Effective date: 2026-10-04
i8 (the "App") is operated by ArrowStone OÜ, registry code 16154633, Telliskivi tn 57, Põhja-Tallinna linnaosa, 10412 Tallinn, Harju maakond, Estonia ("we", "us"). We are the controller of your personal data. Contact: khrystyna.didukh@gmail.com.
Account: your email address and sign-in data (password hash kept by our authentication provider, or your Google account identifier if you sign in with Google, or your Apple ID identifier if you sign in with Apple).
Profile: name you enter, goals (calorie, protein, fat, carbohydrate targets, goal type, target weight, pace), weight entries, height, birth year/age, sex, activity level, diet style and answers from the onboarding quiz, language and country, and the free-text "AI memory" notes you save.
Food logs: meals, products, recipes, supplements and their check-offs, with dates and times.
Content you send for analysis: text you type, voice recordings (transcribed and not kept as audio), and meal or nutrition-label photos. Photos you attach may be stored in your private storage folder so you can see them with your entries.
Barcode lookups: the scanned barcode and the resulting product saved in your own foods list.
Reminders: your reminder times and settings; if you turn on browser notifications, the browser push subscription (endpoint and keys) needed to deliver notifications.
Usage and credits: a record of each AI request (type, model, credits and estimated cost) used to manage your monthly allowance.
Purchases: subscription status, period end, credit pack balance and purchase records received from Apple via RevenueCat. We never receive your card or payment details.
Technical: strictly necessary cookies/local storage for sign-in and your language and country choice. We do not use analytics or advertising cookies.
Product check: barcodes you scan, photos of product labels you take for a check, the results, and your optional food preferences (diet style and avoid list, e.g. gluten or lactose). Avoid-list values can relate to health, so we process them only with your explicit health-data consent; they are used only to flag products and are deleted with your account. Label photos are sent to our AI provider for reading and are not stored; barcodes are looked up in the public Open Food Facts database.
Referral program: your invite code, who invited whom, and the reward status (granted, capped or taken back) — used only to run the program.
If you ask the AI to calculate your targets, your current weight — which may have been imported from Apple Health — is sent to the AI provider together with the body data listed in section 4, only for that calculation. Apple Health data is never used for advertising and never sold.
On iPhone, and only if you allow it, the App writes to Apple Health: dietary energy, protein, total fat and carbohydrates for each saved entry. It reads: body weight, step count and active energy.
Health data is used only to provide these features (showing steps and active calories, importing weights, optionally adjusting your daily budget, and keeping Health in sync with your log). It is never used for advertising, marketing or data mining, never sold, and never shared with third parties for marketing. Imported weights are stored in your account like manually entered weights; we do not store Apple Health data in iCloud.
You can revoke access at any time in iOS Settings → Health → Data Access & Devices → i8, or in the Health app.
When you ask the AI to calculate your calorie and nutrient targets, your sex, birth year, height, weight (which may come from Apple Health) and goal (goal type and target weight) are sent to the AI provider only for that calculation. They are not used for advertising, not sold and not used to train AI models.
When you use an AI feature, the text, transcribed voice or photo you submit, together with the minimum context needed (such as your matching products, recent entries summary, goals and AI memory notes), is sent through the Lovable AI gateway to AI model providers (Google Gemini and OpenAI models) solely to produce the nutrition estimate or answer.
We do not use your content to train AI models. Providers process it under their API terms, which exclude training on API data.
Before your first AI request the App asks for your consent in a separate screen. If you decline, AI features stay off; manual entry, quick-add from your own products and editing keep working.
You are interacting with an AI system: the assistant's replies and all nutrition estimates are generated by AI and are labelled "AI assistant" / "AI estimate" in the App (EU AI Act, Art. 50).
AI estimates can be wrong. They are not medical advice.
To provide the App and your account, log and analyse food, run reminders and manage credits and purchases: performance of our contract with you (GDPR Art. 6(1)(b)).
Food, weight, body and Apple Health data may reveal information about your health. We process it only with your explicit consent (Art. 9(2)(a)), which you give through a separate, unticked checkbox at the start of onboarding (existing users are asked once). We record the time of consent and the version of this policy. Apple Health access additionally requires your separate permission in iOS.
You can withdraw this consent at any time in Profile → "Withdraw health-data consent" or by email. Because the App cannot work without this data, after withdrawal you can no longer use it and may delete your account (Profile → Delete account). Withdrawal does not affect processing carried out before it.
Security, abuse prevention and keeping required records: our legitimate interests and legal obligations (Art. 6(1)(f) and (c)).
Lovable (Lovable Labs Incorporated) — our processor for hosting, database, authentication, file storage and the AI gateway, under a data processing agreement (GDPR Art. 28). Lovable uses these sub-processors: Supabase (database, authentication, storage), Google (Gemini AI models, and cloud infrastructure) and OpenAI (AI models).
AI providers — Google (Gemini) and OpenAI, via the Lovable AI gateway, for analysis described above.
Apple and RevenueCat — In-App Purchases and subscription status. Apple bills you; RevenueCat tells us what you are entitled to.
Open Food Facts — barcode lookup. Only the barcode number is sent, never your identity.
Push services — Apple, Google, Mozilla or Microsoft browser push services deliver web notifications; on iPhone, reminders are scheduled locally on your device.
Google — only if you choose Google sign-in.
Apple — only if you choose Sign in with Apple.
App Store publisher: the App is distributed on the Apple App Store by Lumos Strategies OÜ on behalf of ArrowStone OÜ. Lumos Strategies OÜ does not receive your data from the App; it only sees the aggregated, anonymised reports Apple provides to publishers.
We do not sell your data and do not share it with advertisers or data brokers.
Some processors are located outside the EU/EEA (for example in the United States). Where that happens, transfers are protected by the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework, plus additional safeguards where needed.
We keep your data while your account exists. When you delete your account, your profile, logs, products, recipes, weights, supplements, reminders, push subscriptions, usage records, entitlement and purchase records and your stored photos are deleted. Copies in encrypted backups are removed as backups roll over, within a limited period. Apple keeps its own billing records under its own policy.
You have the right to access, rectify, erase, restrict and object to processing, to data portability, and to withdraw consent. Write to khrystyna.didukh@gmail.com; we answer within one month.
You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the supervisory authority in your country of residence.
In the App: Profile → Delete account. This permanently deletes your account and all associated data, including stored photos. You can also ask by email at khrystyna.didukh@gmail.com.
Deleting the account does not cancel an Apple subscription — cancel it in your Apple ID settings.
The App is not intended for anyone under 16. We do not knowingly collect data from children under 16; if you believe a child has given us data, contact us and we will delete it.
The App shows no ads and does not track you across other companies' apps or websites. It does not use the advertising identifier, so no App Tracking Transparency prompt is shown.
Data is encrypted in transit, access is limited by per-user access rules, and photos are kept in private storage.
We keep a record of processing activities (GDPR Art. 30) and have carried out a data protection impact assessment (Art. 35) for the processing of health-related data and AI analysis.
If a personal data breach occurs, we will notify the Estonian Data Protection Inspectorate within 72 hours where required (Art. 33) and inform affected users without undue delay when the breach is likely to result in a high risk to them (Art. 34).
We may update this policy. We will show the new effective date and, for material changes, tell you in the App.
Nutrition data: USDA FoodData Central (public domain, U.S. Department of Agriculture) and ANSES-CIQUAL 2020 food composition table (Licence Ouverte / Etalab). Values are per 100 g and are averages.