Privacy Policy

1. Who we are

Cloche is a food journal and nutrition tracking service operated by TrueStandard Labs LLC ("Cloche," "we," "us," or "our"), available at heycloche.com. You can reach us at any time at [email protected].

Cloche lets you photograph a meal and receive an AI-generated breakdown of its nutrition, including nutrients such as sodium, sugar and purines, along with trends over time. This policy explains exactly what we collect, where it goes, and what we will never do with it.

2. Our core promise

3. Information we collect

Information you provide

• Your account. You can use Cloche without signing in. On first launch the app makes a random identifier, keeps it in your phone's Keychain, and uses it to keep your journal on our server. To sign in, you enter your email address and we email you a six-digit code. We store your email address. For each code we send, we keep when we sent it and how many wrong tries were made. We store the code itself only in scrambled form, and it stops working after 10 minutes. Earlier versions of the app also offered Sign in with Apple and Google. If you used one, we keep the name, email address and account ID it gave us. We never see your Apple or Google password.
• Profile details. Your name and time zone. If you choose to enter them, also your sex, birth year, height, weight and goal weight, your training level and how many meals you eat a day. You can also tell us the conditions you watch, such as blood pressure or blood sugar. We use these to set your daily calorie, protein and fat targets, which we also store. They are optional; the app works without them.
• Your chat with Cloche. The messages you send and Cloche's replies, which we keep so your conversation and your journal stay together.
• Meal photos. When you send a photo, we pass it to our AI provider to read the meal, then discard it. We do not store your photos; they stay on your phone.
• Meals you log. Each meal's name, portion, date and time, and any corrections you make.
• Your usuals. Meals you have most days, which Cloche logs for you at their usual time, with any reminder you turn on and the days you skip.
• Your subscription. If you buy Cloche Pro, Apple takes the payment and we never see your card. RevenueCat keeps track of subscriptions for us. It tells our server your plan, whether it is in a free trial, active, canceled or ended, when the current period ends, and Apple's number for the purchase. To match a purchase to your journal, the app gives RevenueCat a random ID made for your account. That ID is not your email address or your name.

Information we generate about your meals

For each meal we store the AI-generated nutrition breakdown, the daily-value percentages derived from it, the assumptions the model made (for example, an estimated portion size), and the units used. This is how your timeline, weekly reports, and trends work.

• Cooking habits. What Cloche learns from your chat about how you cook and eat, such as cooking at home or leaving the broth. You can see, change or remove each one under What Cloche knows in Settings.
• Meal hours. The times you usually eat breakfast, lunch and dinner, which the app works out from when you log meals.
• Weekly summaries. A short summary of each week, written from the meals you logged.
• Model usage records. Each time a Cloche feature calls an AI model for you, we record which feature ran and which model it used. We also record how much text it processed, what it cost and how long it took, so we can keep the service running and track what it costs.

Information collected automatically

• Last connection. When each of your phones last reached our server, updated at most once an hour.
• Server logs. Standard web-server records such as requested URLs, IP addresses and timestamps. We use them to fix problems and stop abuse.

Sensitive information — please read

Your weight, height, birth year, sex, the conditions you watch, and your food history are health-related information. Under the California Consumer Privacy Act this may qualify as sensitive personal information. We collect it only to personalize your nutrient targets and insights. We do not use or disclose it to infer characteristics about you for advertising, and we do not sell or share it. If you would rather not provide it, leave those profile fields blank.

4. How we use your information

• To analyze your meal photos and produce your nutrition breakdown.
• To build your meal timeline, weekly summaries, and trend reports.
• To authenticate you and keep your account secure.
• To email you a sign-in code when you ask for one. That is the only email Cloche sends. We do not send marketing email, and we never add your address to anyone else's list.
• To operate, debug, and improve the Service — including looking at aggregate, non-identifying usage patterns to decide what to build next.
• To comply with law and to enforce our Terms of Service.

5. What we do not do

• We do not train AI models on your meal photos or nutrition data.
• We do not sell your personal information, and we never have.
• We do not share your personal information with advertisers or data brokers.
• We do not run third-party advertising or behavioral-tracking pixels on the Service.
• We do not use your health information to build advertising profiles.

6. How AI processes your meals

When you upload a meal, the photograph and any description you provide are sent over an encrypted connection to Google's Gemini API, which returns the nutrition analysis you see in the app. Some nutrition features also send text-only questions to the same API. This processing happens in Google's cloud, not on your device — so your meal photo does leave your phone, and we want to be direct about that.

We use more than one AI model and choose the one that suits each job. Google's Gemini reads your meals. Other AI providers check short pieces of text. One job is matching a food name you logged to a food on the USDA nutrition list. Another is reading your chat messages for how you usually eat, such as cooking at home or leaving the broth, so Cloche can remember it. For these they receive the food name and portion, and your chat messages with your name, email addresses and phone numbers removed. They never receive your photo or your email address.

