Your privacy

Your existing Orivendi account and saved information remain the same.

Orivendi helps you track nutrition, exercise and progress. Your entries are stored for your account, not published to other users. We do not sell your personal information or use your health information for advertising. You can delete your account from Profile → Account & support.

Who is responsible

Orivendi is operated by Will Jones, who is responsible for its use of personal information. For privacy questions, requests or concerns, contact willoj83@gmail.com.

Information we use

Account information: your email address, account identifier, sign-in records and secure sessions. Sign-in codes and tokens are stored as hashes, not readable codes.
Information you enter: your name, age, height, weight, selected sex, activity level, goals, dietary preferences, allergies or limitations, body measurements, food and water entries, recipes, shopping items, gym choice, exercise routines, plans and completed workouts. Not every field is required. Information about allergies, limitations and fitness can reveal health information.
Service information: account-linked screen visits, recent activity, app platform/version, error categories, request timings, response statuses and counts. Automatic diagnostic reports do not include your food or gym search text, nutrition values, photographs, sign-in codes or passwords.
Feedback: suggestions and problem descriptions you deliberately submit. Please avoid including unnecessary medical or other sensitive details.
Device information: local preferences and unsynced drafts. Hosting and security providers may process IP addresses and network information when delivering and protecting the service.

Why we use it

We use account and app information to provide the service you request: save and synchronise entries, calculate estimated targets, personalise plans and preferences, and deliver sign-in messages. Our lawful basis for necessary account/service processing is performing our contract with you. We use limited operational information for our legitimate interests in keeping the service secure, reliable and improving it. We do not use diagnostics to target advertisements.

Where fitness or nutrition information reveals health information, we ask for your explicit consent in the iPhone app. You can withdraw it by deleting your account, or contact us for help. Declining consent means you cannot use the health-related tracking features. Calorie and nutrition estimates are guidance, not medical diagnosis or treatment; they do not make decisions with legal or similarly significant effects.

Other services

Cloudflare and OpenAI Sites: host the service and account database. The iPhone app uses email sign-in; it does not require a ChatGPT account. The web experience may use OpenAI authentication.
Resend: delivers account sign-in emails and operational feedback notifications. Your email address is provided for sign-in delivery. New feedback notifications contain a reference rather than your report text.
Open Food Facts: receives food search terms and barcode numbers when its online database is queried. Your account identifier and saved diary are not sent with these queries.
Google Places: receives the gym/location search text you enter for gym lookup. Your account identifier and fitness history are not sent with these queries.
Apple: distributes the app and operates TestFlight. Apple handles its own testing, device and distribution information under its policies.

The barcode camera is used when you choose to scan. Camera frames are processed on your device; the resulting barcode number is used for lookup. The current app does not access Apple Health or use advertising tracking. We do not send your diary or health profile to a generative AI service.

Providers may process information outside the UK. Applicable provider data-processing terms and transfer safeguards govern their processing. Contact us for details about the providers involved in your request.

Storage and retention

Account entries and preferences remain while you maintain your account or until you remove them. Diagnostics are excluded from normal access after 30 days and pruned when the diagnostics service is used, with a maximum of 1,000 stored reports per account. Feedback and latest-activity records remain until removed or your account is deleted. Sign-in codes expire after 10 minutes, links after 15 minutes and sessions after 30 days; expiry prevents their use even if an expired database record has not yet been cleaned up.

Device drafts help preserve changes during connection failures. Service providers may retain delivery/security records and recovery copies under their own retention arrangements. Recovery copies may not be selectively editable; deleted data must not be reintroduced into the live service during recovery. Contact us for the current recovery-retention details or for erasure assistance with correspondence and provider-held records. We do not promise that all backup copies disappear immediately.

Deleting your account

In the iPhone app, open Profile → Account & support → Delete account, then confirm. This removes your account, saved app entries, sessions, sign-in records, account-linked diagnostics, activity, feedback and associated feedback-management records from the live app database. It clears Orivendi's local app storage on the device performing deletion. Other offline devices cannot be remotely wiped while disconnected; their revoked sessions can no longer save to the deleted account. A newly created account uses a fresh draft namespace.

Deletion does not delete your Apple or ChatGPT account, or files you exported/shared outside Orivendi. If you emailed us directly, or submitted feedback in an earlier app version that emailed its contents, contact us to remove those separate correspondence copies. We may retain information only where required by law or necessary to handle a legal claim, and explain any applicable exception.

Your choices and rights

You can edit your profile and entries in the app. Depending on the processing and applicable law, you can request access, correction, erasure, a portable copy, restriction or object to processing. You can withdraw consent without affecting processing before withdrawal. Contact willoj83@gmail.com; we may verify your identity before releasing or deleting information. You can also complain to the UK's Information Commissioner's Office.

Age and policy changes

Orivendi is intended for adults aged 18 and over. If a child has provided information, contact us so we can investigate and remove it. We will update this page when our practices change and request new consent where needed. The date above identifies this policy version.