Legal

Privacy Policy

How whattoBite collects, uses, and protects your personal information.

Last updated: July 11, 2026

Overview Information We Collect How We Use Your Information AI & Automated Processing Cookies & Local Storage Data Retention Your Rights & Choices Sensitive Health Information Minors & Parental Guidance Data Security International Data Transfers Changes to This Policy Contact Us

1. Overview

whattoBite ("we", "us", or "our") is an AI-powered personalized diet planning platform operated at whattobite.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services.

By using whattoBite, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

Last updated: July 11, 2026.

2. Information We Collect

2.1 Account Information (via Google Sign-In)

When you sign in with Google, we receive from Google's OAuth service:

•• Your full name and display name

•• Your Google account email address

•• Your Google profile photo URL

•• A unique identifier to associate with your account

We do not store your Google password. Authentication is handled entirely by Google.

2.2 Health & Biometric Data

To generate personalized diet plans, we collect and store the following health information you voluntarily provide during onboarding:

•• Age and gender

•• Current height and weight (in metric or imperial units)

•• Target weight and fitness goal (e.g., lose fat, gain muscle, maintain weight)

•• Physical activity level

•• Nationality / cuisine preference

•• Dietary preferences (vegetarian, vegan, non-vegetarian, etc.)

•• Food allergies and intolerances

•• Meal preferences and dislikes

This data is essential to provide our core service. Without it, we cannot generate meaningful diet plans.

2.3 Usage & Behavioral Data

As you use the platform, we record:

•• Meals logged and consumed (with macro-nutritional details)

•• Daily and weekly calorie/macro progress

•• Weight logs over time

•• Diet plan generation history and plan snapshots

•• XP points earned, streak counts, and badges unlocked

•• AI chatbot (Watto) conversation history

•• Subscription status, billing cycle, and payment region

•• Email notification preferences (weekly diet email, Sunday prep reminder, progress summary)

2.4 Technical & Device Data

When you access our services, we automatically collect:

•• IP address (used for payment region detection and security)

•• Browser type and version

•• Operating system

•• Pages visited and features used (via our analytics tools)

•• Timestamps of interactions

•• PWA installation status

2.5 Payment Information

We do not store your payment card details. Payments are processed by our payment partners — Razorpay (for users in India) and our international payment processor — each governed by their own privacy policies.

We only store: subscription IDs, subscription status (active/inactive/trial), billing cycle (monthly/annual), and trial expiration dates. Financial card data never touches our servers.

2.6 Communications

If you opt in to email notifications, we store your email preferences and send you:

•• Weekly personalized diet plan emails

•• Sunday meal prep reminders

•• Progress summary emails

You can opt out of all emails at any time from your profile settings.

3. How We Use Your Information

We use the information we collect to:

•• Generate personalized 7-day meal plans using our AI engine

•• Power the Watto AI chatbot with contextual dietary guidance

•• Track and display your nutrition progress, streaks, and achievements

•• Send opt-in email reminders and weekly diet summaries

•• Process subscription payments and manage your plan tier

•• Detect your payment region (India vs. international) for appropriate pricing

•• Improve the accuracy and personalization of our AI recommendations over time

•• Monitor app performance, fix bugs, and improve features

•• Comply with applicable laws and prevent fraudulent activity

We do not use your health or biometric data for advertising, and we do not sell it to third parties.

4. AI & Automated Processing

whattoBite uses AI technology to:

•• Generate weekly personalized diet plans based on your profile

•• Analyze meal descriptions for macro estimates

•• Power the Watto AI assistant for conversational dietary guidance

•• Generate AI-driven health insights

Your health profile data (age, weight, goals, dietary preferences) is processed by our AI systems to generate these outputs. We do not share your name or email with AI processing — only the health metrics relevant to diet generation.

Automated diet plan generation may also run on a scheduled basis (e.g., every Sunday night) to keep your plan current.

5. Cookies & Local Storage

We use the following storage mechanisms:

•• Authentication tokens — We store your session token in browser storage to keep you logged in securely.

•• Analytics cookies — Our analytics service uses cookies to measure usage patterns. You can opt out via your browser settings.

•• Local storage — We may store user preferences (theme, unit system) in your browser's local storage for a better experience.

We do not use cookies for advertising or cross-site tracking. You can clear cookies and local storage at any time through your browser settings, though this will sign you out.

6. Data Retention

We retain your data for as long as your account is active. Specifically:

•• Account and profile data — Retained while your account exists.

•• Diet plan history — Retained for the duration of your account to power comparison and progress features.

•• Meal logs and weight logs — Retained for the duration of your account.

•• Payment records — Subscription status and IDs retained for accounting and dispute purposes as required by law.

•• After account deletion — Your personal data is deleted or anonymized within 30 days of account deletion, except where retention is required by law.

You can delete your account at any time from your Profile page under Settings.

7. Your Rights & Choices

Depending on your location, you may have the following rights:

•• Access — Request a copy of the personal data we hold about you.

•• Correction — Update or correct inaccurate information via your Profile settings.

•• Deletion — Delete your account and all associated data from Profile → Settings → Delete Account, or by emailing us.

•• Portability — Download your diet plans as PDF directly from the app.

•• Opt-out of emails — Toggle email preferences off in your Profile → Settings at any time.

•• Withdraw consent — You may stop using the service at any time. Continued use after changes to this policy constitutes acceptance.

For any privacy request, contact us at [email protected].

8. Sensitive Health Information

whattoBite processes sensitive health and biometric data (weight, dietary restrictions, fitness goals, allergies). We treat this data with heightened care:

•• It is stored securely using encrypted, access-controlled infrastructure.

•• It is never sold, rented, or shared with advertisers.

•• It is only used to provide our core nutrition service and AI-powered features.

•• Access is restricted to authorized systems and personnel.

By using whattoBite, you explicitly consent to our processing of this health-related information for the purpose of delivering personalized nutrition services.

9. Minors & Parental Guidance

whattoBite is a health and nutrition platform suitable for users of all ages who are mindful of their diet and wellness. We welcome teenagers and young adults who want to build healthy eating habits.

However, users under the age of 13 must have explicit parental or guardian consent before creating an account or providing any personal information.

Users between the ages of 13 and 18 are encouraged to use the platform with parental awareness and involvement. Parents or guardians can review the data their child has entered via the Profile section, and may request data correction or deletion on their child's behalf by contacting us at [email protected].

We do not knowingly collect data from children under 13 without verifiable parental consent. If you believe a child under 13 has created an account without consent, please contact us immediately and we will remove the account promptly.

10. Data Security

We implement industry-standard security measures including:

•• HTTPS/TLS encryption for all data in transit

•• Encrypted cloud database storage

•• Token-based verification for every authenticated API request

•• Restricted database access with least-privilege principles

•• Signature verification for all payment webhook events

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

11. International Data Transfers

whattoBite is operated from India and serves users globally. Your data may be processed in India and other jurisdictions where our cloud service providers and payment processors operate.

By using whattoBite, you consent to the transfer of your data to these jurisdictions. We ensure that transfers to third-party processors are governed by appropriate contractual safeguards and data protection agreements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For significant changes, we will notify you via email (if you have opted into notifications) or via an in-app notice.

We encourage you to review this policy periodically. Continued use of whattoBite after any changes constitutes your acceptance of the new policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: [email protected]

Website: whattobite.com

We aim to respond to all privacy-related inquiries within 7 business days.

Questions about this policy?