App Privacy Policy

Decrave is operated by Useful Future Limited, trading as Decrave.

Useful Future Limited is registered in Scotland. Company number: SC874908. Registered office: Office 1, Technology House, 9 Newton Place, Glasgow, United Kingdom, G3 7PR.

Decrave is designed to help people understand cravings, food noise, hunger patterns, and appetite pressure by logging relevant signals and receiving personalised support. This Privacy Policy explains what data the Decrave app collects, how we use it, who we share it with, and what choices you have.

Decrave is not a medical device and does not provide medical advice, diagnosis, treatment, or cure.

Decrave collects the information needed to operate the app, personalise your experience, support AI-powered features, manage accounts and subscriptions, maintain safety, and improve the product.

Decrave is intended for users aged 18 or over.

Some information may be stored locally on your device. If you create an account or use cloud-backed features, your data is synced to Decrave's cloud systems.

We do not sell your personal data. We do not use your app data for third-party advertising. We do not share your app data with data brokers.

We do use trusted service providers, including analytics providers such as Mixpanel and error monitoring providers such as Sentry, to understand how Decrave is used, improve the product, monitor reliability, and operate the service. This is not used for third-party advertising, data-broker sharing, or tracking you across other companies' apps and websites for advertising purposes.

Because Decrave works with appetite, cravings, meals, sleep, stress, routines, medication context, eating-disorder safety questions, and related information, some of the information you enter may be health-related or sensitive.

Decrave asks for your explicit agreement to the health-related, appetite-related, and Google Gemini processing described in this policy. This processing is integral to Decrave's core experience, so you cannot use the app if you do not agree. Connecting Apple Health or Health Connect remains optional.

If you choose to connect Apple Health or Health Connect, Decrave may read selected sleep and movement data, such as sleep timing, sleep duration, steps, and activity around meals. This helps Decrave personalise appetite-pressure insights and suggested actions. Connecting health data is optional.

Some features use automated processing to personalise insights, forecasts, recommendations, progress views, and AI-supported responses. Decrave does not use automated processing to make legal, medical, insurance, credit, employment, or similarly significant decisions about you.

For App Store privacy label purposes, Decrave may collect contact information, identifiers, health-related and sensitive information, connected health and fitness data, precise or approximate foreground location when you ask for nearby food options, photos or videos, user content, purchases, usage data, and diagnostics.

These categories are used to provide app functionality, personalise the app experience, operate subscriptions, provide support, maintain safety and reliability, understand app performance, and improve Decrave.

Decrave does not use this data for third-party advertising or tracking as defined by Apple, and does not share app data with data brokers.

Account Information

If you create or use an account, we may collect:

• Your email address
• Your Apple sign-in identifier, if you use Sign in with Apple
• Your first name, if provided during onboarding
• Your Decrave user ID
• Authentication and session information needed to keep you signed in
• Account status, subscription access, and trial status
• Your confirmation that you are 18 or over
• Your acceptance of our Terms of Service and App Privacy Policy
• Consent records, including the date, time, app version, and policy version where relevant

Onboarding and Profile Information

During onboarding and profile setup, Decrave may ask about:

• Sleep duration and sleep consistency
• Usual meal timing and long gaps without food
• Morning and afternoon energy
• Mood stability
• Stress level
• Alcohol and caffeine patterns
• Sugary foods, sugary drinks, refined carbohydrates, processed foods, fibre, fermented foods, and dietary preferences
• Craving frequency, craving intensity, hunger predictability, perceived control, emotional impact, and typical craving times
• GLP-1 medication status
• Pregnancy, breastfeeding, eating-disorder history or distress, diabetes, blood-sugar conditions, or glucose-lowering medication, where relevant to safety messaging

This information is used to personalise the app, support appetite-related features, and help ensure Decrave is not presented as a replacement for professional medical support.

Connected Health Data

If you choose to connect Apple Health on iOS or Health Connect on Android, Decrave may read selected health and fitness data from your device, including:

• Sleep timing
• Sleep duration
• Sleep consistency or sleep-session information where available
• Step counts
• Activity or movement timing
• Movement patterns around logged meals, such as whether you moved after eating

Decrave uses this data to support appetite-related insights, daily rhythm interpretation, and suggested actions. For example, Decrave may use post-meal movement data to understand whether movement may have supported appetite steadiness after a meal.

