snapkin
Privacy policy
Last updated 3 September 2026.
Snapkin is a calorie tracker. You photograph a meal and it works out what was on the plate. Doing that means handling food photographs, your weight and your body details, which is about as personal as ordinary software data gets. This page says exactly what is stored, who else sees it, and how to make it stop.
Who is responsible
The controller for everything below is Robot Studios IT Consultancy BV, Hemelshoek 277, 2590 Berlaar, Belgium. Questions, requests and complaints: [email protected].
There is no data protection officer, because the law does not require one at this size.
What is stored, and why
| What | Why |
|---|---|
| Your name, email address, password, language and time zone | To have an account at all, and to show your day in the right language and the right day boundary. |
| Sex, year of birth, height, activity level, goal, diet and any dietary note you write | To compute your calorie and protein targets. The dietary note is free text and is included in the prompt sent to the analyser, so anything you type there goes with it. |
| Your weight, over time | The trend is the point of the app. Entered by hand, or read from a Withings scale if you connect one. |
| Every meal: photographs, the ingredients found, grams, calories and macros, the assumptions behind each, questions asked and your answers, and any chat about the meal | This is the food diary. It is what the app is for. |
| Things it has learned about how you eat, stored as short sentences | So it stops asking the same question. Every one of these is visible in the app and individually deletable. |
| Coach messages | Only generated when you ask for one. |
| Devices you have signed in on: a hashed token, a label and when it was last used | To keep you signed in, and to let you sign a lost device out. |
| Subscription status, the store it came from, and the receipt identifiers the store returns | To know whether the app is paid for. Card details are never sent to us and we could not see them. |
| A record of each analyser call: tokens used and what it cost | Cost control and abuse limits. It records the size of the call, not a second copy of the meal. |
Photographs are stored privately. They are not on a public URL and not in a public bucket. Where the app shows one back to you it does so through a short-lived signed link.
The legal bases
Your account, your subscription and the actual analysis of your meals are processed because we have a contract with you and cannot deliver the app without them (Article 6(1)(b) GDPR).
Your weight, your body details and what you eat are health data under Article 9 GDPR. That category cannot be processed on the strength of a contract, so it is processed on your explicit consent under Article 9(2)(a), asked for separately when you set up your profile. You can withdraw that consent at any time, which is the same action as deleting your account. Withdrawing does not make the processing before it unlawful.
Sending a photograph to the analyser is a separate, explicit consent, asked before the first photograph leaves your phone.
Who else sees it
- Anthropic (United States) — the analyser
- The meal photograph itself, plus the context the estimate needs: your calorie and protein targets, your diet and dietary note, and the short sentences the app has learned about how you usually eat. This is the one recipient that sees your food. It is a processor: it works on our instruction and is not permitted to use your data for its own purposes.
- Withings — only if you connect it
- Weight measurements only. Nothing about your meals is sent to Withings, ever. Disconnecting stops it.
- Apple and Google — payments and sign-in
- If you subscribe, the store handles the payment and tells us only whether the subscription is live and until when. If you sign in with Apple or Google, we receive a verified identifier and your email address. For the purchase itself Apple and Google are the seller and act as their own controllers, not ours.
- Hosting and email
- Servers that run the app, and a mail provider for the handful of transactional emails it sends.
There is no advertising, no analytics, no tracking pixel and no data broker. Your food diary is not sold, shared for advertising, or used to train anybody's model.
Data leaving the EU
The analyser runs in the United States, so your meal photographs are transferred there. That transfer is covered by the European Commission's Standard Contractual Clauses in the data processing agreement with Anthropic. You can ask us for a copy at [email protected] and we will send it.
How long it is kept
- Meals, photographs and weights: until you delete them, or until you delete your account. Deleting a meal deletes its photograph.
- Your account: until you delete it. Deletion is immediate and it is not a soft delete.
- Subscription records: kept after deletion only where accounting law requires it, and reduced to the transaction, not your food.
- Device sessions: dropped when you sign out or remove the device.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict or object to how it is used, or receive it in a portable form. Two of those need nobody's permission and happen immediately, from Profile in the app: Email me my data sends you a zip holding every meal, photograph and number this app holds about you, and Delete account removes all of it (how to delete your account). For anything else, email [email protected] and you will get an answer within a month.
If you think this is being handled badly you can complain to the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be. You may also complain to the authority in the EU country you live in.
Cookies
This site sets two cookies, both first-party and both strictly necessary: one keeps your session, one protects forms against cross-site request forgery. Neither follows you anywhere and neither needs your consent. There are no analytics, advertising or third-party cookies, which is why you are not being asked to dismiss a banner.
Fonts are served from this domain rather than from Google, so loading a page here does not hand your IP address to a third party.
Children
Snapkin is not intended for children. Do not create an account for one, and do not use it to set a calorie target for a child.
Changes
If this policy changes in a way that affects you, you will be told in the app before the change takes effect, not by a silent edit to this page.