Privacy policy

Effective 30 October 2026

The short version

Your meals, photos, workouts, weights and health answers are stored on your phone. If you create an account (an email code or Sign in with Apple), a private copy is saved to our server so a new phone gets it all back. Only your account can open it.
When you photograph or describe a meal, and only after you allow it, that photo or text is sent to our server and on to Anthropic's Claude to estimate the food. If you also allow it, meal photos go to Google's Gemini as well, for a more accurate estimate. We don't keep your photos, and neither AI provider trains on them.
A generic dish name, such as "chicken rice bowl", goes to Google's Gemini to draw a picture that every user of that dish shares.
Without an account, Indar uses an anonymous ID. With one, we hold your email address (or Apple's private relay address). We don't sell data, show ads, send marketing email or track you across other apps.
If you join the waitlist on this website, we keep your email address to send one email when Indar launches, and delete it 30 days after that.
If you switch it on, Indar reads and saves body weight only in Apple Health or Health Connect.
You can export everything, turn AI and analytics off, and delete everything from Settings.

1. Who we are

Indar is made by Alexander Nilar, a sole trader in Sydney, Australia ("we", "us"). We are responsible for your personal information under the Australian Privacy Act 1988 and, where it applies to you, the EU and UK General Data Protection Regulation. Contact us at support@indar.app.

2. Your phone and your account

Indar keeps your data in a database on your device. This includes your onboarding answers (such as age, sex, height, weight, goal, activity, training and health screening answers), your targets, meals and their photos, progress photos, workouts and sets, weigh-ins, notes and settings. Your phone's own backup (iCloud or Google) may include it, under Apple's or Google's terms.

Without an account, none of this is on our servers. If you create an account, a compressed copy of it, your progress photos and smaller copies of your meal photos are saved in a private folder on our server, so you can restore them on another phone. The copy is replaced as you use the app. Our storage rules let only your signed-in account read or write that folder; we don't look at it, except to help you when you ask us to.

3. What leaves your phone, and why

What	Sent to	Why
A random anonymous ID, created on first use, or your account ID once you create an account	Our server (Supabase)	To keep the AI service available to genuine users and limit abuse.
Your email address, if you create an account with an email code; or, with Sign in with Apple, a sign-in token and the email Apple shares (which can be a private relay address)	Our server (Supabase), and Resend to send the 6-digit sign-in code	To create your account and sign you in on a new phone. We don't send marketing email.
Your account's private copy: everything you've logged, your answers and settings, progress photos and smaller copies of meal photos	Our server (Supabase storage)	So your data comes back on a new or lost phone. Only if you create an account.
Body weight, only if you switch on Health sync	Apple Health or Health Connect, on your phone	Weigh-ins from your scale or other apps come in, and weights you log go out. Nothing else is read or written, and Health data is never sent to our server except as part of your account's private copy.
A meal photo, or the words you typed or said about a meal, and any correction you make	Our server, then Anthropic (Claude); photos also Google (Gemini) if you allow it	To estimate the food and its calories, protein, carbs and fat. Only with your permission, asked before the first one. Photos are resized and stripped of location data first. Voice entries are turned into text by your phone's own speech service; we never receive audio.
A generic dish name, such as "spaghetti bolognese" or "iced coffee"	Our server, then Google (Gemini)	To show a consistent picture of the dish. The picture is stored once and shared by everyone who logs that dish. Nothing about you is attached.
A barcode number	Open Food Facts, directly from your phone; for its picture, our server, Open Food Facts and Anthropic (Claude), which names the product generically	To look up the product's nutrition label and show a picture of what it is.
How AI estimates were changed: for a meal the AI worked out, each food's name, the amount it gave and the amount you kept (or that you removed it), with your country and the date	Our server	To make estimates more accurate for everyone. Sent without your account, device or any ID, so it can't be traced back to you. Only with AI food recognition and Share usage data on.
Usage events, such as "a meal was logged by photo" or "a workout was finished", with counts, choices and coarse groups (your plan, country and training choices) only	PostHog	To understand which features help and where people get stuck. Never food names, weights, photos or health answers, and not linked to your account. You can turn this off in Settings.
Crash reports: what went wrong in the code, device model, system and app version	Sentry	To find and fix crashes. No screenshots, no taps or text from the screen.
Purchase receipts and an anonymous customer ID	Apple or Google, and RevenueCat	To start and check your subscription. Apple or Google take payment; we never see your card.
Emails you send us	Our support inbox (Resend, then our server)	To answer you and improve the app.

Reminders and rest-timer alerts are scheduled on your phone; no push service is involved.

