Privacy Policy

What Fuelist does

Fuelist creates personalized AI meal plans, recipes, nutrition estimates, shopping lists, pantry information, food-product information, and cooking guidance. You create an account, complete onboarding, receive a generated plan, manage your recipes and shopping lists, scan food barcodes, and can subscribe to Fuelist Pro.

Information Fuelist collects or processes

1. Account and contact information

• Email address
• Display name
• Your Supabase account ID (a UUID that identifies your account)
• Account and email-verification status
• Authentication session information
• Whether transactional emails, such as a verification or password-reset message, were sent or delivered

Password sign-in is handled by Supabase. AlyraLabs does not receive or store your readable, plaintext password.

How you sign in

You can create a Fuelist account with an email address and password, with Sign in with Apple, or with Sign in with Google.

When you use Sign in with Apple or Sign in with Google, we receive only your email address and your name from that provider. We never receive your password, and we do not request access to any other data in your Apple or Google account, including contacts, calendar, files, or fitness data.

If you choose Apple's Hide My Email option, Apple gives us a private relay address instead of your real one. Fuelist works normally with a relay address, and any email we send reaches you through Apple's relay.

Authentication is handled by Supabase, our authentication and database provider. We do not store your password.

You can revoke Fuelist's access at any time in your Google account permissions or in Settings → Apple ID → Sign in with Apple on your device. Revoking access does not by itself delete your Fuelist account; use account deletion in the app for that.

2. Profile, wellness, and nutrition information

Depending on what you choose to provide, this can include:

• Age
• Biological sex
• Height
• Current weight and target weight
• Activity level
• Weight, fitness, wellness, and nutrition goals
• Calculated daily calorie and macronutrient targets
• Custom calorie, protein, carbohydrate, and fat targets
• Dietary style and any custom diet description
• Food allergies and other dietary restrictions
• Foods you dislike and meals you reject
• Favorite cuisines
• Meal frequency, snack, and dessert preferences
• Cooking-time and batch-cooking preferences
• Plan duration
• Grocery budget level and an optional custom weekly budget
• Pantry staples and custom pantry items

You provide this information voluntarily so Fuelist can personalize your meal plans, recipes, nutrition estimates, and shopping lists. This is sensitive, health-related information, and we treat it accordingly.

3. Content you create or that the app generates

• AI-generated meal plans, plan dates, and durations
• Recipe names, meal types, and scheduled days
• Recipe ingredients, amounts, units, instructions, servings, tags, and preparation times
• Nutrition estimates, including calories, protein, carbohydrates, fat, and fiber
• Favorite recipes and rejected meals
• Shopping-list items and their checked or unchecked status
• Pantry items
• Custom “Ask the Chef” meal requests
• Generated shopping-price estimates and package guidance
• Generated dish and ingredient image-search descriptions
• Referral source and promo codes
• Streak and app-progress information
• Reminder preferences and reminder times

Your custom “Ask the Chef” text is sent to the AI service to fulfill that request. Fuelist's current app code does not intentionally store that free-text request in your profile or cloud database. We cannot promise that infrastructure providers retain it for zero time, because their own processing and retention terms may apply.

4. Photos and camera information

• You can optionally choose or capture a profile photo.
• Your selected profile photo is stored on your device and synchronized to a private Supabase Storage bucket connected to your account.
• Camera access is also used to scan grocery-product barcodes.
• Fuelist does not use facial recognition and does not continuously record the camera.
• Raw barcode-camera frames are processed for scanning and are not intentionally saved.
• The resulting barcode number is sent to Open Food Facts to retrieve product and nutrition information.
• You can decline camera access and still use the rest of the app.

5. Purchase and subscription information

Purchases are processed by Apple and managed through RevenueCat. Fuelist may process:

• Your RevenueCat App User ID, which is your Fuelist/Supabase account UUID
• Apple transaction and receipt information
• Product and package identifiers
• Monthly or yearly subscription selection
• Trial eligibility and trial status
• Purchase dates, subscription status, and renewal status
• Cancellation, uncancellation, and expiration events
• Billing issues and product changes
• Refund information
• Price, currency, and estimated revenue information
• Restore-purchase activity and promo access status

Apple processes the actual payment. Fuelist and AlyraLabs do not receive your full payment-card or bank-account details. RevenueCat is connected to PostHog and may send subscription lifecycle events to your PostHog profile so we can measure trials, purchases, renewals, cancellations, expirations, and other subscription outcomes.