Decrave does not use Apple Health or Health Connect data for third-party advertising, marketing, data-broker sharing, or tracking you across other companies' apps and websites.

Decrave does not diagnose, treat, or measure blood glucose, and health-data insights should not be treated as medical advice.

Logs and App Activity

Decrave may collect and store information you enter or generate in the app, including:

• Meal logs
• Craving logs
• Sleep logs
• Skill or action logs
• Base checks and check-ins
• Progress scores and trends
• Recommendations shown, saved, dismissed, or acted on
• Daily rhythm, forecast, and risk-related app state
• Movement patterns around logged meals where you choose to connect health or fitness data
• Scrapbook notes, saved notes, journal-style entries, kitchen items, recipes, grocery items, and related metadata where you choose to use those features
• Notification records created inside the app

AI Chat and AI Feature Data

When you use AI-powered features, such as Inara, meal analysis, Quick Scan, craving support, suggestions, summaries, or reports, Decrave may process:

• Your messages or prompts
• Relevant recent app context, such as meal, craving, sleep, skill, or profile signals
• Food names, descriptions, or meal context you provide
• Food photos you choose to upload or capture
• Derived summaries, classifications, suggestions, and AI responses
• AI usage metadata, such as feature used, model or provider, token usage, timing, success or failure, and error category

We use this data to provide the requested AI feature, improve reliability, manage fair use, troubleshoot the service, and maintain safety.

AI outputs may be inaccurate or incomplete. Decrave should not be used as a substitute for professional medical, nutritional, psychological, or emergency advice.

Photos and Media

If you choose to use camera, photo library, or file upload features, Decrave may access the image you select or capture so it can be analysed. This is used for food photo analysis, Inara, and Quick Scan features.

Decrave may store derived information from the image, such as a food description, uncertainty, classification, or evidence snapshot.

We do not store raw food photos as part of your long-term account record unless a feature clearly tells you otherwise.

You can decline or revoke camera and photo permissions through your device settings.

Location

When you choose the nearby food-options feature, Decrave asks for foreground location permission. Depending on your device settings, the location provided may be precise or approximate. Decrave sends these coordinates with relevant conversation and personalisation context to Google Gemini and Google Maps through Decrave's Google Cloud infrastructure to suggest nearby food options. Coordinates may also be used for follow-up messages in that conversation.

Decrave removes the separate device-coordinate field before saving the conversation on your device or in your account. Your saved messages and recommendations may still describe places or areas. Google retains the prompts, context, and responses used for Google Maps grounding for 30 days, as explained under AI Processing and Retention and Deletion below.

Location access is not used in the background and can be declined or revoked in your device settings.

Device, Trial, and Technical Data

Decrave may collect:

• Device platform, such as iOS, Android, or web
• App version and build number
• A device/vendor identifier or hashed device fingerprint
• An install ID
• Push-notification tokens, including native, Expo, and Live Activity tokens where supported
• A device name used to manage notification registrations
• Notification preferences and notification content needed to deliver alerts you enable
• Session timestamps
• Trial status and trial-claim information
• Basic diagnostics, crash reports, error categories, stack traces, breadcrumbs, and performance-related metadata

We use this to operate the app, prevent abuse of trials, secure accounts, diagnose problems, and keep the app reliable.

Analytics Data

Decrave uses analytics providers, including Mixpanel, to understand how the product is used and where it needs improvement.

Analytics may include events such as:

• App opened
• Onboarding step viewed or completed
• Feature opened
• Meal, craving, sleep, or skill log completed
• AI guide opened
• Recommendation shown, dismissed, saved, or acted on
• Subscription or paywall events
• Errors, failed app surfaces, or performance events

We do not intentionally send sensitive free-text content, food names, chat messages, prompts, photos, medical answers, raw log content, journal entries, or detailed appetite responses to analytics tools.

Mixpanel receives a random anonymous analytics code that is not linked or aliased to your Decrave account ID. It does not receive your name or email address. This helps us understand product usage, reliability, retention, and feature performance without identifying your Decrave account.

Analytics is enabled after you accept the onboarding agreement. You can stop future Mixpanel collection at any time using Share usage analytics under Settings > Privacy without losing access to Decrave. Analytics is used to operate and improve Decrave and is not used for advertising, sale of data, or tracking across other companies' apps or websites.

