Privacy policy

01 Who we are

WheyGPT (“the app”, “we”, “us”) is a protein tracking app for iOS, built and operated by Vikas Tikyani. This policy explains what data the app collects, why, where it lives, and the choices you have. It applies to the WheyGPT iOS app and this website.

If anything here is unclear, email support@wheygpt.app and a human will answer.

02 What we collect

Account information

• Your email address, used to create and sign in to your account.
• If you use Sign in with Apple, we receive the identifier Apple shares (which can be a private relay email if you choose to hide yours).

Profile information you enter

• Birthday, gender, height, weight, activity level, and your goal. These are used to calculate your protein and calorie targets.
• Optionally, the GLP‑1 medication you take and any appetite symptoms you select. These tune your targets and the coaching to your situation. You can skip them.

What you log in the app

• Food entries: meals, nutrition estimates, favorites, and the photos you take for analysis.
• Weight entries over time.
• Chat messages you send to the protein coach.
• Streak activity, and a display name if you opt in to the leaderboard.

Purchases and diagnostics

• Subscription status (active, trial, expired), managed through Apple and RevenueCat. We never see your card number or payment details; Apple handles all payment processing.
• Basic technical data such as app version and crash information, used to keep the app working.

We do not collect your precise location, your contacts, or your browsing history, and the app contains no advertising or ad trackers.

03 How AI features use your data

Two features send data to AI language models: photo food analysis and the protein coach chat.

• Meal photos are sent securely to our server, which passes them to an AI model to identify the food and estimate nutrition. Photos are processed for that purpose.
• Chat messages are processed together with relevant context (like your targets and what you’ve logged today) so answers are specific to you.
• Requests are made through our own server. Your name and email are not attached to AI requests.
• Your data is not used by us to train AI models.

A practical note: the coach is a place for nutrition questions. Please don’t paste passwords, financial details, or anything unrelated that you wouldn’t want processed.

04 Where your data lives

Your data is stored with Supabase, our database provider, encrypted in transit and at rest. Access is protected by row‑level security, which means your records are only readable by your own account. API keys for AI services are kept on our server, never inside the app on your phone.

05 Who we share data with

We never sell your data, and we don’t share it with advertisers. Data is shared only with the service providers that make the app run:

• Supabase, for database hosting and authentication.
• Apple, for sign‑in (if you use Sign in with Apple) and all payment processing.
• RevenueCat, to know whether your subscription is active.
• AI model providers, to process photo analysis and chat requests as described above.

Each provider receives only what it needs for its job. We may also disclose data if the law genuinely requires it.

06 Health data, handled carefully

Weight, nutrition, and medication information is sensitive, and we treat it that way: it’s used to run the features you asked for and nothing else. WheyGPT is a consumer wellness app, not a healthcare provider, so regulations that apply to medical records (like HIPAA in the United States) do not apply to it. Our promise is simpler and stricter: your health data is never sold and never used for advertising.

07 The leaderboard is opt‑in

The streak leaderboard only shows you if you opt in from Leaderboard settings. Other users see your chosen display name and streak, never your email, weight, food logs, or anything else. You can opt out at any time and disappear from the board.

08 How long we keep data

We keep your data for as long as you have an account, so your history and progress keep working. When you delete your account, your data is permanently deleted. Backups that may briefly contain deleted records expire on a rolling schedule.

09 Your rights and controls

• Access and update. Your profile and targets are editable inside the app.
• Delete everything. Settings → Delete account permanently removes your account and all associated data.
• Export. Email support@wheygpt.app and we’ll send you a copy of your data.
• Complain. If you’re in a region with a data protection authority (like the EU or UK), you have the right to lodge a complaint with it.

Whatever rights your local law gives you (GDPR, CCPA, or otherwise), we honor requests to access, correct, export, or delete your data from anyone, anywhere. One email is enough.

10 Children

WheyGPT is built for adults managing their nutrition and is not directed at children. We do not knowingly collect data from anyone under 13 (or the higher minimum age your country sets). If you believe a child has created an account, contact us and we’ll delete it.

11 Changes to this policy

If we change this policy, we’ll post the new version here and update the date at the top. For meaningful changes, we’ll also let you know in the app.

12 Contact

Questions about your privacy or your data: support@wheygpt.app. We aim to reply within 48 hours.