6. Product analytics and app usage

Fuelist uses PostHog for product analytics. The app intentionally sends a limited set of custom events, such as:

• Onboarding started, steps viewed, and onboarding completed
• Account creation and authentication completion
• Plan generation started, completed, or failed, plus duration and requested length
• Paywall viewed and subscription package selected
• Purchase started, completed, restored, or failed
• Recipe opened, meal swapped or regenerated
• Shopping mode started and shopping-list item checked

PostHog is identified using your Fuelist/Supabase account UUID. Fuelist's custom analytics implementation does not intentionally send PostHog your email address, profile name, food or recipe names, exact health measurements, onboarding answers, allergy details, or free-text “Ask the Chef” requests.

Fuelist currently disables PostHog session replay, automatic screen capture, automatic element-interaction capture, automatic lifecycle events, surveys, and feature flags. PostHog and other technical providers may still automatically process limited technical information such as IP address, approximate region inferred from IP, device type, operating-system version, app version, timestamps, and network or request metadata.

7. Notification information

• Fuelist asks for notification permission only when it is needed.
• Reminders can include meal reminders, weekly planning reminders, shopping reminders, plan-progress reminders, streak reminders, and trial-ending reminders.
• Current reminders are scheduled locally using Apple's notification system.
• Fuelist does not currently use a third-party push-notification provider.
• Notification preferences are stored with your local profile settings.
• You can disable notifications in Fuelist or in iOS Settings.

8. Food and product lookup information

• Ingredient or nutrition search queries may be sent through Supabase to USDA FoodData Central.
• Scanned barcode values are sent directly to Open Food Facts.
• Product names and purchase units may be sent through Supabase to OpenAI to generate package explanations, price ranges, and shopping guidance.
• Common ingredient, food, image, and product lookup results may be placed in shared caches so the same public information does not need to be generated repeatedly. These shared cache entries are not intended to contain your account contact information.

9. Information stored on your device

Fuelist uses local storage, including Apple UserDefaults and SwiftData, for:

• Profile settings and onboarding state
• Meal plans, recipes, shopping lists, and pantry information
• Cached nutrition and image information
• Notification preferences
• Subscription cache and status
• AI usage counters and recovery data
• App appearance and unit preferences

Local information stays on your device until you delete it, delete your account through the app, clear Fuelist's local data, or remove the app, subject to iOS backup behavior.

Service providers & data sharing

Fuelist relies on the following providers to operate. Information is shared with them only for the purposes described here.

Supabase

Authentication, the PostgreSQL database, private profile-photo storage, cloud synchronization, server-side Edge Functions, account deletion, AI usage limits, and security.

Resend

Email verification, password-reset messages, email-change confirmations, and other transactional account emails.

OpenAI

AI meal-plan and recipe generation, “Ask the Chef” requests, meal and ingredient image generation, product-package explanations, and estimated shopping-price ranges and guidance. The information sent for meal planning may include age, biological sex, height, weight, goals, activity level, nutrition targets, diet preferences, allergies, restrictions, disliked foods or meals, favorite cuisines, pantry items, cooking preferences, plan length, and grocery budget.

PostHog

Product analytics, onboarding and feature-conversion measurement, paywall and purchase-funnel measurement, and subscription lifecycle analysis.

RevenueCat

Fetching subscription products and offerings, trial eligibility, purchasing and restoring subscriptions, receipt validation, entitlement access, subscription analytics and lifecycle events, and sending applicable subscription events to PostHog.

Apple

Sign in with Apple, including the optional Hide My Email relay; app distribution; TestFlight; in-app purchases; subscription billing; StoreKit transaction processing; App Store server notifications; refunds; and subscription management.

Google

Sign in with Google. If you choose it, Google provides Fuelist only the name and email address associated with the account you select. Fuelist does not request other Google account data.

