Atwater privacy policy.
Atwater is made by Twistor Labs Private Limited (“we”), Hyderabad, India. This policy explains what the app stores, where it is kept, and the few things that leave your phone.
The short version
Food recognition and your health insights are worked out on your phone. Your meal photos, meal log, profile and health data are never sent to us or to anyone else. There is no account, no analytics, no crash reporting, no tracking and no ads. We have no server that holds your data, so there is nothing of yours for us to see, sell or train on.
What stays on your phone
The app keeps the following in its private storage on your phone:
- Your profile: height, weight, age, sex, goal, activity level and workouts per week, used to work out your daily targets.
- Your daily targets for calories, protein, carbs and fat.
- Your meal log: time, date, dish name, serving size, calories, protein, carbs, fat and how confident the recognition was.
- A copy of the photo of each meal you log. It is deleted when you delete the meal. Photos in your library are never changed.
- Health numbers the app reads, if you connect Apple Health or Health Connect (see below), and the daily scores worked out from them.
- Your food corrections and how often you log each dish, so the app can suggest the foods you usually pick.
- Settings: theme, units, reminders, your free-scan count and the recognition model in use.
- The recognition models, a food nutrition table, and the results of barcodes you have scanned, so a product scanned once works offline.
All of it is deleted when you uninstall the app.
Nutrition data comes from USDA FoodData Central. Packaged food data comes from Open Food Facts, under the Open Database License.
Apple Health and Health Connect
Connecting Apple Health (iPhone) or Health Connect (Android) is optional and part of Atwater Pro. You choose each type of data in the system permission screen and can change your choice at any time in your phone's settings.
- What Atwater writes: the nutrition of the meals you log (calories, protein, carbs, fat).
- What Atwater reads: steps, active and resting energy, workouts, sleep, resting heart rate and heart rate variability. Fitness bands and watches that save to Apple Health or Health Connect reach Atwater this way.
- How it is used: only on your phone, to show your daily Fuel, Burn and Recovery and to suggest how much you still need to eat.
- What we never do: send it off your phone, store it in iCloud or any cloud of ours, use it for advertising or marketing, sell it, or share it with anyone.
What leaves your phone
Your meal photos, meal log, profile and health data: never. Only these leave:
- Barcode lookups. If you scan a packaged food's barcode, the barcode number is sent to Open Food Facts (openfoodfacts.org) to fetch its label nutrition. Open Food Facts sees your IP address and the app version. Nothing else is sent, and the result is kept on your phone.
- Optional larger model. The standard recognition model is built into the app. If you choose the Max accuracy engine in Settings, it downloads once from Hugging Face (huggingface.co); Hugging Face sees your IP address and app version. No personal data is sent.
- Wider dish recognition. If you tap Download on the Wider dish recognition card in Settings, the app fetches a second recognition model and its dish list (about 100 MB) once from Hugging Face (huggingface.co/TwistorLabs/atwater-food-reranker). Hugging Face sees your IP address and app version. No photo or personal data is sent, and recognition with it still runs on your phone. Remove it any time in Settings.
- Purchases. Atwater Pro is sold through the App Store or Google Play, which handle the payment; we never see your card details. RevenueCat manages subscriptions for us and receives an anonymous app user ID, your purchase history, the device model, OS and app versions, and an IP address. It does not receive your photos, meals, profile or health data.
- Android backup. If Android backup is on for your phone, Android copies your meal log, profile, targets and settings to your own Google account. Photos, health data and models are not included. We never see this backup; you can turn it off in your phone's settings.
- iPhone backup. If iCloud Backup is on, iOS includes the app's data, including your meal log and meal photos, in your own iCloud backup. Health numbers are not stored by the app, so they are not in it. We never see this backup.
Reminders are local notifications set on your phone. There is no push server.
Permissions
The app asks for the camera, to photograph a meal or read a barcode; photos you pick from your library; notifications, for reminders you turn on; and Apple Health or Health Connect, if you connect them. It uses the internet only for barcode lookups, the optional Max accuracy download, and purchases. You can withdraw any permission in your phone's settings; the app keeps working with what it still has.
Your control
You can edit or delete any meal, change your profile and targets, disconnect Apple Health or Health Connect, and remove everything by uninstalling the app. Because we hold no copy of your data, there is nothing for us to export or delete on our side. To manage or cancel a subscription, use your App Store or Google Play account settings.
Your rights
Wherever you live, including India (Digital Personal Data Protection Act, 2023), the EU and UK (GDPR) and US states with privacy laws, you can ask us what personal data we hold about you and ask us to correct or delete it. For the app, the answer is none beyond what RevenueCat holds for purchases, which we can delete on request. We do not sell or share personal data for advertising.
Children
The app is not intended for anyone under 18.
Not medical advice
Calories, macros and daily scores are estimates from a photo and from your health data, to help you keep a log. They are not medical or dietary advice, and Atwater does not diagnose or treat any condition. Talk to a doctor or dietitian before making health decisions.
Changes
If a future version sends anything new off your phone, this page will say so before that version is released, with an updated effective date, and the app will ask you first.
The waitlist
Before launch you can join the Atwater waitlist on atwater.twistorlabs.com. We keep your email address, the consent wording you agreed to, and the dates you signed up and confirmed, to send one email on launch day and occasional product news. This is based on your consent, given with the tick box and confirmed by email. Cloudflare stores the list and sends the emails, and Cloudflare Turnstile checks the form for bots using your IP address and browser signals, which we do not store. Unconfirmed signups are deleted after 7 days. Every email has a one-click unsubscribe, which deletes your address at once; we keep only a one-way code so we never email that address again. Otherwise we delete it 24 months after our last email to you.
Contact
Questions or requests about this policy: atwater@twistorlabs.com or privacy@twistorlabs.com.