Diagnostics and Error Monitoring Data

Decrave uses error monitoring providers, including Sentry, to detect crashes, diagnose bugs, monitor reliability, and understand performance issues.

Diagnostics and error monitoring data may include:

• Device platform, operating system, app version, and build number
• Screen, feature, timestamp, and limited non-content technical context needed to diagnose the issue
• Error messages, error categories, stack traces, diagnostic breadcrumbs, and performance metadata
• Network request metadata, such as endpoint path, status code, timing, and failure category, where relevant to troubleshooting

We do not intentionally send sensitive free-text content, food names, chat messages, prompts, photos, medical answers, raw log content, journal entries, or detailed appetite responses to error monitoring tools.

Diagnostics and error monitoring data is used to operate, secure, troubleshoot, and improve Decrave. It is not used for third-party advertising, data-broker sharing, or tracking you across other companies' apps or websites for advertising purposes.

Feedback and Support

If you submit feedback or contact us, we may collect:

• Your feedback text
• Optional name or email address
• Feature, screen, app version, platform, and timestamp
• Relevant context you choose to include
• For an Inara response report, the selected reason, the reported response, and only the request immediately before it

Please avoid including sensitive medical or personal information in feedback unless it is necessary for your request.

Subscription and Purchase Information

If you subscribe, purchase, restore purchases, or manage a subscription, Decrave and its subscription provider may process:

• Subscription status
• Entitlement status
• Product or package selected
• Purchase, restore, renewal, expiry, or cancellation state
• Store account or subscription management links where available

Payment card details are handled by Apple, Google, Stripe, or the relevant app store or payment provider. Decrave does not receive your full payment card details.

We use data to:

• Create and manage your account
• Confirm age eligibility and policy acceptance
• Record consent where required
• Sync your data across devices when you use an account
• Personalise insights, recommendations, risk forecasts, and app content
• Use connected sleep and movement data to personalise appetite-pressure insights
• Understand movement around meals, such as post-meal activity patterns
• Suggest small appetite-support actions, such as gentle movement after certain meals
• Improve rhythm, sleep, and routine-related interpretation where you have enabled health-data access
• Provide AI-powered support and food or craving analysis
• Track progress and app state
• Operate subscriptions, trials, and access controls
• Provide customer support and respond to feedback
• Improve app quality, reliability, and usability
• Monitor product performance and fix errors
• Prevent fraud, misuse, or repeated trial abuse
• Maintain safety, security, and service integrity
• Comply with legal obligations

Some Decrave data may be stored locally on your device.

If you create an account, sign in, or use cloud-backed features, Decrave syncs relevant app data to its cloud systems so your account can preserve your progress and support features that require server processing.

If you connect Apple Health or Health Connect, Decrave may process selected health data on your device and may sync relevant derived data or app-ready summaries to Decrave's cloud systems where needed to provide cloud-backed insights, recommendations, and account continuity.

Some features may offer local-only or privacy controls, such as whether certain journal or scrapbook content is synced or made available to Inara. These controls affect the relevant feature as described in the app.

If you delete the app without an account, locally stored data may be removed from that device and Decrave may not be able to recover it.

Decrave uses AI service providers to deliver features such as Inara chat, meal analysis, craving support, recommendations, summaries, and reports.

Decrave uses Google Gemini through Decrave's Google Cloud infrastructure. When relevant to a feature you use, information you provide—including messages, meal information, photos, health-related information, and appetite context—is sent securely to Google Gemini to generate results and responses.

Google Gemini processing is part of Decrave's overall experience, including its meal, craving, and appetite features. Decrave cannot provide its core experience without this processing.

The primary configured Google Cloud processing region is europe-west1. Some subprocessors, support operations, or transfers may occur elsewhere under appropriate safeguards; we do not claim that every processing activity remains exclusively in Europe.

We aim to send only the information needed for the feature.

Decrave's AI usage logs are designed to record usage and reliability metadata, not full prompt or response content, unless the feature itself stores a conversation or result for your account.

For nearby food options, Google Maps grounding uses Maps information to support the AI response. Google stores the submitted prompts and context, including the supplied coordinates, and generated responses for 30 days to provide this feature and support service reliability and debugging. This retention cannot be disabled while using Google Maps grounding.

