Privacy Policy

Effective 29 October 2026 · Munch is made by CloudPixel (ABN on request), Australia.

Munch is a voice-first calorie tracker. This policy explains what we collect, why, who we share it with, and the choices you have. We've tried to write it in plain English. If anything is unclear, email keegan@cloudpixel.com.au.

The short version. We store your account and your food log so the app works and syncs. Your voice is sent to OpenAI in real time to understand what you said, and isn't used to train their models. We don't sell your data, we don't show ads, and you can delete everything from inside the app.

1. What we collect

Data	Where it comes from	Why
Name, email address, username	Sign in with Apple or Google, and the profile you set up	To create your account, let friends find you, and contact you about the service
Food and drink log (items, calories, macros, times, notes)	What you say or type into the app	To show your totals, history and charts, and sync between your devices
Daily calorie target and "about you" notes	Settings	To personalise what the assistant says and how it estimates
Voice audio and transcripts	The microphone, only while a voice session is active	To understand what you ate. See section 3
Friend connections	Requests you send and accept	To share logs with people you've chosen
Technical data (device type, OS version, crash reports, request logs with IP address)	Your device and our servers	To keep the service running and fix problems

We do not collect your precise location, contacts, photos, or health data from Apple Health or Google Fit.

2. How we use it

To provide the app: logging, totals, history, sync, and the voice assistant.
To let friends you've accepted see your daily totals and entries.
To keep the service secure, prevent abuse, and fix bugs.
To tell you about important changes to Munch or this policy.

We don't use your data for advertising, and we don't sell it or rent it to anyone.

3. Voice and AI

When you start a voice session, audio from your microphone streams to OpenAI's Realtime API, which transcribes it, works out what you ate, and speaks back. Our server never holds the real OpenAI credentials in the app; it issues a short-lived session token instead. OpenAI processes this audio under its API data usage policy: data sent through the API is not used to train OpenAI's models, and is retained for up to 30 days for abuse monitoring before deletion. Munch keeps the resulting food entries in your account; we do not keep the audio.

Calorie and nutrient figures are estimates produced by an AI model from your description and typical portion sizes. They can be wrong. Munch is not a medical device and does not provide medical advice.

4. Who we share data with

OpenAI (USA): voice processing, as described above.
Cloudflare (global): hosts our servers and database, where your account and log are stored.
Apple and Google: only to verify your sign-in. We receive your name, email and a unique identifier; we never see a password. If you use Apple's "Hide My Email", we only see the relay address.
Friends you accept: can see your display name, username, daily target, daily totals and the entries in your log. Remove a friend at any time to stop this.

We may also disclose data if the law requires it, or to protect the rights and safety of users and the public.

5. Where your data lives

Munch runs on Cloudflare's network, with data stored in Cloudflare D1. Voice audio is processed by OpenAI in the United States. By using Munch you consent to your data being processed in these locations. We apply the safeguards in this policy wherever the data is.

6. How long we keep it

For as long as you have an account. When you delete your account, your profile, food log, friend connections and sign-in links are deleted from our database immediately. Backups and server logs are purged within 30 days.

7. Your choices and rights

Delete your account from Settings in the app. This is immediate and cannot be undone.
Edit or delete any entry, your target, name and username at any time.
Remove a friend from their profile to stop sharing.
Microphone: you can revoke access in iOS Settings; the app still works for manual entry.
Access or export your data, or ask a question, by emailing us. We'll respond within 30 days.

If you're in Australia, the Privacy Act 1988 and the Australian Privacy Principles apply, and you can complain to the OAIC. If you're in the EU/UK, you have the rights under the GDPR, including access, rectification, erasure, portability and objection.

8. Children

Munch is not intended for children under 16, and we don't knowingly collect data from them. If you believe a child has an account, email us and we'll delete it.

9. Security

All traffic is encrypted in transit. Sign-in uses Apple and Google's identity services, so we never store passwords. Session tokens are stored in the device keychain. The OpenAI key never leaves our server. No system is perfectly secure, so please tell us promptly if you suspect a problem.

10. Changes

If we make material changes we'll post the new policy here and update the date above, and tell you in the app where appropriate.

11. Contact

CloudPixel · keegan@cloudpixel.com.au