Your data

A plain-English summary. The legal detail is in the Privacy Policy and the health data notice, which are the documents that count.

What's stored

Your meals (photo, note, estimate, date and meal group), and anything you choose to add in Context and Control. What you eat can say a lot about you, including about your health, so SelfCtrl asks for your explicit consent before it stores any of it.

Who handles it

Your data is stored with Amazon Web Services in London. To produce an estimate, your photo or note is sent to a third-party AI provider, under terms that rule out training its models on your data. That provider may process it outside the UK. We don't share your data with anyone else unless the law requires it.

What we don't do

  • No ads, and no tracking cookies.
  • No selling your data, or sharing it with brokers.
  • No activity-tracker or wearable sync.
  • No analytics or advertising identifiers in the app.

Location, only if you say so

A photo can carry the place it was taken. That is off by default. If you turn it on, only a rough area goes with the estimate request, to help it recognise local food. It's never stored and never shown back to you.

Yours to take or delete

You can export your meal history as a spreadsheet and delete your account from inside the app. Deleting removes your meals, photos and settings, and backups clear within 45 days. Because almost everything SelfCtrl holds is health data, withdrawing your health consent means deleting the account, so export first if you want a copy. Photos and meal records are kept for a limited time rather than forever, and the Privacy Policy gives the periods.

The documents