Decrave does not use your app data, prompts, photos, logs, or AI conversations to train general-purpose AI models. Google Cloud's handling of submitted data is governed by Decrave's cloud service configuration and contractual terms.

AI outputs may be inaccurate or incomplete. Decrave should not be used as a substitute for professional medical, nutritional, psychological, or emergency advice.

Decrave uses your logs, onboarding answers, app activity, and related signals to personalise insights, risk forecasts, recommendations, progress views, and AI-supported responses.

These features may involve automated processing.

Decrave does not use automated processing to make decisions that produce legal or similarly significant effects about you.

Decrave's outputs are intended as self-support and educational guidance, not medical, employment, insurance, credit, or legal decisions.

When you first use Decrave, you must confirm that you are 18 or over, agree to our Terms of Service, acknowledge this App Privacy Policy, and explicitly agree to the health-related, appetite-related, and Google Gemini processing described here.

The agreement covers information you provide about appetite, cravings, food noise, eating behaviour, sleep, stress, medication, pregnancy, diabetes, blood-sugar conditions, eating-disorder history or distress, and related safety information, where it is processed to provide Decrave.

This consent allows Decrave to personalise appetite insights, recommendations, AI features, safety messaging, progress views, and related app experiences.

You may choose not to agree, but because this processing is integral to the app, you will not be able to use Decrave's core experience.

Where consent is required, you can withdraw consent, but this may affect access to features that depend on that information.

Connecting Apple Health or Health Connect is optional. We ask for permission before reading health or fitness data from these services. You can decline or revoke this permission through your device settings.

We may share data with service providers that help us operate Decrave, including:

• Supabase, for authentication, database, cloud functions, and account storage
• Mixpanel, for product analytics
• Sentry, for crash reporting, diagnostics, error monitoring, and performance monitoring
• RevenueCat, for subscription and entitlement management
• Apple, for Sign in with Apple, App Store purchases, and platform services
• Google Cloud and Google Gemini, for the AI processing described above
• Google Maps, when you ask for nearby food options
• Expo and Apple or Google push-notification infrastructure, to deliver notifications and Live Activities you enable
• Hosting, security, email, support, and operational service providers as needed

These providers process data to help us deliver, secure, understand, and improve Decrave.

Apple Health and Health Connect are device/platform services that allow you to control whether Decrave can read selected health and fitness data. Decrave does not sell or share connected health data for advertising, marketing, or data-broker purposes.

We do not sell personal data. We do not use your app data for third-party advertising. We do not share your app data with data brokers.

We may also disclose information if required by law, to protect rights and safety, to investigate misuse, to prevent fraud or abuse, or as part of a business transfer such as a merger, acquisition, restructuring, or sale of assets.

Where UK GDPR or similar laws apply, we rely on one or more of the following legal bases:

• Contract, to provide the app, account, subscription, and requested features
• Consent, where you choose to provide optional information, enable permissions, use certain AI or photo features, or submit certain sensitive information
• Legitimate interests, to improve, secure, analyse, and operate Decrave, prevent misuse, troubleshoot errors, and understand product performance
• Legal obligation, where we must retain or disclose information to comply with the law

Some information processed by Decrave may be health-related or otherwise sensitive. Where this information is special category data under UK GDPR, we also rely on a separate Article 9 condition, usually your explicit consent, unless another condition applies.

Some information processed by Decrave may be health-related or otherwise sensitive. This may include information about eating behaviour, appetite, cravings, food noise, pregnancy, breastfeeding, diabetes, blood-sugar conditions, medication, eating-disorder history or distress, mood, stress, sleep, or related matters.

Where UK GDPR applies and this information is special category data, we need both an Article 6 lawful basis and a separate Article 9 condition.

In many cases, the Article 9 condition will be your explicit consent.

You can refuse or later withdraw explicit consent. Because the processing described here is integral to Decrave's core experience, Decrave cannot continue providing the app once that consent is withdrawn. Optional Apple Health and Health Connect permissions can be declined or revoked without losing the core app.

We keep personal data for as long as needed to provide Decrave, maintain your account, comply with legal obligations, resolve disputes, prevent misuse, maintain safety, and improve the product.

Different types of data may be kept for different periods.

Account and app data are generally kept while your account is active.

