independent controller, under the terms of its own privacy policy.

iPhone (from version 1.4): we send data for advertising purposes only if you are 18 or over and allow tracking in the system prompt (App Tracking Transparency) - in that case also with your device's advertising identifier. The legal basis is your consent (Art. 6(1)(a) GDPR). Without that consent, and before you turn 18, the app's data is used only for usage statistics. You can withdraw consent at any time in your phone's settings (Settings → Privacy & Security → Tracking) - the app applies the change the next time you open it.
Android and older versions of the app (up to 1.3.5): the app does not collect your device's advertising identifier and does not currently ask for consent to ad measurement. In-app events may be used to measure and personalise EatSee's ads on the basis of our legitimate interest in promoting our own service (Art. 6(1)(f) GDPR). You can object to this at any time by writing to kontakt@eatsee.pl (section 11). You can also turn off ad personalisation in your Google account settings.

8. Data recipients

We do not sell your data. We entrust its processing to providers that act on our instructions and only to the extent needed to run the service. They are:

a cloud infrastructure provider (US) - authentication, including Google sign-in, database, photo storage, server functions and server logs;
an artificial-intelligence provider based in the USA - analysis of photos (including fridge and cupboard photos), descriptions and recordings, speech-to-text, meal illustrations, meal plans and meal ideas, and AI Assistant answers (section 4);
a subscription management provider (US) - subscription and purchase status, including the 7-day plan, granting Premium from promo codes and referrals, and passing subscription events to usage statistics;
product analytics providers (EU and US) - app usage statistics; these services derive an approximate location (country, region) from the IP address;
an app crash and performance reporting provider (EU) - crash reports together with the device's IP address;
an e-mail delivery provider (US) - address confirmation, password reset, the welcome e-mail with a code and the newsletter;
a mobile services and notification provider (US) - delivering "plan ready" notifications through the Apple and Google notification systems, and delivering app updates; when the app checks for an update it sends this provider device and app version information and its IP address;
a web hosting provider (EU) - the server that runs the eatsee.pl website; the app also fetches blog post previews from this server, so it receives your device's IP address.

We have a data processing agreement with each of these providers which requires them to protect your data to a standard no lower than the one described in this policy and forbids them from using it for their own purposes.

Data is also received by:

Apple and Google - as independent controllers, in connection with payments in the App Store and Google Play and with Sign in with Apple or Google;
Google - as an independent controller: app data for measuring and personalising EatSee's ads (section 7) and Google Ads cookies on the eatsee.pl website (section 14);
an advertising platform provider based in the USA - an ad measurement pixel on the eatsee.pl website, loaded only after you consent (section 14);
an open, public food product database - when you scan a barcode or search for a product, your device may ask such a database about the product directly, and it receives the barcode number or the name you typed and your device's IP address;
other EatSee users - products you add to the shared barcode database and recipes added to the shared recipe database - without any information about who they came from (section 2).

We name the providers that act on our behalf by category rather than by trade name. If you want to know the current list of providers by name, write to kontakt@eatsee.pl and we will send it to you.

9. Transfers outside the EEA

Some of your data is processed outside the European Economic Area, in the United States. The following are held or processed in the US:

the database and the files of your account - your profile data, your meal diary with its photos and your meal plans - and the server functions of our cloud infrastructure provider;
the data we send to the artificial-intelligence provider (section 4), including fridge and cupboard photos and the data for AI Assistant answers;
the data processed by the subscription management provider, the e-mail delivery provider and the mobile services and notification provider;
one of the product analytics services.

We only use providers outside the EEA where we can base the transfer on one of two grounds: on a European Commission implementing decision finding an adequate level of protection (the EU-US Data Privacy Framework), where the provider is covered by it, or - where it is not - on Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR). Write to kontakt@eatsee.pl and we will tell you which ground applies to a given category of recipients and give you a copy of the safeguards.

Crash and performance reports, the second product analytics service and the eatsee.pl website are processed on servers within the European Economic Area. The analytics and crash reporting services also receive your device's IP address, from which they derive the approximate location.

10. Retention and deletion

account, profile, diary, planner and "What I have at home" data - until you delete your account; you can change or delete individual entries (for example meals, weight entries, products, allergies and exclusions) earlier in the app;
AI Assistant chats - about 30 days from the start of the chat, unless you delete them earlier or withdraw consent; reports of AI content - 90 days; the safety signal in the assistant - 7 days;
photos of your fridge, freezer and cupboards and voice recordings - we do not store them; the AI provider may keep the data sent to it for up to 30 days solely to detect abuse;
the result of reading a product label - 24 hours; the information about the author of an entry and your confirmations of product data in the shared database - until you delete your account, with the register of authors of new products kept no longer than 365 days from when the product was added;
the record of your consents to AI features and their withdrawal - until you delete your account; the consent and data of a trial scan before creating an account - 30 days;
marketing consent (status, date and text version) - until you withdraw consent or delete your account; the newsletter send record - for the limitation period for claims relating to the sending, including after you delete your account;
data needed for billing - for the period required by Polish tax and accounting law (as a rule 5 years, counted from the end of the year in which the tax payment fell due);
records that protect against abuse - for as long as that purpose requires, no longer than 24 months from their last use, including after you delete your account;
usage statistics - no longer than 24 months; crash and performance reports - no longer than 12 months; server logs - no longer than 90 days.

