# Compote — Privacy Policy _Last updated: 18 July 2026 · v0.6.0_ Compote is a personal cookbook of what you ate. It is built to keep your kitchen on your phone, and to send as little as possible when you ask the AI for help. ## 1. The short version **Your journal stays on this device.** We keep no servers full of your meals. There is no account to make and nothing to log into. The main things that ever leave are what you send to the AI. Logging a meal sends the **text or photo you enter**. Asking a question sends your question together with **your recent entries, goals, and body stats** — and the earlier questions in that conversation — so the model can answer from your data. All of it is read by the model, not kept by us. The one other thing that leaves is **feedback you choose to send us**. If you open "Send feedback" in settings and submit a message, that message (and, so we can reproduce bugs, your app version, OS, and device model) is sent to our backend, logged there, and emailed to the developers. That only happens when you tap send — never otherwise. ## 2. What stays on your phone Every entry, every macro, your goals and body stats, and your whole history live in a database on this device only. When you **export a CSV** or **erase the journal**, that happens locally. Uninstalling the app removes the data with it. Calculations — daily totals, goals, weekly trajectory — all run on the device. None of that math touches a server. ## 3. What leaves, and where it goes To estimate a meal, Compote sends the words you typed — or the photo you picked — to an AI model run by **Anthropic**. To answer a question about your journal, it also sends the data the answer needs: **your recent entries (the last 30 days), your goals and body stats, and the conversation so far**. A thin proxy forwards the request and holds the API key; it keeps no copy of what passes through. **This processing happens in the United States.** If you are in the EU, the text or photo you send is transferred outside the EU to be read there, and the result is returned to your phone. It is not stored on the backend, and it is not used to train models. You control when this happens: data is sent only when you tap to log a meal or ask a question — never on its own, and never in the background. Separately, if you **send us feedback** from settings, your message and the optional device details listed above are sent to our backend. Unlike your AI requests, feedback is **retained**: it is written to our server logs and emailed to the developers via **Resend** (an email-delivery provider in the United States) so we can read and reply to it. We use it only to understand and improve the app. Sending feedback is entirely optional. ## 4. What we never collect No account, no email, no name. No advertising, no third-party trackers, no selling of data — there is nothing to sell. We do not run analytics on your meals. ## 5. About the AI estimates The macros and answers Compote shows are **AI estimates, and can be wrong.** Treat every number as a starting point and re-check it before you rely on it. Compote is not a medical device and its output is not medical, dietary, or health advice. ## 6. Your control Because the data is yours and lives with you, you can **export it** to a CSV at any time, or **erase the whole journal** from settings. Both are immediate and final. ## 7. Children Compote is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their data. --- The sections below set out the formal disclosures required under the EU General Data Protection Regulation (GDPR) and equivalent laws. ## 8. Who is responsible (data controller) The controller responsible for the limited processing described above is: - **Bitllow OÜ** - Registered address: Madala tn 5, Põhja-Tallinna linnaosa, 10311 Tallinn, Harju maakond, Estonia - Registry code: 16239677 - Contact: privacy@bitllow.com Because Compote holds no account and stores your journal only on your device, for most of what the app does there is no personal data under our control at all — the controller role applies only to the moment a request is sent to the AI on your instruction. ## 9. What data we process, and the legal basis The personal data that leaves your device is what you choose to send: - **Meal text or photos** you enter, to estimate nutrition. - When you ask a question: your **recent entries (last 30 days), goals, body stats, and the current conversation**, so the model can answer from your data. - **Feedback** you submit from settings: the message you write, plus optional technical details (app version, OS, device model) and the network (IP) address the request comes from. We process it to handle and improve on your feedback, on the basis of our **legitimate interest** (GDPR Art. 6(1)(f)) in maintaining and improving the app; it is sent only when you tap send. Some of this (body stats, food intake) may relate to your **health**. We process it only to provide the feature you requested, and the legal basis is: - **Your consent** (GDPR Art. 6(1)(a)), and for any health-related data your **explicit consent** (Art. 9(2)(a)), given through the in-app consent gate before any request is sent. You can withdraw consent at any time by not sending further requests and by erasing your journal; withdrawal does not affect processing already carried out. - **Performance of the service** you asked for (Art. 6(1)(b)) for the technical delivery of the request. We do not use your data for advertising, profiling, or any purpose beyond answering the request you made. ## 10. Who else processes it (processors) To deliver these features we use two processors: - **Anthropic, PBC** (United States) — runs the AI models that read your request and return an estimate or answer. Anthropic acts as our processor under a data processing agreement and does not use data sent through the API to train its models. - **Resend, Inc.** (United States) — delivers the feedback you submit to the developers' mailbox by email. Resend processes only the feedback you choose to send, and only to deliver that message. For AI requests our backend acts only as a thin proxy that forwards the request and holds the API key; it keeps no copy of the content that passes through. Feedback you submit is the exception — it is logged on our backend as described in section 12. ## 11. International transfers **Your AI requests are processed in the United States, and feedback you send is delivered by a US email provider.** Where you are in the EU/EEA, both are transfers of personal data outside the EEA. They are safeguarded by the **European Commission's Standard Contractual Clauses (SCCs)** incorporated into our agreements with Anthropic and Resend, together with supplementary technical measures (encryption in transit; no server-side storage of AI request content). A copy of the relevant safeguards is available on request at privacy@bitllow.com. ## 12. How long we keep it Your journal is retained on your device for as long as you keep the app; you can export or erase it at any time, and uninstalling removes it. Content sent to the AI is **not stored on our backend** — it exists only for the duration of the request. Anthropic's retention of API inputs is governed by its own commercial terms and does not include model training. **Feedback is the exception:** because we need to be able to read and act on it, a feedback submission is written to our server logs and delivered by email, and so persists in those logs and mailbox. We keep it only as long as it is useful for handling and improving on your feedback, and you can ask us to delete a submission at privacy@bitllow.com. ## 13. Your rights Under the GDPR you have the right to access, rectify, erase, restrict, and object to processing of your personal data, and the right to data portability. Because your journal lives on your device: - **Access & portability:** export your full journal to a CSV at any time from settings. - **Erasure:** erase the whole journal from settings, or uninstall the app. For anything you cannot do from within the app, or to exercise a right in relation to a request already sent, contact privacy@bitllow.com. You also have the right to **lodge a complaint with a supervisory authority** — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or the authority in your country of residence. ## 14. Changes to this policy If we change how data is collected or where it is sent, we will update this page and the in-app policy, and ask you to re-accept the new terms before any further AI request is made. ## Contact Questions about your data? Write to privacy@bitllow.com.