• Temporary response records help prevent duplicate processing when a request is retried. They expire for reuse after 24 hours and are removed by the next scheduled daily cleanup after expiry. Physical storage can therefore last longer than 24 hours; cleanup may be delayed if a service issue occurs.
• Google retains prompts, context, and generated responses for Google Maps grounding for 30 days. This includes coordinates supplied for nearby food options and is separate from Decrave's saved conversation records.
• Quick Scan history and the local meal-analysis cache are kept for up to 30 days.
• Inara response reports, including their limited excerpts, are kept for up to 12 months unless you delete your account sooner.
• Mixpanel analytics may be kept while your account is active and for no more than 12 months after account deletion. It remains associated only with the anonymous analytics code and is not linked to the former Decrave account.

Support, security, analytics, fraud-prevention, subscription, and accounting records may be kept for longer where needed for legitimate business, legal, tax, safety, or operational reasons.

Backup copies may take time to expire.

You can delete your account in the app. Account deletion is designed to remove your account and associated cloud data from active Decrave systems, and to clear local account state from the device.

Deleting your Decrave account does not cancel an Apple App Store or Google Play subscription. You must manage or cancel an active subscription through the relevant store. You can also find deletion instructions at https://getdecrave.com/accounts/delete-account.

Deletion from active Decrave systems does not immediately erase copies held in provider systems or backups. For example, Google Maps grounding request data remains subject to Google's 30-day retention period. Other limited records may remain in backups, logs, security records, app-store purchase records, subscription records, analytics records, or legal/accounting records for the retention periods and purposes described in this policy, or where required or permitted by law.

If you disconnect Apple Health or Health Connect, Decrave will stop future reads from that source, but previously synced Decrave records or derived summaries may remain until you delete them, delete your account, or request deletion, unless retention is required or permitted by law.

If you use Decrave without an account, you can reset the app or delete the app to remove locally stored data from that device.

You can:

• Choose what information to enter
• Choose whether to create an account
• Choose whether to submit feedback
• Choose whether to connect Apple Health or Health Connect
• Revoke Apple Health permissions in the Health app or iOS Settings
• Revoke Health Connect permissions in Android settings or the Health Connect app
• Use Decrave without connecting health data, with reduced personalisation for sleep and movement-based insights
• Decline or revoke camera/photo permissions in device settings
• Decline or revoke notification permissions in device settings
• Use in-app settings for supported privacy controls, such as journal or scrapbook AI access
• Turn off future Mixpanel collection using Share usage analytics under Settings > Privacy
• Sign out of your account
• Delete your account
• Contact us to request access, correction, deletion, or other privacy rights where applicable

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data.

You may also have the right to withdraw consent where we rely on consent.

You can exercise these rights by using in-app controls where available or contacting us at hi@getdecrave.com.

You also have the right to complain to your local data protection authority. In the UK, this is the Information Commissioner's Office.

Decrave is intended for users aged 18 or over. We do not knowingly collect personal data from anyone under 18.

If you are under 18, you must not use Decrave or provide personal data. Parental permission does not allow someone under 18 to use Decrave.

If we learn that someone under 18 has provided personal data, we will take appropriate steps to delete it and disable any associated account.

If you believe someone under 18 has provided personal data, contact us at hi@getdecrave.com. A parent or guardian may contact us to exercise privacy rights where they are legally entitled to act on behalf of the child.

Decrave is operated from the United Kingdom, but our service providers may process data in other countries.

Where required, we use appropriate safeguards for international transfers, such as adequacy regulations, contractual protections, or other lawful transfer mechanisms.

The primary configured Google Cloud processing region used for Decrave's Gemini gateway is europe-west1. This does not mean that every provider subprocess, support activity, or lawful transfer occurs only in Europe.

We use reasonable technical and organisational measures to protect personal data.

However, no system can be guaranteed completely secure.

You are responsible for keeping your account secure and telling us if you believe your account has been compromised.

We may update this Privacy Policy as Decrave evolves.

If we make material changes, we will update the "Last updated" date and make the revised policy available in the app or on our website.

Where required, we may also show a notice in the app or ask for renewed consent.

Useful Future Limited, trading as Decrave

Registered in Scotland

Company number: SC874908

Office 1, Technology House

9 Newton Place

Glasgow

United Kingdom

G3 7PR

Email: hi@getdecrave.com