Privacy policy

Effective date: [MAINTAINER: date of publication]
Applies to: the Vertree iOS app and vertree.io

Vertree is a meal-logging app. The point of this page is to tell you, in plain language, what Vertree stores about you, where it goes, and how to have it deleted. Short version: your meal log is yours. We use it to run the app and for nothing else. There are no ads, nothing is sold, and no one else gets it.

Vertree is made and operated by Vertree LLC (“we”, “us”).

What we collect

Your account. You sign in with Apple. From Apple we receive a unique identifier for your account and, if you choose to share it, your name and email address. Apple lets you hide your real email behind a relay address; Vertree works fine with that. We don’t ask for a password, a phone number, or anything else.

Your meal log. This is the substance of the app, and it’s what you’d expect:

• the sentences you type to describe meals (“two eggs, toast, black coffee”), and which meal of the day each one was;
• the foods Vertree works out from those sentences, with their estimated amounts and nutrition figures, and any corrections you make;
• your daily targets (calories, protein, fat, carbs, Pull), and any day-specific changes to them;
• meals you pin as favorites;
• plates you plan before eating, if you save or log them;
• if you use the mindfulness practices in the app, a record of each session — which practice, when, how long, and whether you finished;
• display preferences, such as whether the Pull number is hidden;
• a per-account list of foods you’ve logged before, so Vertree can recognize them faster next time.

Feedback you send. If you use the megaphone in the app, we store your message, the screen you sent it from, and, only if you attach one, a screenshot. Screenshots are stored privately and are looked at only when the message needs it.

Technical records. To run the service reliably we keep:

• a record of each time a meal sentence is analyzed — the sentence, what came back, which model produced it, and whether it succeeded. We use these to find and fix analysis mistakes and to improve how Vertree reads meals over time;
• a count of analyses per account, used to enforce fair-use limits;
• the usual server logs (timestamps, error messages) for keeping the lights on.

What we don’t collect. No location. No contacts. No advertising identifiers. No tracking across other apps or websites. No health data from HealthKit or any other app. [MAINTAINER: confirm no HealthKit integration is planned before launch, or reword.] The app contains no analytics or advertising SDKs.

How we use it

• To run the app: store your log, sync it between your devices, show you your day and your grove.
• To analyze your meal sentences into foods and figures (see “Who else touches your data”).
• To answer your feedback and fix bugs.
• To improve how Vertree reads meals, by reviewing analysis records where the app got something wrong.

We do not use your data for advertising, we do not sell it, and we do not share it with anyone except the service providers below, who process it on our behalf.

Who else touches your data

Vertree runs on a small number of service providers. Each one handles only what it needs:

Apple — sign-in, and app distribution through TestFlight and the App Store. Apple may collect crash reports and usage statistics under its own privacy policy if you have opted into sharing them with developers.

Supabase — hosts our database, where your account and meal log live. Data is stored in [MAINTAINER: hosting region from the Supabase project settings], encrypted in transit and at rest. Your data is isolated per account: the database itself refuses to serve one person’s rows to another.

Google Cloud (Vertex AI) — analyzes your meal sentences. When you log a meal, the sentence you typed — and only that, plus a short list of foods you’ve logged before to help it recognize them — is sent to Google’s Vertex AI service, which returns the foods and figures. Under Google Cloud’s terms for this service, Google does not use this content to train its models and does not retain it beyond processing the request. [ATTORNEY: confirm against Google Cloud’s current data-processing terms for Vertex AI.]

Cloudflare — hosts vertree.io and routes our email. Visiting the website sends Cloudflare the ordinary technical details of a web request (your IP address, browser type), which it uses to serve the page and defend against abuse. The website sets no cookies and runs no analytics. [MAINTAINER: if Cloudflare Web Analytics is turned on at launch, add one sentence — it’s cookieless and doesn’t identify visitors.]

We don’t use any other third-party service that receives your data.

How long we keep it

We keep your account and meal log for as long as you have an account. Feedback and its screenshots are kept until they’ve been handled and for a reasonable time after, so we can follow up. Analysis records are kept while your account exists.

Deleting your data

Email support@vertree.io from the email address on your account (or from the app’s feedback megaphone, so we can see which account it’s from) and ask us to delete your account. We will delete your account, your meal log, your pins, your mindfulness sessions, and your feedback and screenshots within 30 days, and confirm by email. Analysis records (the meal sentences and what came back) are anonymized rather than deleted: the link to your account is removed, so they can no longer be tied to you. [ATTORNEY: “anonymized” here means the account reference is cleared; the sentence text itself is kept. Confirm this wording is sufficient, or whether “de-identified” is the safer term.]

An in-app “Delete account” option is planned before public launch. [MAINTAINER: remove this sentence once it ships and describe the button instead.]

Deleting the app from your phone does not delete your account.

Your rights

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected or deleted, to receive a copy of it, or to object to how it’s used. Email support@vertree.io and we’ll respond within 30 days. You may also complain to your local data-protection authority. [ATTORNEY: US-first product; confirm whether a CCPA/state-law section and a GDPR/UK section are needed at launch or can wait until the app is sold outside the US.]

Children

Vertree is not directed at children under 13, and we don’t knowingly collect data from them. If you believe a child has created an account, email us and we’ll delete it. [ATTORNEY: confirm the age line against the App Store rating and any state-law minimum.]

A note on sensitivity

A meal log is personal. Some people use Vertree precisely because their relationship with food has been hard. We treat your log accordingly: it’s stored privately, it’s used to run the app and for nothing else, and nothing in the app or on this site grades you.

Changes to this policy

If we change this policy in a way that matters, we’ll say so in the app and update the date at the top. The current version always lives at vertree.io/privacy.

Contact

support@vertree.io Vertree LLC [MAINTAINER: postal address, if the attorney says one is required.]