How Piato handles your data.

Who we are

Piato is a nutrition diary. You sign in, log meals, and see calories and macros matched to USDA and Open Food Facts records. The same account works on the iPhone app and the website.

What we collect

• Account. Name, email, and a profile photo URL from Google or Apple when you sign in, plus a Piato user id.
• Diary. Meals, ingredients, amounts, barcodes, goals, saved meals, shopping lists, and notes you enter.
• Photos. Meal or label photos you choose to send for logging. The iPhone uses the system camera or the system photo picker. iOS may ask for camera or photo-library permission for that.
• Location. Only if you allow it, and only while you look for a nearby store or restaurant. That coordinate is sent with the lookup. Piato does not write it into the diary.
• Coach chat. Text you send to Coach and the replies stored with your account.
• Garmin. If you connect a watch, Piato stores the daily summary Garmin sends (steps, sleep, active calories, resting heart rate) and includes those figures in the coach's context. Disconnecting in You deletes them.
• Apple Health. If you turn that connector on, the iPhone reads steps, sleep, active calories, and resting heart rate and Piato stores those daily summaries for the coach. Piato does not write to Apple Health. Turning the connector off deletes the summaries.
• Diagnostics (when enabled on the server). Crash and app-open signals from the phone, used to keep the app running. This path is not always deployed.

Third-party AI

When you use Coach chat, Piato sends the text you type to OpenAI so the app can identify food and draft a log. Meal and Nutrition Facts photos are a separate share: the iPhone asks before the first photo analysis, and you can turn Send pictures to OpenAI for analysis off anytime in You. When that setting is off, you can still log by typing or barcode. Camera permission is not either of those permissions.

We do not know how long OpenAI retains those requests. Treat that retention as unknown. Do not send photos or text you are not willing to have processed by that vendor.

Other processors

• Google or Apple for sign-in.
• Our hosting and database (currently Vercel and Supabase). Server and access logs may exist. Retention for those logs is unknown.
• USDA FoodData Central and Open Food Facts for catalog lookups. Lookups use the food you search or scan, not your name.
• Garmin when you connect a watch. Piato sends the connection to Garmin and receives the daily summary. Those figures go to OpenAI only as part of a coach question.

We do not use advertising SDKs, do not sell personal data, and do not use App Tracking Transparency tracking.

How long we keep it

Account and diary data stay until you delete the account. We have not published a shorter automatic expiry. Vendor (OpenAI, host) retention is unknown and is not controlled by this policy.

Deleting your account

In the iPhone app, open You → Delete account. On the website, use Settings. That removes your Piato user row and related diary, goals, and catalog data we store. If you signed in with Apple, we revoke the Apple tokens we hold when those credentials are configured. Deleting Piato does not delete your Google or Apple account. Copies already processed by OpenAI are subject to that vendor.

Children

Piato is not directed at children under 13. Do not create an account for a child if that is not allowed where you live.

Changes

If this policy changes, we will update the date above. Continued use after a material change means you should re-read this page.