The launch waitlist

If you join the waitlist on indar.app, we store your email address, when you joined, which page you joined from and your country (worked out from your connection, not stored as an IP address) on our server (Supabase) and with Resend. We use it for one thing: an email when Indar is out on the App Store and Google Play. The legal basis is your consent. Every email has an unsubscribe link, or email support@indar.app to be removed straight away.

Our legal bases under the GDPR are: your consent for AI food recognition and anything involving health information; performance of our contract with you for the app and your subscription; and our legitimate interest in keeping the app secure, reliable and improving, for crash reports and usage events, which you can turn off.

4. Who processes it for us

These companies process data only to provide their service to us, under their terms:

Supabase (United States): our server, accounts and sign-in, your account's private copy, and shared dish pictures.
Anthropic (United States): Claude, which estimates meals. Anthropic doesn't use our API data to train its models, and deletes inputs and outputs within 30 days unless they're flagged for a safety review or the law requires longer.
Google (Gemini API, paid tier): reads meal photos when you allow it, and draws dish pictures from a dish name. Google doesn't use our prompts or responses to improve its products, and logs them only for a limited time to detect and prevent abuse, as its terms require.
Open Food Facts (France): an open food database for barcode lookups. Like any website, it receives your IP address when your phone contacts it.
PostHog (United States): product analytics, with session recording turned off and IP-based location disabled.
Sentry (United States): crash reporting.
RevenueCat (United States): subscription status.
Resend (United States): sends sign-in codes and the launch email to the waitlist, and receives emails sent to support@indar.app.
Apple: Sign in with Apple, if you choose it.

We don't sell or rent personal information, we don't use it for advertising, and we don't share it with data brokers.

5. Health information

Your weight, body measurements, progress photos, food intake and health screening answers are health information. They stay on your phone unless you create an account, when a private copy is saved for you as in section 2. Food photos and descriptions go to the AI only as in section 3 and only after you agree. Data from Apple Health or Health Connect (body weight only) is used only to show your weight trend and set your targets. We never use health information for advertising, never sell it, and never share it for anyone else's purposes.

6. How long we keep things

Data on your phone: until you delete it, or delete the app.
Your account and its private copy, photos included: until you delete them with Delete all data, which removes the account and everything saved with it. A photo you delete is removed from the copy within a day.
Meal photos sent for AI estimates: not stored by us. Anthropic's retention is in section 4.
Typed or spoken meal descriptions: the estimate (food names and amounts) is kept for up to 30 days under a one-way code made from the wording and your country, so the same words always get the same answer. It carries no ID and can't be linked to you, and the wording itself isn't kept.
Your anonymous ID and its daily usage counts: deleted when you use Delete all data. Daily counts are removed automatically after 90 days.
Shared dish pictures: kept, as they contain no personal information.
Estimate corrections: kept to improve estimates, as they carry no ID and can't be linked to you.
Usage events and crash reports: up to 12 months, then deleted or aggregated.
Support emails: until your request is resolved, then up to 12 months.
Waitlist email addresses: deleted 30 days after the launch email is sent, or as soon as you ask.

7. Your choices and rights

Turn off AI food recognition: Settings, AI food recognition. Barcodes, Recent and manual edits keep working.
Turn off usage analytics: Settings, Share usage data.
Export: Settings, Export your data, gives you your food, weights, workouts and target changes as spreadsheet files.
Delete: Settings, Delete all data, erases everything on your phone and deletes your account (or anonymous ID), its private copy and photos, and its usage counts from our server. See Delete your data.
Health sync: switch it off in Settings, and remove Indar's access in Apple Health or Health Connect.
Ask us: you can ask to access, correct or delete information we hold, object to processing, or withdraw consent at any time, by emailing support@indar.app. We may ask for your account email or the support ID shown in Settings so we can find your records.

If you're unhappy with how we've handled your information, tell us first. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in the EU or UK, your local data protection authority.

8. Security

Data in transit is encrypted with HTTPS, and our provider encrypts stored data. AI and service keys live only on our server, never in the app. Storage rules let each account reach only its own private copy, and anonymous installs can't store anything there; we test these rules against the live server. No system is perfectly secure; if a breach affects you, we'll tell you and the regulator as the law requires.

9. Where data is processed

Our server and most providers are in the United States; Open Food Facts is in France. When data leaves Australia, the EU or the UK, we rely on our providers' contractual safeguards, such as the EU Standard Contractual Clauses, and take reasonable steps so it's handled consistently with Australian privacy law.

10. Age

Indar is for adults aged 18 and over. We don't knowingly collect information from anyone younger. If you think a minor has used Indar, email us and we'll help delete it.

11. Changes and contact

If we change this policy, we'll update the date at the top, and tell you in the app if the change is significant. Questions: support@indar.app.