Privacy Policy — Fed AI

Effective date: 30 August 2026

Last updated: 25 September 2026

Fed AI ("we", "our", "us") is operated by Ali Abbassi trading as Fed AI (Australian sole trader, based in Brisbane, Queensland, Australia). This Privacy Policy explains how the Fed AI iPhone app and website at fedai.app handle information. Android availability is not part of the current release.

Where privacy laws apply, we will respond to applicable access, correction and deletion requests. Contact us if you need help exercising your rights.

Contact for privacy matters: support@fedai.app

1. What we collect

1.1 Account information

When you create an account we collect:

• Your email address
• A hashed password (we never see or store your plain-text password)
• The date your account was created and the date of your last sign-in

1.2 Food and health data you enter

Fed AI is a calorie and nutrition logging tool. When you use it we store:

• Food photos you take or select for analysis, plus the on-device meal photo gallery
• Meal descriptions, estimated calories and macronutrients, corrections, portions and dates
• Goals, water, favourites, reminders and other tracking data stored on this device
• Weight entries and dates you record, and Apple Health data you choose to permit on this device

1.3 Device and diagnostic data

To keep the App reliable we collect:

• Technical request data that may appear in backend hosting logs, such as IP address, request time and error status
• App diagnostic events if a diagnostic service is configured in a future release; the current iOS build does not configure Sentry

We do not request your contacts, calendar, precise location, microphone or advertising identifier. Selecting a photo gives the App access to that selection for analysis, not your entire library.

1.4 Payments

iPhone subscriptions are purchased through Apple's App Store. We verify purchase status and transaction identifiers, but do not receive your card details. Apple handles billing and refunds under its terms.

2. How we use it

We use the information above to:

• Log meals, provide nutrition estimates, track weight and, for eligible Pro records, sync uploaded meals and manually logged weigh-ins
• Authenticate you and keep your account secure
• Send you meal reminders and product notifications (only if you opt in)
• Fix bugs and improve performance
• Verify your active subscription
• Comply with law

We do not sell your personal information or intentionally submit your photos for model training. We send a selected meal photo to an external AI service for recognition; that provider's data-handling terms also apply.

3. AI food recognition — how the photo pipeline works

When you take a photo in the App:

1. The selected photo is resized and compressed on your device before analysis. The exact size can change with an app update.

2. It is uploaded over HTTPS to our backend server.

3. Our backend sends the image through Perplexity's API to an AI model for food recognition. The underlying model provider may vary when we update the service.

4. We return the proposed foods and nutrition estimates to your App. Review and correct the result before saving it as a meal.

5. The backend does not intentionally save the uploaded image as a cloud meal photo. Photos in your meal history remain on your device, while the AI provider processes the transmitted image under its own terms and retention practices. We do not promise that an external provider deletes the image within a specific number of seconds or never retains it.

4. Where your data is stored

• Accounts and eligible synced records: Supabase. Only successfully synced meals and manually logged weigh-ins can be restored on another device.
• App backend and technical request logs: Vercel.
• Food-photo analysis: Perplexity's API and the model provider serving the request.
• Device-only information: meal photos, goals, water, favourites, reminders and permitted Apple Health records are not included in the cloud meal/weight sync.

These services can process information outside Australia. Contact us if you need details about where a particular service stores or processes your information.

5. Who we share data with

To operate the iPhone app, relevant information is processed by Supabase, Vercel, Perplexity and its selected AI model provider, and Apple for subscriptions and Apple Health permissions. An optional diagnostic service would require a further policy update before activation.

We may also disclose information if required by law, subpoena, or valid legal request; to protect our rights or the safety of users; or in connection with a business transfer (in which case we will notify you and give you the choice to delete your data first).

6. Your rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account from Settings → Delete account; if server deletion cannot be confirmed, the app does not claim that your cloud data was erased. You can also contact support@fedai.app for assistance.
• Export local meal and weight entries as separate CSV files, or export tracking data as JSON. The JSON export is not a full photo or device backup.
• Object to or restrict processing
• Withdraw consent to notifications at any time (Settings → Notifications)
• Lodge a complaint with the Office of the Australian Information Commissioner or your local data protection authority

We respond to privacy requests within applicable legal timeframes. Account deletion requires server confirmation, followed by local cleanup; service backups may remain until their normal retention cycle.

7. Children

Fed AI is designed for adults aged 18 and over. If you believe a child has created an account, contact support@fedai.app so we can investigate and take appropriate action.

8. Security

We protect your data with:

• Encrypted network connections for app and backend requests
• Authentication handled by Supabase rather than storing plain-text passwords in our app
• Account-scoped access controls for cloud data

No system is perfectly secure. If a breach affects your information, we will notify you as required by applicable law.

9. Retention

• Active accounts: we keep your data for as long as your account is active.
• Inactive accounts: data may remain until you request deletion or an applicable retention rule requires another action.
• Deleted accounts: the deletion process removes account-linked live records after server confirmation; hosting logs and backups may follow separate retention schedules.

10. Changes to this policy

We may update this policy if app features or service providers change. We will show the new date here and provide any additional notice required by law.

11. Contact

Ali Abbassi (sole trader)

Brisbane, Queensland, Australia

Email: support@fedai.app

For privacy complaints in Australia you may also contact the Office of the Australian Information Commissioner.