Privacy, in plain view.
Last updated October 11, 2026
DineSense helps you choose restaurant meals against a meal target. This policy explains what the iPhone app collects, who helps us run it, and how to delete your data.
Your account
DineSense needs an account, made with Sign in with Apple or an email address and a one-time code. Existing accounts with a password can also sign in with that password; Supabase handles authentication. We keep your account’s ID and email address, your meal targets and food preferences, your saved dishes and picks with the nutrition recorded at the time, and the menu corrections and reports you send. Restaurants and dishes you add by hand or from a menu photo are private to your account. Published chain nutrition and restaurants found on Apple Maps are shared across accounts.
AI from Anthropic
DineSense uses Anthropic’s Claude to rank dishes against your target, read menus, find menus online and answer questions about a dish. Before anything is sent, the app tells you what goes to Anthropic and asks for your permission; you can withdraw it any time in Settings › How DineSense uses AI. What is sent: menu photos you take, menus found online, the questions you ask, your meal target and food preferences, and restaurant and dish names. Your name and email address are not sent. Anthropic processes these requests to answer them and does not use them to train its models under its standard commercial terms. DineSense discards menu photographs after processing and does not keep a search-text history in its database, but Anthropic can retain API inputs and outputs, including photos, search text, questions and derived meal targets, for up to 30 days under its standard policy. Longer retention can apply for policy enforcement or legal requirements. See Anthropic’s retention policy. We do not claim zero retention.
Location
Location is optional. Finding places nearby uses Apple Maps on your iPhone. A search sends us the places’ names, Apple Maps IDs and how far away they are, not your device’s coordinates. When you open a place, we save its name and city so its menu can be found. Separately, our hosting providers retain request logs that include an IP address and an approximate city, region and country inferred from it, even when location permission is off. These logs can be associated with your account ID and are used for operating, securing and troubleshooting the service, not advertising.
Apple Health
Apple Health access is optional and read-only: DineSense never writes to Health. With it on, the app reads what Health says you have eaten today, on your iPhone, to suggest this meal’s target. The Health records stay on your iPhone; the meal target worked out from them is used like a target you type, which means it is sent with your search and can reach Anthropic as described above. You can change Health permissions in iPhone Settings.
DineSense Pro
DineSense Pro is sold through the App Store. Apple handles payment; we never see your card. Each purchase carries your DineSense account ID so it stays with your account, and we keep the subscription’s transaction ID, plan, renewal or end date and refund status, as Apple reports them. To change, cancel or restore a plan, see DineSense support.
Usage and diagnostics
We keep limited search, pick and save records linked to your account to understand how the app is used. These include search type, meal style, result counts and whether a search led to a pick or save; our database does not keep the words you searched for. AI requests have the provider retention described above. We also keep account-linked MetricKit crash, hang, launch, CPU and disk-write diagnostics, including call stacks, app build and iOS version, to fix reliability and performance problems. Hosting request logs also contain technical information such as your IP address, app and operating-system version, response status and request timing. These operational logs can be linked to your account and follow the hosting provider’s log-retention settings. DineSense does not use your data for advertising and does not track you across other apps or websites.
Who helps run DineSense
Supabase hosts your account and app data. Anthropic processes AI requests, as described above. Resend delivers sign-in codes by email. Apple provides Maps, Sign in with Apple, the App Store and optional Health access. We use these services only to run the features you ask for, and we do not sell your data.
Deleting your data
You can delete your account in DineSense, from Settings or from the Account button on the subscription screen. Deletion removes your account and its private application records, including your private restaurants and menu entries, and disconnects Sign in with Apple. Another person’s saved meal or order keeps its own nutrition record if it referred to a dish you added. Provider request logs and AI requests follow the retention described above rather than immediate account deletion. Deleting the account does not cancel DineSense Pro: cancel it in iPhone Settings › your name › Subscriptions.
Children
DineSense is not directed to children under 13, and we do not knowingly collect their information.
Changes and contact
If this policy changes, we will update this page and the date above. Account information is used to run DineSense, product records to understand usage, and meal targets and preferences to personalize results. For privacy or deletion questions, contact us. You can read about DineSense and how to reach us.