Privacy Policy
Effective September 23, 2026
FlexFeed is a social app for sharing meals and recipes and tracking macros. This policy explains what we collect, why, who helps us run the app, and how you can delete everything. "We" means FlexFeed and its operator, Liam Davis.
1. What we collect
| Data | When | Why |
|---|---|---|
| Email address and password (stored hashed) | Only if you save your account or log in. Guest accounts have no email. | Log in on another phone, send login codes |
| Username, display name, bio, profile photo | When you set them | Your public profile |
| Photos, captions, recipes, comments | When you post them | Show them to other users |
| Meal and macro logs (calories, protein, carbs, fat) | When you log a meal | Your streak, daily totals and history |
| Country, state/region, city and college | When you pick them, or when you tap "Use my location" | Regional and campus leaderboards |
| Likes, saves, follows, remakes, XP, blocks and reports | As you use the app | Feed, leaderboards, safety and moderation |
| Recipe links you import | When you use "Import from a link" | Fill in the recipe for you and credit the original creator |
| Voice recordings of your recipe steps | Only while you're recording with "Record your steps" | Turn what you say into written steps. Not stored (see below) |
| Technical logs (IP address, device and request info) | Automatically, by our hosting provider | Security, abuse prevention, fixing bugs |
Location
If you tap "Use my location", your phone gets your position once and converts it to a place name on the device (on iPhone this uses Apple's geocoding service). We save only the country, state/region and city names. We never store your coordinates or track your location in the background.
Camera and photos
The camera is used to take meal photos and scan food barcodes. A photo leaves your phone only when you post it. Barcode scanning happens on your phone; only the barcode number is sent to look up the product.
Microphone and voice steps
The microphone is used only when you tap "Record your steps", and only until you tap Done or Cancel (3 minutes at most). The recording is sent to our server, turned into text by OpenAI, and rewritten as numbered steps by Anthropic's Claude. We don't store the recording: it is discarded as soon as your steps come back, and only the text steps you choose to post are saved.
Importing a recipe from a link
When you paste a link, our server (not your phone) opens that public page, or TikTok's public post details, to read the recipe. The page text may be sent to Anthropic's Claude to pick out the ingredients and steps and to estimate macros; estimated macros are labeled in the app. The link is saved with the recipe so the original creator gets credit. To prevent abuse we log the website's name (for example tiktok.com) for 24 hours, not the full link.
Public by default
Your username, profile, posts, recipes, comments, XP and leaderboard ranks are visible to other users. If you turn on Private account, only followers you approve can see your posts and recipes. Your username still shows on leaderboards. Your email, macro logs, blocks and reports are never shown to other users.
2. How we use it
- To run the app: accounts, feed, recipes, remakes, streaks and leaderboards.
- To keep people safe: review reports, remove content and accounts that break our Terms, and prevent spam and cheating.
- To make regional stats (for example average protein by state). These only use groups of at least 20 people, and no individual is identified.
- To contact you about your account (for example login codes). We don't send marketing email.
We do not sell or rent your personal data. We do not use it for advertising, and we do not track you across other companies' apps or websites.
3. Who processes your data
| Service | What for | What they receive |
|---|---|---|
| Supabase (servers in the US, Oregon) | Database, login, photo storage | Everything in section 1 |
| Open Food Facts | Nutrition facts for scanned barcodes | The barcode number and your IP address |
| Apple | App distribution; on-device place names | Your location, once, when you tap "Use my location" |
| OpenAI (US) | Turning voice recordings into text | Your recording of your recipe steps |
| Anthropic (US) | Turning transcripts and imported pages into recipe steps, ingredients and macro estimates | The text of your transcript or of the page you imported |
| Websites and TikTok, when you import a link | Reading the recipe | A request from our server for that link (your IP address is not sent) |
| Email provider used by our login system | Sending login codes | Your email address |
Under their business terms, OpenAI and Anthropic don't use this data to train their AI models.
We may also share information if the law requires it, or to protect someone's safety.
4. How long we keep it
We keep your data while your account exists. When you delete your account, your profile, photos, posts, recipes, comments, logs, XP, follows, likes, saves, blocks and reports are deleted right away. Copies may remain in encrypted server backups for up to 30 days before they are overwritten. Reports other people filed about your content may be kept for moderation records.
5. Your choices and rights
- Delete your account: Profile → Delete account. It's permanent and immediate.
- Delete content: tap ⋯ on your own post to delete it, or long-press your own comment. To change your username, email us.
- Make your account private: Profile → Private account.
- Location: type your city instead of using GPS, or turn off location for FlexFeed in iPhone Settings.
- Access or correct your data: email us and we'll respond within 30 days.
Depending on where you live (for example California or the EU/UK), you may have extra rights: to access, correct, delete or port your data, and to object to certain uses. Email us to use any of them. We won't treat you differently for doing so.
6. Children
FlexFeed is not for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has an account, email us and we'll delete it.
7. Security
All data travels over encrypted connections (HTTPS). Database access is restricted per user. Passwords are stored hashed, never in plain text. No system is perfectly secure, so use a password you don't use anywhere else.
8. Changes
If we change this policy, we'll update the date at the top. For significant changes, we'll also tell you in the app before they take effect.
9. Contact
Questions or requests: liamd298@gmail.com