Privacy policy

Last updated: October 24, 2026

This policy explains what the RitmoFuel app for iPhone and Android ("RitmoFuel", "we", "us") does with your data. RitmoFuel is a food log for adults: you snap, say or type a meal, check the suggestion and save it.

1. Who is responsible

The controller of your data is RitmoFuel, Brazil. Contact: support@ritmofuel.com.

2. Data that stays on your phone

The following is stored only on your device. It is excluded from iCloud and Android backups and is never sent to us, to analytics, to crash reports, to advertisers or to AI providers:

• The seasons you follow (for example Ramadan), fasting settings, prayer times and the approximate location used to work them out.
• Your answers to the safety questions (age, pregnancy and eating-disorder questions). Only the resulting settings, such as "show no numbers", are saved to your account.
• Your birthday, if you add it.
• Your mascot's state, care and outfits.
• Data read from Apple Health or Health Connect (see section 4.9).
• Original photos and voice recordings.
• Drafts before you press Save, and the built-in food list.

If you use RitmoFuel as a guest without signing in, your meals stay on your phone.

3. Data that leaves your phone, at a glance

4. What we process and why

4.1 Your account

You can use RitmoFuel as a guest. We still create an anonymous account id with Firebase Authentication, so that suggestion limits and purchases work. If you sign in with email, Sign in with Apple or Google, Firebase Authentication stores your email address and the account id from Apple or Google. We do not read or store your name.

4.2 Sync of your food log and profile

When you are signed in, your food entries (foods, amounts, estimated calories and protein, meal time), your custom foods and favourites, and your profile settings (language, number style, theme, mascot mode, calorie and protein target settings, and safety settings such as "adult confirmed" or "show no numbers") are stored in Google Cloud Firestore in the europe-west1 region (Belgium). Only your account can read them.

4.3 AI suggestions

• Text. The words you type, or the text your speech turns into, are sent to our server (Google Cloud Functions, Belgium).
• Voice. Speech is turned into text on your phone. Where on-device recognition is not available, the app asks you once before it uses Apple's or Google's speech service. Your audio never reaches our servers or the AI providers.
• Photos. Your phone shrinks the photo and removes its location and other metadata. The smaller copy is sent in memory to our server and the AI provider and is never stored by us. The original never leaves your phone.
• AI providers. Our server sends the request to an AI provider without your account id or email: Google Gemini first, and Anthropic (Claude) or OpenAI as a fallback. They act as our service providers (processors). We use their business APIs, which, to the extent their API terms allow, do not use your data to train their models. Providers may keep requests for a short time for abuse monitoring under their own terms.
• Records. Our server keeps a short record of each request (type, status and the suggested foods; never the photo or audio) to prevent double charges and enforce limits, plus counters of how many suggestions you used. Each record expires 7 days after the request and is then deleted automatically, normally within about 24 hours.

Suggestions are estimates. You check and edit them, and nothing is saved until you press Save.

4.4 Report a wrong result

When this option is available and you tap "Report wrong result", you see exactly what will be sent and can edit it first. A report contains the meal text and the suggested foods. Your photo is not included unless you choose to add it. Reports are sent only when you tap, are not linked to analytics identifiers, are used only to improve suggestions, and are deleted 90 days after they are sent.

4.5 Purchases

Plus and the 40-day pass are sold through the App Store or Google Play. We use RevenueCat to check what you bought. RevenueCat receives your account id, the product and purchase status. We never see your card or payment details.

4.6 Ads

• Adults on the free plan see some ads from Google AdMob. Plus subscribers and people under 18 see no ads.
• Ads are non-personalised. On iPhone we do not ask to track you and do not use the advertising identifier (IDFA). On Android the AdMob SDK may read the advertising ID, governed by your consent where the law requires it.
• Ad requests never contain your food, health, weight or season data.
• Where required (for example in the EEA and the UK), Google's consent form (UMP) appears before the first ad. You can change your choice at any time in Settings > Privacy & ads.
• Rewarded ads are opt-in: you choose to watch one for extra suggestions. They are never forced.
• Google may process device information and your IP address (which can show your approximate location) to show and measure ads and prevent fraud. See how Google uses data from apps that use its services.

4.7 Usage statistics and crash reports

• Firebase Analytics receives only a fixed list of events about how the app is used (for example "meal saved"), with no account id and no advertising identifier. Ad signals and Google signals are off. Events never contain food, health, weight or season data.
• Firebase Crashlytics receives crash reports (technical details such as the error, device model, system and app version, and an installation id). They never contain your meals.
• Both are on by default. Turn them off in Settings > Share anonymous usage stats.