USDA FoodData Central

Ingredient and nutrition-data lookup.

Open Food Facts

Barcode, brand, product image, processing score, and nutrition lookup.

What Fuelist does not collect

Fuelist does not currently request or intentionally collect:

• Precise GPS location
• Address-book contacts
• Microphone or audio recordings
• Apple HealthKit records
• Motion or fitness-sensor records
• Government identification numbers
• Payment-card or bank-account numbers
• Advertising identifiers for targeted advertising
• Biometric face templates
• Cross-app browsing history

Providers may still infer approximate location from IP addresses for security, fraud detection, localization, or analytics.

How information is used

Fuelist uses the information described above to:

• Create and manage your account
• Verify email addresses and help recover accounts
• Personalize meal plans and recipes
• Calculate nutrition targets and estimates
• Respect your allergies and dietary restrictions
• Create shopping lists and pantry recommendations
• Provide food and barcode information
• Generate images and buying guidance
• Synchronize your information across devices
• Process and restore subscriptions and determine Fuelist Pro access
• Provide reminders
• Measure onboarding and feature performance
• Diagnose failures, prevent abuse, and enforce AI usage limits
• Maintain security
• Respond to support and privacy requests
• Meet legal, tax, accounting, fraud-prevention, and platform obligations

Selling, advertising & tracking

• AlyraLabs does not sell your personal information.
• Fuelist does not currently display third-party advertising.
• Fuelist does not use your information for cross-app behavioral advertising.
• PostHog is used for first-party product analytics.
• RevenueCat and PostHog are linked for subscription and product analytics, not advertising.

If these practices ever change, we will update this policy and any applicable consent flows.

Storage, security & international processing

• Your data may be stored on your device and in Supabase-hosted infrastructure.
• Service providers may process data in the United States or other countries where they operate.
• AlyraLabs uses reasonable administrative, technical, and organizational safeguards to protect your information.
• No internet transmission or storage system can be guaranteed completely secure.

Retention & deletion

• Up to five recent plans are stored on your device. Only your active plan is stored in the cloud, and older plans are removed from our servers on each sync.
• “Ask the Chef” chat transcripts are never stored by Fuelist. The text needed to answer your request is processed by the AI provider, whose own processing and retention terms may apply.
• Account and synchronized profile data are generally retained while your account is active.
• You can delete your Fuelist account from inside the app.
• The in-app deletion process deletes your Supabase authentication account, synchronized profile, plans, plan meals, shopping items, AI usage records, and private profile photo.
• Fuelist also clears local plans, profile settings, and scheduled notifications during a successful account deletion.
• Deleting your Fuelist account does not automatically cancel an Apple subscription. You must manage or cancel subscriptions through Apple.
• Apple, RevenueCat, PostHog, email-delivery providers, and infrastructure providers may retain limited transaction, analytics, security, fraud-prevention, backup, or legal records under their own obligations. This means some records connected to your account may not disappear immediately.
• You can contact AlyraLabs to request access, correction, or deletion assistance.

Your privacy choices

You can contact AlyraLabs to:

• Request access to your personal information
• Correct inaccurate information
• Request deletion
• Ask for a portable copy where applicable
• Object to or restrict certain processing where applicable

You can also, at any time:

• Withdraw optional permissions through iOS Settings
• Disable notifications
• Remove or replace your profile photo
• Manage or cancel subscriptions through Apple

The specific legal rights available to you depend on your location. California residents may have rights under the CCPA/CPRA, including rights to know, correct, and delete covered personal information and to opt out of sale or sharing. AlyraLabs does not sell personal information or share it for cross-context behavioral advertising. Residents of the European Economic Area, United Kingdom, or Switzerland may have rights under the GDPR or similar law, including access, correction, deletion, portability, restriction, and objection, and may lodge a complaint with their local supervisory authority. To exercise a right, email fuelist@alyralabs.com.

Children

Fuelist is not directed to children under 13, and AlyraLabs does not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will take appropriate steps to delete it.

Changes to this policy

AlyraLabs may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. We may communicate material changes through the app, the website, or another reasonable method.

Contact us

If you have privacy questions or requests, please reach out. We are happy to help.