Last updated: July 23, 2026
Thank you for trusting Phone Eats First ("the App") with your information. Protecting your privacy is very important to us. This Privacy Policy explains how Aetherize Labs LLC ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use the App and our related websites and services (collectively, the "Services").
External APIs. When you search for foods or use AI analysis features, your queries are processed by:
These services process your data according to their respective privacy policies.
Apple HealthKit (optional). With your explicit consent, we may import nutrition or activity data to enhance your tracking experience.
Our legal bases under the EU GDPR are Contract performance, Legitimate interests, Consent, and Legal obligations as applicable.
We share your information only in the following situations:
We do not sell or rent your personal information.
We use first-party session cookies for authentication only. We do not use third-party analytics cookies or tracking technologies on our website.
Food Search & Analysis. When you search for foods, scan barcodes, or use AI photo analysis, the data needed for that request may be sent to Edamam, OpenAI, Google Cloud, or Google AI services according to the feature and provider configuration.
Realtime Voice. Realtime voice is optional and disabled unless both the server feature flag and your local preference are on. Before the first session, the App explains that audio will go to OpenAI and asks you to continue. If you accept and start a session, microphone audio is streamed directly from your device to OpenAI over an encrypted connection. The App receives realtime audio responses, captions, and tool instructions needed to prepare actions such as a food-log draft. To prepare a requested draft, the App sends the food description and the requested meal, date, amount, and unit to our authenticated backend and the configured food-analysis services, which may include OpenAI, Google AI services, Edamam, and our food catalog depending on the feature and provider configuration. Phone Eats First does not store live audio, realtime transcripts, SDP, or voice-tool arguments in its databases. Drafts are not saved to your Diary until you confirm them.
In-App Voice Display. During an active realtime session, captions, your last recognized spoken text, and raw unfinished tool-call arguments are kept in memory to operate the conversation. They are not written to the device and are cleared when the session ends, when the App enters the background, or when you sign out. A prepared food-log draft may remain in memory after the session so that you can confirm or dismiss it; it is not added to your Diary unless you confirm it, cannot be saved after it expires, and is cleared when you sign out or close the App. If a connection drops while a food-log draft is pending, a limited draft summary may be sent to OpenAI to resume the conversation.
Recorded Voice. When you choose a recorded-audio food-description feature, the audio is sent to our backend and can be processed by xAI directly or routed through Vercel AI Gateway to xAI. The resulting transcription can then be sent to the configured food-analysis service for the requested feature.
Provider Retention. We use OpenAI API standard data controls, do not opt in to sharing API inputs or outputs for model improvement, and do not use Zero Data Retention for this project. OpenAI may retain API data for abuse monitoring in accordance with the data-control and retention terms that apply to our project. We will update this policy if those settings change.
Data Minimization. We send only the data needed for the requested feature. Realtime voice requests use a pseudonymous safety identifier derived from your account identifier rather than sending the raw account identifier to OpenAI.
Depending on your location, you may have rights to:
You can delete your account and associated data in the App through Settings > Delete Account. To exercise other rights, email support@phoneeatsfirst.ai.
Residents of California may request a list of personal information categories we disclosed for business purposes in the preceding 12 months (CCPA §§ 1798.110, 115).
We retain your information only as long as necessary to fulfill the purposes described above or as required by law. If you delete your account, we erase personal data within 30 days, except backups held for disaster recovery (deleted within 90 days).
We use industry-standard measures such as TLS encryption in transit, encryption at rest, secure authentication via Firebase, and regular security monitoring. No system is 100% secure, but we work diligently to protect your data.
The App is not directed to children under 13. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete the information.
Your data may be processed outside your jurisdiction (e.g., servers in the United States via AWS). We rely on Standard Contractual Clauses or other appropriate safeguards for cross-border transfers when required.
The Services may include links to third-party sites or integrations. We have no control over their privacy practices. This policy does not apply to:
Please review their respective privacy policies.
We may update this Privacy Policy occasionally. We will notify you via the App or email and revise the "Last updated" date. Continued use constitutes acceptance of the changes.
If you have questions about this Privacy Policy or our data practices, contact us at:
Aetherize Labs LLC
Attn: Privacy Officer
2727 Travis St. #310
Houston, TX 77006
United States
Email: support@phoneeatsfirst.ai