4.8 Security and settings

We use Firebase App Check (Apple App Attest / DeviceCheck and Google Play Integrity) to confirm that requests come from the real app, and Firebase Remote Config to switch features on or off without an update. These use device and app identifiers, not your meals.

4.9 Apple Health and Health Connect

Energy balance is optional and off by default. If you connect it in Settings > Health:

• RitmoFuel reads only active calories burned, resting or total calories burned, and steps, for the last 7 days. It never writes anything to Apple Health or Health Connect.
• This data is used only to show calories eaten next to calories burned on your Today screen.
• It stays on your phone. It is not synced to our servers or iCloud, and is never sent to analytics, crash reports, ads or AI providers.
• It is never shared with third parties and never used for advertising, marketing or data mining.
• Disconnect at any time in Settings > Health. Disconnecting, or deleting your account, removes the copy in the app. It is included in Export my data, which you save wherever you choose.

4.10 Location, notifications and permissions

Location is optional, approximate, and used only on your phone to work out prayer times for seasons you choose. Reminders are local notifications created on your phone; we do not collect a push token. Camera, photos, microphone and speech permissions are asked only when you use those features.

4.11 When you contact us

If you email us (Settings > Help & support opens an email to support@ritmofuel.com with the app version, phone type and language filled in), we use your email address and message to answer you. If you use Settings > Send a suggestion, we store your message, the category you pick, the reply email if you add one, the app version, language, phone type and your account id, so we can read it, answer you and improve the app. We never attach your meals, health data, seasons, birthday or Rimo to it. You can also write to contact@ritmofuel.com.

5. Service providers

• Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics, App Check, Remote Config; AdMob and the consent form; Gemini AI)
• RevenueCat (purchases)
• Anthropic (Claude) and OpenAI (AI fallbacks)
• Apple and Google (app stores, payments, sign-in, speech recognition when you allow it, Apple Health and Health Connect on your phone)

We do not sell your personal data and do not share it for cross-app tracking or personalised advertising.

6. Where data is processed

Our database and server run in the europe-west1 region (Belgium). Some providers process data in other countries, including the United States. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

7. Legal bases

We process data to provide the app you asked for (account, sync, suggestions, purchases); with your consent (ads consent where required, the speech service, Apple Health or Health Connect, location, reports); for our legitimate interests in keeping the app secure and working (App Check, crash reports, usage statistics, which you can turn off); and to meet legal obligations. This applies under the GDPR, Brazil's LGPD and the data protection laws of Saudi Arabia and the United Arab Emirates, as relevant to you.

8. How long we keep data

• Account, food log and profile: until you delete them or your account.
• AI request records: they expire 7 days after the request and are deleted automatically, normally within about 24 hours after that.
• Crash reports: up to 90 days. Usage statistics: event-level data is kept for 2 months in Firebase Analytics and then deleted automatically; after that only aggregated reports remain, which do not identify you.
• Rewarded-ad checks (account id and whether the bonus was granted): they expire 30 days after the ad and are deleted automatically, normally within about 24 hours after that.
• Purchase records: as long as Apple, Google and RevenueCat must keep them for accounting and law.
• Messages sent from Send a suggestion: 12 months, then deleted automatically (normally within about 24 hours after that), or sooner when you delete your account.
• Data on your phone: until you delete it, the app or your account.

9. Your choices and rights

• Export your data: Settings > Export my data.
• Delete your account: Settings > Account > Delete account, or see how to delete your account.
• Turn off usage statistics and crash reports, change ad consent, disconnect Health, or turn off permissions in your phone's settings.

Depending on where you live, you may have the right to access, correct, delete or port your data, to object or restrict processing, and to withdraw consent. Write to us at support@ritmofuel.com. You can also complain to your data protection authority (for example the ANPD in Brazil, your EU authority, or SDAIA in Saudi Arabia).

10. Adults only

RitmoFuel is for people aged 18 and over. We do not knowingly collect data from children. If you think a child is using the app, contact us and we will delete the account.

11. Not medical advice

RitmoFuel is not a medical device and does not give medical advice, diagnosis or treatment. Calories and nutrients are estimates. Talk to a doctor or registered dietitian before changing your diet.

12. Security

Data is encrypted in transit. Server access rules let only your account read your data, and App Check helps block requests that do not come from the real app. No system is perfectly secure, so please keep your sign-in details safe.

13. Changes

If we change this policy we update the date at the top. For important changes we also tell you in the app.

14. Contact

RitmoFuel, Brazil. Email: support@ritmofuel.com.