LEGAL
Privacy Policy
Ivy is designed around a simple principle: health-related information should be handled carefully and only used to provide the service you ask for.
Last updated: September 21, 2026
Who operates Ivy
Ivy operates Ivy. Before production launch, the deployed site should contain the operator's full legal name and business contact details.
Information we collect
Depending on how you use Ivy, we may process account identifiers, meal photographs, foods detected from those photographs, portion and calorie estimates, calorie goals, corrections you make, timestamps, usage logs, device/network metadata, and other information you intentionally submit.
How we use information
We use this information to analyze meals, maintain your personal meal history, calculate progress against goals, respond to requests made through Ivy or connected assistants, operate and secure the service, troubleshoot failures, and improve reliability and accuracy.
AI processing
Meal images or structured meal information may be sent to contracted AI or infrastructure providers when needed to perform food recognition, portion estimation, or related processing. We aim to send only the information needed for the task and configure providers according to our data-protection requirements.
Storage and retention
Meal images are stored separately from the message queue. Application records are stored in our database. We retain information only for as long as needed to provide Ivy, meet legal obligations, resolve disputes, and maintain security. Production retention periods should be documented before launch.
Sharing
We may share information with service providers that host, secure, store, or process data on our behalf, and when required by law. We do not sell personal information or health-related data.
Your choices
You can correct meal records in the product. Production Ivy will provide a way to request access to or deletion of your account data. Requests can also be sent to support@example.com.
Security
We use technical and organizational measures intended to protect data, including access controls, encrypted transport, scoped credentials, segregated object storage, and audited production access. No system can guarantee absolute security.
Children
Ivy is not intended for children under the minimum age required to consent to the service in their jurisdiction. We do not knowingly design the service to collect children's health data without appropriate authorization.
Medical information
Ivy is currently a nutrition-tracking tool. Its calorie and portion outputs are estimates and are not medical advice, diagnosis, or treatment.
Changes to this policy
We may update this policy as Ivy adds features or providers. Material changes will be reflected by changing the date above and, where appropriate, giving additional notice.
Contact
Privacy or data requests: support@example.com.