Privacy Policy
Last updated: 9 October 2026
1. What we collect
Account data: email address, name (if provided), and account preferences when you sign up.
Receipt data: when you scan a receipt, the photo is sent to xAI or OpenAI to extract item names, quantities, and prices (see section 3). FitMunch does not keep the original receipt photo on our servers after the scan response. Extracted item and nutrition data may stay with your account if you save a meal, plan, or log.
Food and nutrition data: meals you log, foods you add to your pantry, shopping lists you create, meal plans you build, and nutrition preferences you set.
Usage data: pages visited and features used, to improve FitMunch, and a count of your coach chat, meal plan, receipt scan, daily tip, weekly review and workout plan uses, stored with your account to apply plan limits.
Website analytics: Vercel Web Analytics counts page views without cookies and without identifying you. Vercel is based in the United States.
PT/client relationship data: if you connect with a personal trainer through FitMunch, your trainer may view shared nutrition and meal plan data you've opted into sharing.
2. How we use your data
- To provide the FitMunch service: receipt scanning, meal planning, nutrition tracking, shopping lists, pantry management.
- To improve how FitMunch matches scanned items to foods in its nutrition data.
- To communicate service updates, billing, and support responses.
- To personalise your experience: meal suggestions, nutrition insights, and food recommendations.
We do not sell your personal data to third parties.
3. AI features and who processes your data
Some FitMunch features send data to AI providers based in the United States: xAI, OpenAI and Anthropic. The tables below show what each feature sends and who receives it.
When you use one of these features, FitMunch sends the data listed below from our servers to an AI provider, which processes it and returns the answer. These requests do not include your name or email address.
Which features use AI and what each one sends
| Feature | Data sent | Sent to |
|---|---|---|
| Coach chat (app and web) | Your messages and the coach's recent replies in that conversation. Anything you type in the chat is sent. Also the age, weight, height, goal and dietary preferences saved in your profile. On the website, the chat also sends your daily calorie and protein targets, what you have logged today, and your logging streak. | xAI, OpenAI or Anthropic (first available) |
| Meal plan generation (app and web) | Your goal, daily calorie target, daily protein target and the number of days. On the website, it also sends any dietary requirements you choose. | xAI, OpenAI or Anthropic (first available) |
| Receipt scanning (app and web) | The photo of your receipt, so the AI can list the food items on it. | xAI or OpenAI only, never Anthropic |
| Daily coaching tip (web) | Your goal, your daily calorie and protein targets, what you have logged today, and your logging streak. | xAI, OpenAI or Anthropic (first available) |
| Weekly review (web) | A summary of your last 7 days: days with meals logged, calorie and protein totals and averages, the number and type of workouts, up to three recent weigh-ins, your goal, and your calorie and protein targets. | xAI, OpenAI or Anthropic (first available) |
| Workout plan (web) | Your goal, experience level, training days per week, equipment, session length, and any focus or limits you type in. | xAI, OpenAI or Anthropic (first available) |
Who processes it
Coach chat, meal plans, coaching tips, weekly reviews and workout plans go to one of these providers. FitMunch tries them in the order below and uses the first one that is available. If a provider is not set up for FitMunch, rejects FitMunch's account or access, is unavailable, is busy, cannot be reached or does not respond in time, the same request goes to the next one in the list. If a provider has any other error, the request stops there and is not sent to another provider.
| Provider | Used for | Where | Privacy and terms |
|---|---|---|---|
| 1. xAI | First choice for coach chat, meal plans, tips, reviews and workout plans. Also receipt scanning. | Based in the United States | Privacy Policy, enterprise terms |
| 2. OpenAI | Coach chat, meal plans, tips, reviews and workout plans, if xAI is not available. Also receipt scanning. | Based in the United States | Privacy Policy, Services Agreement |
| 3. Anthropic | The same features except receipt scanning, if xAI and OpenAI are not available | Based in the United States | Privacy Policy, Commercial Terms |
Receipt photos go to xAI or OpenAI only. A receipt photo is never sent to Anthropic. If the photo cannot be read, FitMunch shows an error and asks you to retake it. If scanning is unavailable, FitMunch tells you so. Either way, nothing from that photo is shown as your shop or added to your food log.
These providers process the data to return the answer to FitMunch, under the terms that cover their developer services. For how each provider handles data, see the links above.
Where your data goes
xAI, OpenAI and Anthropic are based in the United States. Your requests may be processed in the United States and in other countries where these providers or their service providers operate. Your account and food data are stored in FitMunch's database, which Neon hosts in the United States (US East). Stripe (payments), Resend (email), RevenueCat (in-app subscriptions), Apple (App Store purchases), Google (web fonts) and Vercel (website analytics) may also process your data in the United States. FitMunch's own server functions run in Vercel's Sydney region in Australia.
Your choice
In the FitMunch app and on the website, before the first of these features sends anything, we ask you once for your account, with Allow and Not now. We only send your data to an AI provider after you tap Allow, and our servers check that choice before every AI request. If you tap Not now, the AI features stay off and the rest of FitMunch keeps working. You can change your choice and turn AI features off at any time under Me > Privacy in the app, or Privacy in the menu on the website.
On the website, the daily coaching tip is requested when your dashboard loads, and only after you have allowed AI features. The other AI features send their data only when you use them, for example when you send a coach chat message or ask for a plan or review.
The receipt photo is sent to xAI or OpenAI for that scan, then discarded on FitMunch servers. Extracted text and macros may be stored if you save them to your account.
4. Data storage and security
Your data is stored on secure cloud infrastructure with encryption at rest and in transit. We use industry-standard security practices and regularly review our systems.
5. Data sharing
We share data only:
- With your personal trainer, if you've connected your account and opted into sharing.
- With our service providers, which process data to run FitMunch:
- Hosting: Vercel. FitMunch's server functions run in Vercel's Sydney region.
- Database: Neon (PostgreSQL), hosted in the United States (US East).
- Payments: Stripe.
- In-app subscriptions: RevenueCat, which keeps track of subscriptions bought in the iOS app.
- In-app purchases: Apple. If you subscribe in the iOS app, Apple handles the payment and RevenueCat receives your FitMunch account ID, your purchase history and basic device details such as app version, not your health data, coach messages or receipt photos.
- Email: Resend, which sends account and billing emails.
- Fonts: Google Fonts. When you load a FitMunch web page, your browser requests font files from Google.
- AI processing: the providers listed in section 3.
- When required by law or to protect our rights.
6. Your rights
You can:
- Access your data by emailing support@fitmunch.com.au.
- Request deletion of your account and all associated data.
- Turn AI features off at any time under Me > Privacy in the app, or Privacy in the menu on the website. The rest of FitMunch keeps working.
- Download a copy of your data as a JSON file from Privacy in the menu on the website: your account, profile, food and workout logs, progress, meal and workout plans, shopping lists, favourites, achievements, in-app activity events, monthly AI feature usage counts, and any trainer and client links, plan assignments and client invitations.
- Withdraw PT sharing at any time from your account settings.
7. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
8. Children
FitMunch is for people 18 and over.
9. Changes
We'll notify you of material changes to this policy via email or in-app notice before they take effect.
10. Contact
Privacy questions: support@fitmunch.com.au
Data deletion requests: support@fitmunch.com.au
FitMunch provides general food planning support. It is not a medical device and does not provide medical advice.