You can delete your account directly in the app (Profile → Account → Delete account). If you cannot access the app, write from the e-mail address linked to your account to kontakt@eatsee.pl - we will delete the account and confirm it by e-mail within one month at the latest.

Deleting your account immediately and permanently removes your login account, profile, meal diary together with its photos and illustrations, favourites, water and weight entries, meal plans, planner preferences (including allergies), your "What I have at home" list and meal ideas, your AI Assistant chats and your reports of AI content, the record of your consents to AI features, automatic planning settings together with the notification token, your private recipes, usage counters, the Premium status stored by EatSee and any unused 7-day plans. If a step cannot be completed straight away, we retry it automatically for up to 30 days.

After deletion the following remain:

recipes from your plans that were previously added to the shared recipe database, and products you added to the shared barcode database - no longer linked to your account;
records that protect against abuse: redeemed promo and referral codes, the sent welcome e-mail with a code and daily e-mail sending limits, with an account identifier or a hash of the e-mail address;
the newsletter send record with your e-mail address, date and delivery status;
the record of a 7-day plan purchase (store transaction identifier, date and status) - no longer linked to your account, for billing and complaints;
usage statistics, crash and performance reports and server logs - until the end of the periods given above;
the purchase history held by the subscription management provider - like the data needed for billing; your purchase history in the app store and the data passed to Google for advertising purposes - under those companies' rules;
the data sent to the AI provider - for up to 30 days, solely to detect abuse;
data EatSee wrote to Apple Health or Health Connect - delete it in those apps;
settings and temporary files on your phone - remove them by uninstalling the app.

The shared databases, the records that protect against abuse and the newsletter send record are not removed automatically together with your account. You can ask us to remove them by writing to kontakt@eatsee.pl. Remember, too, that deleting your account does not cancel a subscription in the App Store or Google Play - do that in the store settings.

11. Your rights

You have the right to: access your data and obtain a copy of it, rectify it, erase it, restrict processing, data portability, object to processing based on our legitimate interest, and withdraw consent at any time - without affecting the lawfulness of processing carried out before the withdrawal.

Right to object. You can object at any time to the processing of your data based on our legitimate interest - in particular to usage statistics, to matching Premium offers to you, and to measuring and personalising EatSee's ads on Android and in older versions of the app (section 7). We will always respect an objection to processing for marketing purposes. Write to kontakt@eatsee.pl.

You can also withdraw consents directly: consent to AI features and to the AI Assistant in Profile → Privacy & AI, marketing consent in Profile → EatSee newsletter, consent to tracking on iPhone in your phone's settings, and access to Apple Health and Health Connect in their settings. You can delete assistant chats in the chat history.

Send any request by e-mail to kontakt@eatsee.pl. The app currently has no feature for downloading a copy of all your data, so we will prepare and send that copy on request. You may also lodge a complaint with a supervisory authority - in Poland, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

12. Minors

New accounts can be created by people aged 16 and over. If, when creating an account, you enter a date of birth showing that you are younger, we delete the account along with the e-mail address. Accounts of people aged 13 and over created earlier, including in older versions of the app, keep working. We do not direct the service to children under 13 and do not knowingly collect their data - if we learn that such a child has created an account, we will delete it along with the data.

The AI Assistant and marketing consent are available from age 16. For people under 18 the app does not set a weight loss goal (it calculates a weight maintenance goal instead), and the AI Assistant does not give them weight loss advice. On iPhone (from version 1.4) we do not show the tracking consent prompt to people under 18, so their data is not used for advertising purposes (section 7). We determine age from the date of birth in your profile.

13. Security

Data is encrypted in transit (TLS) and access is restricted by permission rules - each user can only access their own data. The exceptions are the shared databases described in section 2: all users of the app can read the shared product database (barcodes), and recipes from the shared recipe database may appear in other users' plans - in both cases without any information about who they came from.

14. Cookies and device storage

The eatsee.pl website uses Google cookies (Google Ads) and a pixel of another advertising platform, whose provider is based in the USA, solely to measure ad performance and site traffic. The cookies are set and the pixel is loaded only after you consent, which you can grant or decline in the banner on your first visit - your choice is remembered in your browser. You can change or withdraw it at any time with the Cookie settings link in the eatsee.pl footer (Ustawienia cookies on Polish pages), or by clearing the site data. Without consent we rely only on cookieless, aggregate measurement. The website also stores your chosen theme (light or dark) in your browser. The e-mail confirmation and password reset page loads a script from our authentication provider.

The EatSee mobile app does not use cookies. It does, however, store settings and the identifiers needed for usage statistics, crash reports and ad measurement (section 7) on your phone. On iPhone, the app can access your device's advertising identifier only after you allow tracking in the system prompt. On Android, the app does not collect your device's advertising identifier.

15. Changes to this policy

We will announce material changes to this policy in the app or on this page. If a change requires your consent, we will ask for it in the app. The current version is always available at this address.