Google processes this data as our service provider in order to return a result. You can read Google's terms for this API in the Gemini API Additional Terms of Service and their Privacy Policy. To restate our promise: we do not use your meals to train AI models. Under the paid Gemini API terms we operate on, Google does not either.

AI-generated nutrition figures are estimates, not laboratory measurements. See our Terms for what that means for how much you should rely on them.

7. Who we share information with

We do not sell your data. We share it only with the service providers who make the app function, and only to the extent each one needs. We name the providers that see your meal photos or your identity, and describe the rest by category:

Every provider above is bound to use your information only to deliver their service to us. We may also disclose information if we are legally required to, to protect our rights or someone's safety, or to a successor if the Service is ever transferred — in which case this policy continues to apply to information collected before the transfer.

8. Sharing your week

The week view can turn your week into a picture that you send with your phone's share sheet. The app makes the picture on your phone, and we do not host it or create a public link. Once you send it, it goes where you choose.

9. Cookies

We use a small number of essential cookies only — the ones that keep you signed in, remember your session, and protect forms against cross-site request forgery. Without them the app cannot work.

We do not run any third-party analytics or advertising cookies. There is no Google Analytics, no Meta Pixel, and no behavioral tracking on Cloche. Because we set no non-essential cookies, there is no cookie consent banner to click through.

10. How long we keep your data

• While your account is active, we keep your profile, chat, meals, usuals, habits, meal hours and weekly summaries so your history stays intact.
• Photos are never stored: each one is read and then discarded.
• Individual meals can be deleted by you at any time from within the app. Deleting a meal removes its record and its nutrition data.
• Start over in Settings clears your chat and every meal in it.
• On account deletion, we delete your account, profile, chat, meals, usuals, habits, subscription status, weekly summaries and sign-in codes within 30 days of your request. Model usage records stay for our cost accounting; they hold no name, email or anything you logged.
• Encrypted backups are rotated on a rolling basis, so deleted data may persist in a backup for a short period before being overwritten.
• We may retain minimal records where the law requires it, or to resolve a dispute.

11. Deleting your account

To delete your account, open Settings, tap Account, then tap Delete account, which deletes your account and everything you have logged. If you never signed in, Start over clears your chat and meals; email us to delete the rest. You can also email [email protected] from the address you signed in with and we will delete your account, and everything in it, within 30 days. We will confirm by email when it is done. There is no charge and we will not ask you to justify the request.

12. Your privacy rights

If you are in the EEA, UK, or Switzerland (GDPR)

You have the right to:

• access the personal data we hold about you;
• correct it if it is inaccurate;
• have it erased;
• receive a portable copy of it;
• restrict or object to how we process it; and
• lodge a complaint with your local data protection authority.

Our legal bases for processing are: performance of a contract (delivering the Service you signed up for), legitimate interests (security, abuse prevention, and improving the Service), consent for the optional health details you choose to enter, and legal obligation where applicable. You can withdraw consent at any time.

If you are in California (CCPA/CPRA)

You have the right to:

• know what personal information we collect, use, and disclose;
• delete the personal information we hold about you;
• correct inaccurate personal information;
• opt out of the "sale" or "sharing" of personal information and of the use of sensitive personal information beyond what is necessary to provide the Service — we do not sell or share your personal information, and we use sensitive personal information only to deliver the Service, so there is nothing here for you to opt out of; and
• not be discriminated against for exercising any of these rights. We do not offer financial incentives in exchange for your data.

How to exercise any of these rights

Email [email protected] from your account email address. We respond within 30 days, and we will tell you if we need longer. You may use an authorized agent; we may need to verify their authority.

13. Security

We protect your information with encryption in transit (HTTPS), access controls on our servers and database, and hashed credentials. We do not store your meal photos. No system is perfectly secure, and we cannot guarantee absolute security — but if a breach ever affects your personal data, we will notify you and the relevant authorities as required by law.

14. International data transfers

We operate from the United States, and our servers and service providers are located in the United States. If you use Cloche from outside the US, your information is transferred to and processed in the US, where privacy laws may differ from your own. Where required, we rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism.

15. Children

Cloche is intended for adults. You must be at least 18 years old to use it. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, email [email protected] and we will delete it.

16. Changes to this policy

If we change this policy we will update the "Last updated" date above. For changes that materially affect your rights, we will notify you by email or in the app before they take effect. These include a new category of data and any change to the no-training promise.

17. Contact us

For any privacy question, request, or complaint: [email protected].

TrueStandard Labs LLC
Operator of Cloche — heycloche.com

See also our Terms of Service.